backend, cli: fix vulnerability issues scanned by third-party tools

What problem does this PR solve?

Issue Number: close #620
Problem Summary:
Third-party tools treat math/rand and unsafe as insecure packages.
What is changed and how it works:

Replace unsafe
Remove math/rand

Check List
Tests

[ ] Unit test
[ ] Integration test
[ ] Manual test (add detailed scripts or steps below)
[x] No code

Notable changes

[ ] Has configuration change
[ ] Has HTTP API interfaces change
[ ] Has tiproxyctl change
[ ] Other user behavior changes

Release note

Please refer to Release Notes Language Style Guide to write a quality release note.
None

Codecov Report
All modified and coverable lines are covered by tests :white_check_mark:

Please upload report for BASE (main@c8d0d82). Learn more about missing BASE report.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #623   +/-   ##
=======================================
  Coverage        ?   68.74%
=======================================
  Files           ?       85
  Lines           ?     7955
  Branches        ?        0
=======================================
  Hits            ?     5469
  Misses          ?     2097
  Partials        ?      389

Flag
Coverage Δ

unit
68.74% <100.00%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.


tilt: 0.18.8 -> 0.18.9

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://github.com/tilt-dev/tilt/releases.
meta.description for tilt is: "Local development tool to manage your developer instance when your team deploys to Kubernetes in production"
meta.homepage for tilt is: "https://tilt.dev/"
meta.changelog for tilt is: ""
Updates performed

Golang update

To inspect upstream changes

Release on GitHub

Compare changes on GitHub

Impact

Checks done (click to expand)

built on NixOS

The tests defined in passthru.tests, if any, passed

0 of 0 passed binary check by having a zero exit code.

0 of 0 passed binary check by having the new version present in output.

found 0.18.9 with grep in /nix/store/v8ng313j61ds35kpnl2k96rr1086glf4-tilt-0.18.9

directory tree listing: https://gist.github.com/1fc2cfb16fbb2e7965b59450244a65f0

du listing: https://gist.github.com/48f78ad781d87946cc3c67684d978e82

Rebuild report (if merged into master) (click to expand)

4 total rebuild path(s)

1 package rebuild(s)

1 x86_64-linux rebuild(s)
1 i686-linux rebuild(s)
1 x86_64-darwin rebuild(s)
1 aarch64-linux rebuild(s)

First fifty rebuilds by attrpath
tilt

Instructions to test this update (click to expand)

Either download from Cachix:
nix-store -r /nix/store/v8ng313j61ds35kpnl2k96rr1086glf4-tilt-0.18.9 \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.
Or, build yourself:
nix-build -A tilt https://github.com/r-ryantm/nixpkgs/archive/12bcbda66ec94d3aba612b89d1623756f01611c2.tar.gz

After you've downloaded or built it, look at the files and if there are any, run the binaries:
ls -la /nix/store/v8ng313j61ds35kpnl2k96rr1086glf4-tilt-0.18.9
ls -la /nix/store/v8ng313j61ds35kpnl2k96rr1086glf4-tilt-0.18.9/bin

Pre-merge build results
We have automatically built all packages that will get rebuilt due to
this change.
This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.
Result of nixpkgs-review run on x86_64-linux 1

1 package built:

tilt

Maintainer pings
cc @anton-dessiatov @kalbasit for testing.

Result of nixpkgs-review pr 113097 at 12bcbda6 run on aarch64-linux 1

1 package built:

tilt

1 suggestion:

error: no-flags-array
buildFlagsArray is only intended to be used in Bash, not as a Nix attribute.
Near pkgs/applications/networking/cluster/tilt/default.nix:20:3:
   |
20 |   buildFlagsArray = [ "-ldflags=-X main.version=${version}" ];
   |   ^


SSE subscriptions are using GET, despite requesting POST for method

Issue workflow progress

Progress of the issue based on the
Contributor Workflow

[x] 1. The issue provides a reproduction available on https://codesandbox.io/p/sandbox/suspicious-dust-q2n3n2
[ ] 2. A failing test has been provided
[ ] 3. A local solution has been provided
[ ] 4. A pull request is pending review

Describe the bug
GraphQL Mesh uses GET for a subscription method, rather than using POST, even when we explicitly declare that POST should be used.
You can

To Reproduce Steps to reproduce the behavior:
Go to https://codesandbox.io/p/sandbox/suspicious-dust-q2n3n2 to see a fully working bug
.meshrc.yml
sources:
  - name: Lifts
    handler:
      graphql:
        endpoint: '{env.MOONHIGHWAY}'
        subscriptionsProtocol: SSE
        method: POST

Expected behavior
We expected GraphQL mesh to perform a POST request when performing a subscription action.

Environment:

OS:
@graphql-mesh/...: 0.95.6
NodeJS:

Additional context

Fixed in https://github.com/ardatan/graphql-tools/commit/fb5f9ae3bac4710b86bdad4a86bf7a4c7b8eb6e6
Thanks for creating the issue!


Feat: Implement grpc invoke for service provider

Currently, the implement realized with @ztelur 's idea. #244

Use  default grpc transcoding strategy mentioned in the  Google docs to find the service behind
Get service and method from proto files, use jhump/protoreflect, refer to grpcurl's implement
Init descriptors in the function Apply() in grpcproxy filter
Cache Connection object with sync.Pool and extension resigstry
Finally, everything is ready for invoking

#244

This implement rely on the proto files, next stop can use server reflection

should close this issue?

should close this issue?

server reflection is working on progress, keep this until I finish it


Make Doctrine repository as service and autowire/use it anywhere

Living in the edge of the new awesome features like this, I'm proposing before doctrine-bundle 1.8 release, show/test this great feature that simplify our lives and to see how it works! and because soon, best practices should adopt this approach by default. (In fact maker-bundle will do it <3)
What do you think?

Updated commands too. Ready for me! :)

doctrine-bundle 1.8.0 is out! We have repositories as services as a native built-in feature! :tada: :tada:

Merged! I looooove this. @yceruto thanks for working on this!


Proofreading

A few typo/grammar fixes and some minor proofreading. Hopefully, nothing too opinionated here.

@orta Any update on this?

Thanks @krizalys  - this repo wasn't in my highlighted set of repos!
Looks good to me, thanks!


Bump up version to 0.1

@runcom @sameo @rhatdan @cyphar PTAL
We will tag this as 0.1 on the repo.
Signed-off-by: Mrunal Patel<EMAIL_ADDRESS>

:+1:

:+1:

LGTM

LGTM

Thanks! Merging. I'll tag and release tomorrow.

I pushed the v0.1 tag. I'll compile release notes and cut a release tomorrow.


Can't do that brew tap homebrew/homebrew-php

Many Many Eorror, I don't know how to resolve them.

brew untap josegonzalez/php.


MIcrosoft Threat Modeling Tool tag/color/options

I'm trying to find a way to customize the way the TMT looks. For example, if I have a data flow with a specific data sensitivity, is there a way to change the color of the data path or text box? If so, how and can it be configured to happen automatically based on my template?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 60c188c4-9aee-f131-f9c4-2582fcc2db6e
Version Independent ID: bf54e8b2-be4c-2d8b-1bfb-d16fc95da11e
Content: Microsoft Threat Modeling Tool overview - Azure
Content Source: articles/security/develop/threat-modeling-tool.md
Service: security
Sub-service: security-develop
GitHub Login: @jegeib
Microsoft Alias: jegeib

@owp3 Thanks for your feedback! We will investigate and update as appropriate.

@owp3 I do not see any way to do that however I suggest you to please reach out to<EMAIL_ADDRESS>with your questions or concerns on Threat Modeling tool.

@owp3 We will now proceed to close this thread. If there are further questions regarding this matter, please reopen it and we will gladly continue the discussion.


POL-345: Google Inefficient Instance Utilization: CPU Calc Fix

Description
Moves the CPU calculation our of JMESPath and into javascript. Fixes an error when a project has no utilization data.
Issues Resolved
[List any existing issues this PR resolves]
Contribution Check List

[x] All tests pass.
[x] New functionality includes testing.
[x] New functionality has been documented in the README if applicable
[x] New functionality has been documented in CHANGELOG.MD

          1 Warning

:warning:
Should this include readme changes

  Generated by :no_entry_sign: Danger


Enable foreground deletion

causes config policy deletion to hang when child object deletion hangs, and adds "terminating" to the config policy status when deletion is in progress

/cc @JustinKuli

/hold to squash commits

/unhold

@willkutler Please open a PR in the addon-controller to update the CRD there. It's a quick update--you can use the ./build/crd-sync.sh script in the repo.


Add "Medium.com" API

Format: OpenAPI(fka Swagger) 2.0
Official: NO
Url: https://raw.githubusercontent.com/amardeshbd/medium-api-specification/master/medium-api-specification.yaml
Name: Medium.com
Project Page: https://github.com/amardeshbd/medium-api-specification
Logo: https://raw.githubusercontent.com/Medium/medium-logos/master/logo/medium-m-color-200px.png (Source: https://github.com/Medium/medium-logos/tree/master/logo)

@amardeshbd Thank you a lot.
Will add in a moment.

@amardeshbd I added your repo to list of spec sources:
https://github.com/APIs-guru/api-models#spec-sources
We want to motivate more developers to write Swagger specs for API they are using.
It would be great to know what motivate your to write Swagger spec for Medium?

I think it has more to do it the awareness of API spec standard such as 'OpenAPI Specification'. Once people know what it is, and benefits, I don't think there would be much reason not to publish API spec different format that this open standard.
For me, I was impressed with the variety of tools that supports 'OpenAPI Specification'. So, I wanted to exercise my knowledge on writing specification. medium.com's API doc seemed relatively very small to handle. So, wanted to port that over to OpenAPI spec. I hope this gives them something to discuss internally and someday adopt the standard to publish future API spec updates.

Closed the issue, since Medium.com API spec is now live on APIS.guru 😃


Macros not found in Jupyter

I'm getting the following error trying to use ScalaStan inside Jupyter with the almond.sh kernel.
macro implementation not found: generate
Full screenshot:

Hi @avibryant, could you try this with the latest version of ScalaStan (0.9.0) and let us know if it is still an issue?

This is no longer an issue with 0.9.0. Thanks!

Amy,
how are you?
could you take me out of cibotech ?  I am getting the issue alerts from you
and the rest of the members
Thanks
Laila
On Mon, Feb 24, 2020 at 1:56 PM Amy Hawkins<EMAIL_ADDRESS>wrote:

Hi @avibryant https://github.com/avibryant, could you try this with the
latest version of ScalaStan (0.9.0) and let us know if it is still an
issue?
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
https://github.com/cibotech/ScalaStan/issues/112?email_source=notifications&email_token=AD3BIRJVZ5X677Q4MNLUIBLREQRANA5CNFSM4KZ37DGKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEMZJ4OY#issuecomment-590519867,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AD3BIRMHGVNAKYVK24JOAHTREQRANANCNFSM4KZ37DGA
.

--
Laila Puntel

@laila1986 I checked the organization and you are already removed. Since this repo is public you will still be able to "watch" it even without being part of cibotech. You can unwatch any repos that you no longer need notifications on.
Hope you are doing well!
Amy


Upgrade to voice gateway v8

Pull Request Etiquette

[x] I have checked the PRs for upcoming features/bug fixes.
[x] I have read the contributing guidelines.

Changes

[x] Internal code
[ ] Library interface (affecting end-user code)
[ ] Documentation
[ ] Other: _____

Closes Issue: NaN
Description
Upgrades our voice gateway logic to v8.
Reference: https://github.com/discord/discord-api-docs/pull/7075
TODO: Support new encryption modes

[x] aead_aes256_gcm_rtpsize
[x] aead_xchacha20_poly1305_rtpsize

Hello, the issue with voice receive has been fixed in a followup MR that hasn't made it into a new release yet. Please use the older version until then, thanks!


Refactoring markdownIssues and added tests

Check out this issue: https://github.com/probot/weekly-digest/issues/31

:tada: This PR is included in version 0.2.0 :tada:
The release is available on:

npm package (@latest dist-tag)
GitHub release

Your semantic-release bot :package::rocket:


Include page data in navigation entry

Fixes #17
Fixes #27

@inetbiz can this be merged?

@inetbiz can this be merged?

I don't maintain the repo.

@inetbiz can this be merged?

I don't maintain the repo.

Sorry, that should have been directed to @zachleat

@zachleat @binyamin Please!

Ping @zachleat