[Braintree] This merchant is not enabled for Google Pay

Describe the bug
I am setting up Google Pay via Braintree, and no matter what I do I always get the "This merchant is not enabled for Google Pay" error in production mode. I'm passing all the Braintree-specific params according to Google's docs, my merchant has been set up for Google Pay and I added my website as a web integration on the Google Pay console.
Relevant package.json
  "dependencies": {
    "@google-pay/button-react": "^3.1.0",
    "braintree-web": "^3.106.0"
  },

My Google Pay Checkout Component (NextJs, TypeScript, Braintree)
import GooglePayButton from "@google-pay/button-react";
import * as braintree from "braintree-web";
import { env } from "~/env";
import { api } from "~/trpc/react";
import { type RouterInputs } from "~/trpc/shared";
import { type CartItem } from "~/types/CartItem";

const GOOGLE_PAY_MERCHANT_ID = env.NEXT_PUBLIC_GPAYMERCHANTID

const BRAINTREE_MERCHANT_ID = env.NEXT_PUBLIC_BRAINTREEMARCHANTID

export default function GooglePayCheckout({
  theme,
  eventID,
  ccsEventID,
  participantSlug,
  businessName,
  cart,
  submitOrder,
  total
}: {
  theme: string;
  eventID: string;
  ccsEventID: string;
  participantSlug: string | null;
  businessName: string;
  cart: CartItem[];
  submitOrder: (data: RouterInputs["main"]["submitOrder"]) => Promise<void>;
    total: string;
}) {

  const getTotals = api.main.getCartTotalsForExpressCheckout.useMutation();

  const setUpGooglePay = async () => {
    // if (typeof window === "undefined") return;
    //
    // if ((window as any)?.location.protocol !== "https:") return;

    console.log("Initializing Google Pay");

    total.current = cart
      .reduce((acc, item) => acc + item.product.price * item.quantity, 0)
      .toFixed(2);

    const paymentsClient = new google.payments.api.PaymentsClient({
      environment: "PRODUCTION",
      merchantInfo: { merchantId: GOOGLE_PAY_MERCHANT_ID },
      paymentDataCallbacks: {
        // Update the total after we get the shipping address
        onPaymentDataChanged: async (paymentData) => {
          const shippingAddress = paymentData.shippingAddress;

          const data = await getTotals.mutateAsync({
            eventID,
            city: shippingAddress?.locality ?? "",
            state: shippingAddress?.administrativeArea ?? "",
            zip: shippingAddress?.postalCode ?? "",
            participantSlug,
          });

          total.current = data.total.toString();

          return {
            newTransactionInfo: {
              totalPrice: total.current,
              totalPriceStatus: "FINAL",
              currencyCode: "USD",
            },
          };
        },
      },
    });

    const client = await braintree.client.create({
      authorization: env.NEXT_PUBLIC_BRAINTREE_TOKENIZATION_KEY,
    });

    const googleClient = await braintree.googlePayment.create({
      client,
      googlePayVersion: 2,
      googleMerchantId: GOOGLE_PAY_MERCHANT_ID,
    });

    const request = await googleClient.createPaymentDataRequest({
      emailRequired: true,
      callbackIntents: ["SHIPPING_ADDRESS"],
      transactionInfo: {
        totalPrice: total.current,
        currencyCode: "USD",
        totalPriceStatus: "ESTIMATED",
      },
    } as any);

    const cardPaymentMethod = request.allowedPaymentMethods[0];

    if (!cardPaymentMethod) return;

    request.shippingAddressRequired = true;

    cardPaymentMethod.parameters.allowPrepaidCards = true;
    cardPaymentMethod.parameters.allowedCardNetworks = [
      "MASTERCARD",
      "VISA",
      "DISCOVER",
      "AMEX",
    ];
    cardPaymentMethod.parameters.billingAddressRequired = true;
    cardPaymentMethod.parameters.billingAddressParameters = {
      format: "FULL",
      phoneNumberRequired: true,
    };

    const result = await paymentsClient.loadPaymentData(request);

    console.log({ result });
  };

  return (
    <div onClick={setUpGooglePay} className="h-10 w-full cursor-pointer">
      <GooglePayButton
        className="pointer-events-none w-full"
        buttonSizeMode="fill"
        environment="PRODUCTION"
        buttonRadius={6}
        buttonColor={
          theme === "white" || BLACK_BUTTON_THEMES.includes(theme)
            ? "black"
            : "white"
        }
        paymentRequest={{
          apiVersion: 2,
          apiVersionMinor: 0,
          emailRequired: true,
          allowedPaymentMethods: [
            {
              type: "CARD",
              parameters: {
                allowedAuthMethods: ["PAN_ONLY", "CRYPTOGRAM_3DS"],
                allowedCardNetworks: ["MASTERCARD", "VISA", "DISCOVER", "AMEX"],
                billingAddressRequired: true,
                allowPrepaidCards: true,
              },
              tokenizationSpecification: {
                type: "PAYMENT_GATEWAY",
                parameters: {
                  gateway: "braintree",
                  "braintree:apiVersion": "v1",
                  "braintree:sdkVersion": "braintree.client.3.106.0",
                  "braintree:merchantId": BRAINTREE_MERCHANT_ID,
                  "braintree:clientKey":
                    env.NEXT_PUBLIC_BRAINTREE_TOKENIZATION_KEY,
                },
              },
            },
          ],
          merchantInfo: {
            merchantId: GOOGLE_PAY_MERCHANT_ID,
            // merchantName: businessName,
          },
          transactionInfo: {
            totalPriceStatus: "ESTIMATED",
            totalPriceLabel: "Total",
            totalPrice: total.current,
            currencyCode: "USD",
            countryCode: "US",
          },
        }}
      />
    </div>
  );
}

Component

[X] React component (@google-pay/button-react)
[ ] Custom element (@google-pay/button-element)
[ ] Angular component (@google-pay/button-angular)

Component version (e.g. 1.0.0):^3.1.0

Environment:
Website only (Arc/Chrome)

Device: Mac
OS: MacOS 15
Browser: Arc/Chrome
Country/region: United States

Additional context Add any other context about the problem here.

@WilliamWelsh what is the domain name of your integration?

@WilliamWelsh what is the domain name of your integration?

https://quic.pics

thanks. is there a way for me to test the Google Pay integration on quic.pics?

You can try here (only visible on this specific event/page) https://www.quic.pics/pupper-party-02-2024
Click an image, click the first product (Digital Download), add to cart, checkout, and the Google Pay button should show

@WilliamWelsh you need to register www.quic.pics and not only quic.pics - Drop a comment here once done (just add a new web integration and upload the same screenshots). I will approve you then.

@WilliamWelsh you need to register www.quic.pics and not only quic.pics - Drop a comment here once done (just add a new web integration and upload the same screenshots). I will approve you then.

Done

Approved. Works now.

Approved. Works now.

Thank you!


doublecmd: 1.1.1 -> 1.1.2

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://repology.org/project/doublecmd/versions.
meta.description for doublecmd is: Two-panel graphical file manager written in Pascal
meta.homepage for doublecmd is: https://doublecmd.sourceforge.io/
Updates performed

Version update

To inspect upstream changes

Release on GitHub

Compare changes on GitHub

Impact

Checks done (click to expand)

built on NixOS
The tests defined in passthru.tests, if any, passed
found 1.1.2 with grep in /nix/store/9npkxh9g31y0hyv21mphqp3ipfnsrd41-doublecmd-1.1.2
found 1.1.2 in filename of file in /nix/store/9npkxh9g31y0hyv21mphqp3ipfnsrd41-doublecmd-1.1.2

Rebuild report (if merged into master) (click to expand)

1 total rebuild path(s)

1 package rebuild(s)

First fifty rebuilds by attrpath
doublecmd

Instructions to test this update (click to expand)

Either download from Cachix:
nix-store -r /nix/store/9npkxh9g31y0hyv21mphqp3ipfnsrd41-doublecmd-1.1.2 \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.
Or, build yourself:
nix-build -A doublecmd https://github.com/r-ryantm/nixpkgs/archive/77bced9b539a0c1950df954a6a9385a42cdbe0e0.tar.gz

Or:
nix build github:r-ryantm/nixpkgs/77bced9b539a0c1950df954a6a9385a42cdbe0e0#doublecmd

After you've downloaded or built it, look at the files and if there are any, run the binaries:
ls -la /nix/store/9npkxh9g31y0hyv21mphqp3ipfnsrd41-doublecmd-1.1.2
ls -la /nix/store/9npkxh9g31y0hyv21mphqp3ipfnsrd41-doublecmd-1.1.2/bin

Pre-merge build results
We have automatically built all packages that will get rebuilt due to
this change.
This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.
Result of nixpkgs-review run on x86_64-linux 1

1 package built:

doublecmd

Maintainer pings
cc @AndersonTorres for testing.

Result of nixpkgs-review pr 259517 run on x86_64-linux 1

1 package built:

doublecmd


[FR] highlight variant stock in parts views

Please verify that this feature request has NOT been suggested before.

[X] I checked and didn't find a similar feature request

Problem statement
hi,
including the variant stock in the stock of the template part is in general a good idea but it causes a bit of confusion for some users on our side. If the part view is used, it is not clear if the displayed stock includes variants until the part is selected and the stock view is checked.
Suggested solution
Adding an info symbol next to the stock like it is already done in the stock allocation view for build orders probably would clear things up already. It would be premium, if the actual variant stock would be displayed in the tooltip.
Describe alternatives you've considered
Obviously this is not really necessary as stock information could be directly viewed by going via the stock views and not the part views. However users will always have their weird ways of accessing information and one probably has to tailor into this...
Examples of other systems
No response
Do you want to develop this?

[ ] I want to develop this.

@T0jan good point, this would be a great thing to implement for the user interface refactor
We could also better highlight the following "quantities":

Allocated stock
"External" stock
Building stock
Damaged / etc

not stale

not stale


Housekeeping: Setup readthedocs

The documentation of this module can be improved.
Currently I'm working on utilizing a cookiecutter template for this module.
One of the features is automatic documentation generation and upload to read the docs.
@m3nu Can you create a account at readthedocs.io and stup the security keys in the repo settings, for auto uploading of the documentation with github actions?
You can find the steps to set it up here:
https://cookiecutter-uv-hypermodern-python.readthedocs.io/en/latest/guide.html#read-the-docs

I've made you an admin for this repo.

:sparkles: Documentation is now available at: https://invoice2data.readthedocs.io/latest/


Update to .NET 6, use project-based FAKE build instead of script

Hi there, In this PR i took a naïve go at upating the project to .NET 6:

updated the fornax tool to target .NET 6
migrated the FAKE build pipeline to a runnable project in the repo root. The reason for that was that i could not for the life of me make the build script work with updated dependencies via paket (some error about not finding Microsoft.Build.Framework). This project-based build is in my experience more stable than scripts. the SAFE stack for example uses the same approach.

I made sure that the tool works locally using the result of dotnet publish as well as the nuget package from the Pack target, i was however not sure about this line:
https://github.com/ionide/Fornax/blob/4187a3818807d65fc05365bb9aa34f2cb87a78c3/src/Fornax/FSIRefs.fs#L133
as the net5.0 tool would not run with 3.1 sdk anyways, but to mirror this pattern i left both 3.1 and 5.0 lines in that file intact.

can i further help to get this merged?


Add bindForClient utility function

Coverage increased (+0.2%) to 91.724% when pulling 64796e6ceeb3e4ea9514ad4d14a8d80a10d10fd4 on bindForClient into 85d523314d3c5b17b0185332893863cd106a8391 on master.


🐛 BUG: Astro check support for Object.groupBy()

Describe the Bug
Node v21.0.0 adds support for Object.groupBy() method - this in turn is supported by TypeScript v5.4.0 release.
This runs fine in Astro however it fails astro check.
From what I can tell, this is due to https://github.com/withastro/language-tools/blob/main/pnpm-lock.yaml#L34 using TypeScript v5.2.2
Steps to Reproduce

npm init astro with Node >= 21
Add the following to the top of an Astro page

const rockets = [
  { name: "Orion", manufacturer: "NASA" },
  { name: "Falcon Heavy", manufacturer: "SpaceX" },
] as const;
const groupedByManufacturer = Object.groupBy(
  rockets,
  ({ manufacturer }) => manufacturer,
);
console.log("NASA Rocket: ", groupedByManufacturer.NASA?.[0].name);

Console output should be NASA Rocket:  Orion
Run astro check
Error Property 'groupBy' does not exist on type 'ObjectConstructor'.

I've tried to create a PR to address this but don't seem to have permission to push a new branch :(

You need to fork the repo and push the branch to your fork before opening a PR.
https://docs.github.com/en/get-started/exploring-projects-on-github/contributing-to-a-project
But the typescript dependency is a peer dependency with range ^5.0.0, it will use whichever version of typescript is used in your own project.
If you run npm install -P typescript@latest, you'll get the latest version in your Astro project, and it should work. Can you try that?

FYI, we don't hardcode any versions of TypeScript inside the tooling, we always use whatever the project has. So for missing properties like this, you can always just update your version of TypeScript.


update to 2018.3

Hi! This is the friendly automated conda-forge-linting service.
I just wanted to let you know that I linted all conda-recipes in your PR (recipe) and found it was in an excellent condition.


crouton on chrome os canary 86

is crouton realy usable on chrome os canary 86?
i can create a chroot like this:
crouton -r sid -t gnome-desktop -t audio -t xorg
and start it with startgnome
but seems i cant do anything with it
hmm?
Please paste the output of the following command here: sudo edit-chroot -all

Please describe your issue:
If known, describe the steps to reproduce the issue:

You didn't paste the output of sudo edit-chroot -all. That's kind of necessary in order for us to help you.

Are you running startgnome as root?

Are you running startgnome as root?


pull request for e2e test at 11/27/2016 00:26:04

:white_check_mark: Validation status: passed
For more details, please refer to the build report.
Note: If you changed an existing file name or deleted a file, broken links in other files to the deleted or renamed file are listed only in the full build report.


Add support email to footer

Is your feature request related to a problem? Please describe.
Users do not know how to contact administrators beside reports.
Describe the solution you'd like
Add the support mailing list to the footer.
Describe alternatives you've considered
None
Additional context
None

Resolved in 4ab5187ca3e36f868b198fe669ea01edab39ae83.


Actually connect to DB when checking connections

👋 Howdy, this is my first PR for this project. This is a pretty small fix for an issue I noticed while first getting the application running.
If you check connections by requesting POST /api/reports?option=CheckConnections, the response is an error if the database is down and the application has never connected to it before, but it succeeds if the database has gone down after the application has previously connected to it.
This resolves the issue by making sure we actually try to transact with the database when checking its connection.
To reproduce:

Start Postgres
Start application
Request POST /api/reports?option=CheckConnections. You should receive a 200 response.
Stop Postgres
Request POST /api/reports?option=CheckConnections. Before applying this patch, you should receive a 200 response. After applying, you should receive a 500 response.

I’m not sure how to effectively write a test for this; if anyone has advice on how to do so, I’m happy to add one.
(Apologies for not submitting this as an issue first, but it seemed so small that it wouldn’t be worthwhile. Please let me know if you’d rather I do so for similar things in the future!)
Checklist

[x] Tested locally?
[x] Added new dependencies? (No)
[x] Updated the docs? (N/A)
[ ] Added a test?
[x] Did you check for sensitive data, and remove any?
[ ] Are additional approvals needed for this change?
[x] Are there potential vulnerabilities or licensing issues with any new dependencies introduced? (N/A)

I think the build might be breaking because I’m an external user, don’t have access to the repo secrets, and the test DB uses secrets for its credentials: https://github.com/CDCgov/prime-data-hub/blob/dde4069b8fd8bf69896ac9f9bfab50e7672d4d6f/.github/workflows/build.yml#L18-L33
Seems like it might be reasonable to include the credentials for the test DB as cleartext/non-secrets for testing purposes (I’m assuming the test DB should not be sensitive). I’d be happy to do that in this PR or submit a second PR for that.

I think the build might be breaking because I’m an external user, don’t have access to the repo secrets, and the test DB uses secrets for its credentials: https://github.com/CDCgov/prime-data-hub/blob/dde4069b8fd8bf69896ac9f9bfab50e7672d4d6f/.github/workflows/build.yml#L18-L33
Seems like it might be reasonable to include the credentials for the test DB as cleartext/non-secrets for testing purposes (I’m assuming the test DB should not be sensitive). I’d be happy to do that in this PR or submit a second PR for that.

@cglodosky Could you look at this action run? https://github.com/CDCgov/prime-data-hub/runs/1675225637?check_suite_focus=true. Could Rob's status in our project be the cause?

@cglodosky Could you look at this action run? https://github.com/CDCgov/prime-data-hub/runs/1675225637?check_suite_focus=true. Could Rob's status in our project be the cause?

OK, I dug into this a little bit more, and there are a few things going on here:

The workflow uses secrets for the DB configuration (as I mentioned above), and secrets are scoped to the repo. That is, they’re only available to PR from branches in this repo, not other repos (even if the owner of that repo has push access here). Now that I am a member of the repo, I can fix this by closing this PR and submitting a new one from a branch here rather than in my fork.

The env vars set by the secrets aren’t actually used by the application, so they only affect the workflow step that creates the DB, and don’t affect what DB the app tries to read. We use secrets to set POSTGRESQL_USER and POSTGRESQL_PWD, but the application reads POSTGRES_USER and POSTGRES_PASSWORD: https://github.com/CDCgov/prime-data-hub/blob/3ed4ea665b16e3073a9d313ac3e744b8537be257/prime-router/src/main/kotlin/azure/DatabaseAccess.kt#L31-L33
I’m guessing this is a mistake or typo. Should we change the workflow so it uses the same environment variable names as the application?

For the purposes of testing/packaging, it looks like the values of the secrets have to be prime and changeIT!, since these are hard-coded in two parts of pom.xml. Not sure if they are also hard-coded anywhere else:
https://github.com/CDCgov/prime-data-hub/blob/3ed4ea665b16e3073a9d313ac3e744b8537be257/prime-router/pom.xml#L39-L41
https://github.com/CDCgov/prime-data-hub/blob/3ed4ea665b16e3073a9d313ac3e744b8537be257/prime-router/pom.xml#L296-L301
It might make sense to change pom.xml to use a property/variable for both of those, and make sure the workflows set it by calling:
- name: Build Maven Package
  run: mvn -B clean package --file pom.xml -Dpg.user=$POSTGRES_USER -Dpg.password=$POSTGRES_PASSWORD

So, I can fix this PR in the short term by closing it and creating a new PR from a branch in this repo. That doesn’t seem like a great solution, though, since other external contributors will just run into the same problem.
I think it makes more sense to do 3 things here:

Don’t use secrets (but still set environment variables) for the Postgres user and password. (As far as I can tell, this is safe and reasonable to do regardless of whether the base branch is production, but we could also just do it for when the base branch is not production.)
Update those environment variable names to match the ones used by the application. (POSTGRES_USER and POSTGRES_PASSWORD)
Update the workflow file and pom.xml to set and use properties for the above environment variables when calling mvn package so those environment variables actually get used in the packaging phase if they’re set.

A simpler alternative might be to just get rid of all the environment variable and secrets usage for DB configuration in the workflow files.
Does that make sense? Should I do that here or in a separate PR?

OK, I dug into this a little bit more, and there are a few things going on here:

The workflow uses secrets for the DB configuration (as I mentioned above), and secrets are scoped to the repo. That is, they’re only available to PR from branches in this repo, not other repos (even if the owner of that repo has push access here). Now that I am a member of the repo, I can fix this by closing this PR and submitting a new one from a branch here rather than in my fork.

The env vars set by the secrets aren’t actually used by the application, so they only affect the workflow step that creates the DB, and don’t affect what DB the app tries to read. We use secrets to set POSTGRESQL_USER and POSTGRESQL_PWD, but the application reads POSTGRES_USER and POSTGRES_PASSWORD: https://github.com/CDCgov/prime-data-hub/blob/3ed4ea665b16e3073a9d313ac3e744b8537be257/prime-router/src/main/kotlin/azure/DatabaseAccess.kt#L31-L33
I’m guessing this is a mistake or typo. Should we change the workflow so it uses the same environment variable names as the application?

For the purposes of testing/packaging, it looks like the values of the secrets have to be prime and changeIT!, since these are hard-coded in two parts of pom.xml. Not sure if they are also hard-coded anywhere else:
https://github.com/CDCgov/prime-data-hub/blob/3ed4ea665b16e3073a9d313ac3e744b8537be257/prime-router/pom.xml#L39-L41
https://github.com/CDCgov/prime-data-hub/blob/3ed4ea665b16e3073a9d313ac3e744b8537be257/prime-router/pom.xml#L296-L301
It might make sense to change pom.xml to use a property/variable for both of those, and make sure the workflows set it by calling:
- name: Build Maven Package
  run: mvn -B clean package --file pom.xml -Dpg.user=$POSTGRES_USER -Dpg.password=$POSTGRES_PASSWORD

So, I can fix this PR in the short term by closing it and creating a new PR from a branch in this repo. That doesn’t seem like a great solution, though, since other external contributors will just run into the same problem.
I think it makes more sense to do 3 things here:

Don’t use secrets (but still set environment variables) for the Postgres user and password. (As far as I can tell, this is safe and reasonable to do regardless of whether the base branch is production, but we could also just do it for when the base branch is not production.)
Update those environment variable names to match the ones used by the application. (POSTGRES_USER and POSTGRES_PASSWORD)
Update the workflow file and pom.xml to set and use properties for the above environment variables when calling mvn package so those environment variables actually get used in the packaging phase if they’re set.

A simpler alternative might be to just get rid of all the environment variable and secrets usage for DB configuration in the workflow files.
Does that make sense? Should I do that here or in a separate PR?

I wound up coding up an example of the above in #271, since I think seeing the code is actually much clearer than the explanation in this case (and the code changes are not too complex).

I wound up coding up an example of the above in #271, since I think seeing the code is actually much clearer than the explanation in this case (and the code changes are not too complex).

This all makes sense to me, but I'd like to see what @cglodosky has to say before we approve. Great detective work @Mr0grog

This all makes sense to me, but I'd like to see what @cglodosky has to say before we approve. Great detective work @Mr0grog

Thanks! Glad to be helping out. 😄

Thanks! Glad to be helping out. 😄

Rebased this on master to get the new CI setup where builds and unit tests are skipped.

Rebased this on master to get the new CI setup where builds and unit tests are skipped.


docker build <this project> SEGFAULTS

Please see the following build log when I attempt to docker build this project.
https://gist.github.com/lag-linaro/c45071d954c213868107c8dc487ae0a6
Any idea what's happening?

Hi @lag-linaro - out of curiosity, how much memory does your build machine have?

Around 256GB give or take a Byte or 2.

Ah, ok - so OOM is probably not the issue!

Ok, I tried building this on my machine and it worked ok - could you try again (you might want to delete all intermediary layers from your previous build to be on the safe side)?  If it still fails, what environment (OS version, Docker version, etc) are you running?

@lag-linaro Also, if you just want to use the image, it's part of the official Docker repository, so you can run it via docker run -it rakudo-star.

@hoelzro thanks for getting back to me.
docker run and docker pull won't work for me since I am building on ARM64v8.
I don't see any reason why docker build shouldn't work on this architecture.
Is there anything I can do to debug why it's segfaulting?

Is it segfaulting when building Rakudo? Can you check if it does the same outside the docker build environment?

@JJ Good suggestion! @lag-linaro Could you try that?

Could well be a tooling issue.  This appears to be working in Docker's Official Images Builder.
Closing this for now.  Will re-visit if we experience any more issues.


Shortcut Guide UI Update

Summary of the Pull Request

Updated shortcut guide UI and text to match that of the .17 Powertoys release.

PR Checklist

[x] Applies to #2599
[x] CLA signed. If not, go over here and sign the CLA
[] Tests added/passed
[x] Requires documentation to be updated
[x] I've discussed this with core contributors already. If not checked, I'm ready to accept this work might be rejected in favor of a different grand plan. Issue number where a discussion took place: #2599

make it "System default"

It was System default app mode because that is the terminology used in the Windows 10 Settings.


Mac OSX version not available with v0.18

There is no *.pkg file generated for version 0.18.0

It is unexpectedly failing. After some analysis, it seems to be a travis issue, they changed the base image used to build OSX and now some dep is not found. I will investigate further.
I ran an old OSX build that worked (for 0.16.0) and now it is failing with exactly the same codebase and travis conf. Very weird. I am waiting for the new travis-ci.com app and check if it works.

The Mac OS pkg building has been discontinued. Instead, RVM framework is leveraged to install 3scale_toolbox gem. Doc has been updated:

    Install RVM

curl -sSL https://get.rvm.io | bash -s stable

    Install Ruby 2.7.1

rvm install 2.7.1

    Use Ruby 2.7.1

rvm use 2.7.1

    Install 3scale_toolbox gem

gem install 3scale_toolbox

    Test executing help command

3scale help

Reopen the issue for further discussion.


XIONE-3215: getFirmwareDownloadPercent sometimes returns 100 early

Reason for change: Updates the percentage only for firmware and not to redirect response codes before.
Risks:Low
Test Procedure: Check API working.
Signed-off-by: Rohith Damodaran<EMAIL_ADDRESS>

Verified on Jenkins.


FOLK-101: Migrating Content Editors to Orchard Core

FOLK-101

@DAud-IcI  would you like to review this PR again? If not, please approve your requested changes.

@DAud-IcI  would you like to review this PR again? If not, please approve your requested changes.

The last request I had still hasn't been addressed yet. As I have wrote, regex should never be used to evaluate HTML so self.scriptsHtml.match(...) should be replaced. It should be
            Array.from(new DOMParser().parseFromString(self.scriptsHtml, 'text/html').getElementsByTagName('script'))
                .forEach((scriptElement) => window.eval(scriptElement.innerHTML));

@barthamark ?


PlayerAPI 3 remaining endpoints

(WIP)

The following classes will move from SpotifyApi.NetCore.Models to SpotifyApi.NetCore:
Episodes
PagedArtists
PagedT
PagedEpisodes
PagedShows
PagedTracks
RepeatStates
Show
TimeRange

CurrentPlaybackContext is now abstract, a super class for CurrentTrackPlaybackContext and CurrentEpisodePlaybackContext. This should be a backwards compatible with all usage (that I can think of), but if any problems, let me know.


csrf_token generate, regardless of middleware

Hello everybody,
I've been using the Lumen and realized that the helper csrf_token() only works with uncommenting the lines:

$app->middleware([
// 'Illuminate\Cookie\Middleware\EncryptCookies',
// 'Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse',
   'Illuminate\Session\Middleware\StartSession',
// 'Illuminate\View\Middleware\ShareErrorsFromSession',
   'Laravel\Lumen\Http\Middleware\VerifyCsrfToken',
]);

But not any time instead of using the middleware for it, we could call a method in the __construct Illuminate\Session\Store.php

public function __construct($name, SessionHandlerInterface $handler, $id = null)
{
    ...
    $this->start();
}

And so the token is available.
I do not know if it interferes with the performance, but if it can further facilitate this, we have two options to generate csrf_token ().
Thank you.
Sorry, but I'm Brazilian, my Inglês is not yet so advanced, so I used the Google translator for language conversion.

I understood that the middleware serves to validate the token does not work the way I thought.
You can cancel the issue.
Thank you.


Prepare a template for informational partners for sending internal e-mail to employees

Companies would like to promote our event with internal employees. They need some brief desciption and links

@akuleshov7 we have PDF call for papers for that: https://latexonline.cc/compile?git=https%3A%2F%2Fgithub.com%2Fyegor256%2Ficcq.github.io&target=cfp%2F2023%2Fcfp.tex&command=pdflatex&trackId=1590577068733


CI: K8sDatapathConfig Encapsulation Check vxlan connectivity with per-endpoint routes fails on k8s-all

every build on https://jenkins.cilium.io/job/cilium-master-K8s-all/ fails
/home/jenkins/workspace/cilium-master-K8s-all/1.14-gopath/src/github.com/cilium/cilium/test/ginkgo-ext/scopes.go:514
Kubernetes DNS did not become ready in time
/home/jenkins/workspace/cilium-master-K8s-all/1.14-gopath/src/github.com/cilium/cilium/test/ginkgo-ext/scopes.go:634

focused test run also fails in the same way on 1.14, so it's unlikely this is infra/ci related: https://jenkins.cilium.io/job/Cilium-PR-Ginkgo-Tests-Kernel-Focus/100/

It looks like this test sometimes also fails in pipelines other than k8s-all. It failed before in #14097 with the same error message.
It also just failed in #14525. That last PR should only affect the IPSec code path so I'm fairly confident it's a flake.
https://jenkins.cilium.io/job/Cilium-PR-K8s-1.20-kernel-4.9/316/testReport/junit/Suite-k8s-1/20/K8sDatapathConfig_Encapsulation_Check_vxlan_connectivity_with_per_endpoint_routes/
ae88713e_K8sDatapathConfig_Encapsulation_Check_vxlan_connectivity_with_per-endpoint_routes.zip

It looks like this test sometimes also fails in pipelines other than k8s-all. It failed before in #14097 with the same error message.
It also just failed in #14525. That last PR should only affect the IPSec code path so I'm fairly confident it's a flake.
https://jenkins.cilium.io/job/Cilium-PR-K8s-1.20-kernel-4.9/316/testReport/junit/Suite-k8s-1/20/K8sDatapathConfig_Encapsulation_Check_vxlan_connectivity_with_per_endpoint_routes/
ae88713e_K8sDatapathConfig_Encapsulation_Check_vxlan_connectivity_with_per-endpoint_routes.zip

Hit this on k8s 1.20: https://jenkins.cilium.io/job/Cilium-PR-K8s-1.20-kernel-4.9/344/testReport/junit/Suite-k8s-1/20/K8sDatapathConfig_Encapsulation_Check_vxlan_connectivity_with_per_endpoint_routes/

Hit this on k8s 1.20: https://jenkins.cilium.io/job/Cilium-PR-K8s-1.20-kernel-4.9/344/testReport/junit/Suite-k8s-1/20/K8sDatapathConfig_Encapsulation_Check_vxlan_connectivity_with_per_endpoint_routes/

I've hit this in https://github.com/cilium/cilium/pull/14571 via https://jenkins.cilium.io/job/Cilium-PR-K8s-1.20-kernel-4.9/359/.

I've hit this in https://github.com/cilium/cilium/pull/14571 via https://jenkins.cilium.io/job/Cilium-PR-K8s-1.20-kernel-4.9/359/.

Failed again on the same PR ^^ https://jenkins.cilium.io/job/Cilium-PR-K8s-1.20-kernel-4.9/366/testReport/junit/Suite-k8s-1/20/K8sDatapathConfig_Encapsulation_Check_vxlan_connectivity_with_per_endpoint_routes/

Failed again on the same PR ^^ https://jenkins.cilium.io/job/Cilium-PR-K8s-1.20-kernel-4.9/366/testReport/junit/Suite-k8s-1/20/K8sDatapathConfig_Encapsulation_Check_vxlan_connectivity_with_per_endpoint_routes/

I managed to reproduce this locally with:
NFS=1 NETNEXT=1 KUBEPROXY=0 ginkgo -v --focus "K8sDatapathConfig.*Check vxlan connectivity with per-endpoint routes" -- -cilium.provision=false -cilium.holdEnvironment=true -cilium.skipLogs -cilium.runQuarantined

Although I'm seeing a different failure:
17:47:17 STEP: Applying policy /home/vagrant/go/src/github.com/cilium/cilium/test/k8sT/manifests/l3-policy-demo.yaml
17:47:25 STEP: Waiting for 4m0s for 5 pods of deployment demo_ds.yaml to become ready
17:47:25 STEP: WaitforNPods(namespace="202102011747k8sdatapathconfigencapsulationcheckvxlanconnectivit", filter="")
17:47:30 STEP: WaitforNPods(namespace="202102011747k8sdatapathconfigencapsulationcheckvxlanconnectivit", filter="") => <nil>
17:47:30 STEP: Checking pod connectivity between nodes
17:47:30 STEP: WaitforPods(namespace="202102011747k8sdatapathconfigencapsulationcheckvxlanconnectivit", filter="-l zgroup=testDSClient")
17:47:30 STEP: WaitforPods(namespace="202102011747k8sdatapathconfigencapsulationcheckvxlanconnectivit", filter="-l zgroup=testDSClient") => <nil>
17:47:30 STEP: WaitforPods(namespace="202102011747k8sdatapathconfigencapsulationcheckvxlanconnectivit", filter="-l zgroup=testDS")
17:47:30 STEP: WaitforPods(namespace="202102011747k8sdatapathconfigencapsulationcheckvxlanconnectivit", filter="-l zgroup=testDS") => <nil>

---
K8sDatapathConfig Encapsulation Check vxlan connectivity with per-endpoint routes
at /home/jibi/go/src/github.com/cilium/cilium/test/ginkgo-ext/scopes.go:514

[Connectivity test between nodes failed
Expected
    <bool>: false
to be true]

Managed to reproduce the same error locally:
K8sDatapathConfig Encapsulation Check vxlan connectivity with per-endpoint routes
at /home/jibi/go/src/github.com/cilium/cilium2/test/ginkgo-ext/scopes.go:514
[Kubernetes DNS did not become ready in time]

cilium-operator was in CrashLoopBackOff state:
vagrant@k8s1:~$ k get pods --all-namespaces
NAMESPACE                                                         NAME                              READY   STATUS             RESTARTS   AGE
202102021615k8sdatapathconfigencapsulationcheckvxlanconnectivit   test-k8s2-749b7c58cc-tjrbn        2/2     Running            0          100m
202102021615k8sdatapathconfigencapsulationcheckvxlanconnectivit   testclient-bk52x                  1/1     Running            0          100m
202102021615k8sdatapathconfigencapsulationcheckvxlanconnectivit   testclient-g2d96                  1/1     Running            0          100m
202102021615k8sdatapathconfigencapsulationcheckvxlanconnectivit   testds-24scm                      2/2     Running            0          100m
202102021615k8sdatapathconfigencapsulationcheckvxlanconnectivit   testds-sp677                      2/2     Running            0          100m
cilium-monitoring                                                 grafana-b4dbb994f-nwdk6           1/1     Running            0          101m
cilium-monitoring                                                 prometheus-688959f59d-lbdl4       1/1     Running            0          101m
kube-system                                                       cilium-jtgzz                      1/1     Running            0          101m
kube-system                                                       cilium-operator-845ddfc68-h2ngh   0/1     CrashLoopBackOff   5          101m
kube-system                                                       cilium-xdnz2                      1/1     Running            0          101m
kube-system                                                       coredns-7ff984754c-gvqlx          1/1     Running            0          100m
kube-system                                                       etcd-k8s1                         1/1     Running            0          120m
kube-system                                                       kube-apiserver-k8s1               1/1     Running            0          120m
kube-system                                                       kube-controller-manager-k8s1      1/1     Running            0          120m
kube-system                                                       kube-scheduler-k8s1               1/1     Running            0          120m
kube-system                                                       log-gatherer-rt4qp                1/1     Running            0          114m
kube-system                                                       log-gatherer-xsrn7                1/1     Running            0          114m

I grabbed the full logs but the most interesting part seems to be:
level=warning msg="github.com/cilium/cilium/operator/ccnp_event.go:128: watch of *v2.CiliumClusterwideNetworkPolicy ended with: an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" subsys=klog
level=warning msg="github.com/cilium/cilium/operator/cnp_event.go:139: watch of *v2.CiliumNetworkPolicy ended with: an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" subsys=klog
level=warning msg="github.com/cilium/cilium/operator/watchers/cilium_endpoint.go:82: watch of *v2.CiliumEndpoint ended with: an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" subsys=klog
level=warning msg="github.com/cilium/cilium/operator/k8s_identity.go:184: watch of *v2.CiliumIdentity ended with: an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" subsys=klog
level=warning msg="github.com/cilium/cilium/operator/cilium_node.go:89: watch of *v2.CiliumNode ended with: an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" subsys=klog
level=debug msg="Operator API server closed" address="<IP_ADDRESS>:9234" subsys=cilium-operator-api
level=info msg="Received termination signal. Shutting down" subsys=cilium-operator-generic

Shortly after that it recovered by itself:
vagrant@k8s1:~$ k get pods --all-namespaces
NAMESPACE                                                         NAME                              READY   STATUS    RESTARTS   AGE
202102021615k8sdatapathconfigencapsulationcheckvxlanconnectivit   test-k8s2-749b7c58cc-tjrbn        2/2     Running   0          101m
202102021615k8sdatapathconfigencapsulationcheckvxlanconnectivit   testclient-bk52x                  1/1     Running   0          101m
202102021615k8sdatapathconfigencapsulationcheckvxlanconnectivit   testclient-g2d96                  1/1     Running   0          101m
202102021615k8sdatapathconfigencapsulationcheckvxlanconnectivit   testds-24scm                      2/2     Running   0          101m
202102021615k8sdatapathconfigencapsulationcheckvxlanconnectivit   testds-sp677                      2/2     Running   0          101m
cilium-monitoring                                                 grafana-b4dbb994f-nwdk6           1/1     Running   0          102m
cilium-monitoring                                                 prometheus-688959f59d-lbdl4       1/1     Running   0          102m
kube-system                                                       cilium-jtgzz                      1/1     Running   0          102m
kube-system                                                       cilium-operator-845ddfc68-h2ngh   1/1     Running   7          102m
kube-system                                                       cilium-xdnz2                      1/1     Running   0          102m
kube-system                                                       coredns-7ff984754c-gvqlx          1/1     Running   0          101m
kube-system                                                       etcd-k8s1                         1/1     Running   0          121m
kube-system                                                       kube-apiserver-k8s1               1/1     Running   0          121m
kube-system                                                       kube-controller-manager-k8s1      1/1     Running   0          121m
kube-system                                                       kube-scheduler-k8s1               1/1     Running   0          121m
kube-system                                                       log-gatherer-rt4qp                1/1     Running   0          115m
kube-system                                                       log-gatherer-xsrn7                1/1     Running   0          115m

Reproduced the actual failure:
K8sDatapathConfig Encapsulation Check vxlan connectivity with per-endpoint routes
at /home/jibi/go/src/github.com/cilium/cilium-test/test/ginkgo-ext/scopes.go:514

[Kubernetes DNS did not become ready in time]

The deployment of coredns seems to be failing due to:
15:16:24 STEP: Kubernetes DNS is not ready yet: unable to resolve service name kubernetes.default.svc.cluster.local with DNS server <IP_ADDRESS> by running 'dig +short kubernetes.default.svc.cluster.local @<IP_ADDRESS>' Cilium pod: Exitcode: 9
Err: Process exited with status 9
Stdout:
 	 ;; connection timed out; no servers could be reached

Stderr:
 	 command terminated with exit code 9

although coredns looks healthy:
vagrant@k8s1:~$ ks get pods -l k8s-app=kube-dns
NAME                      READY   STATUS    RESTARTS   AGE
coredns-cc45bff6b-7zqsw   1/1     Running   0          18m

vagrant@k8s1:~$ ks describe pod -l k8s-app=kube-dns
Name:               coredns-cc45bff6b-7zqsw
Namespace:          kube-system
Priority:<PHONE_NUMBER>
PriorityClassName:  system-cluster-critical
Node:               k8s2/<IP_ADDRESS>
Start Time:         Thu, 04 Feb 2021 14:12:32 +0000
Labels:             k8s-app=kube-dns
                    pod-template-hash=cc45bff6b
Annotations:        seccomp.security.alpha.kubernetes.io/pod: docker/default
Status:             Running
IP:                 <IP_ADDRESS>
Controlled By:      ReplicaSet/coredns-cc45bff6b
Containers:
  coredns:
    Container ID:  docker://edc002608d440ee4f771b653f4aea55be12e55f989b0a307253d46583bc691bd
    Image:         k8s.gcr.io/coredns:1.3.1
    Image ID:      docker-pullable://k8s.gcr.io/coredns@sha256:02382353821b12c21b062c59184e227e001079bb13ebd01f9d3270ba0fcbf1e4
    Ports:         53/UDP, 53/TCP, 9153/TCP
    Host Ports:    0/UDP, 0/TCP, 0/TCP
    Args:
      -conf
      /etc/coredns/Corefile
    State:          Running
      Started:      Thu, 04 Feb 2021 14:12:49 +0000
    Ready:          True
    Restart Count:  0
    Limits:
      memory:  170Mi
    Requests:
      cpu:        100m
      memory:     70Mi
    Liveness:     http-get http://:8080/health delay=60s timeout=5s period=10s #success=1 #failure=5
    Readiness:    http-get http://:8080/health delay=0s timeout=1s period=10s #success=1 #failure=3
    Environment:  <none>
    Mounts:
      /etc/coredns from config-volume (ro)
      /var/run/secrets/kubernetes.io/serviceaccount from coredns-token-r4mkp (ro)
Conditions:
  Type              Status
  Initialized       True
  Ready             True
  ContainersReady   True
  PodScheduled      True
Volumes:
  config-volume:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      coredns
    Optional:  false
  coredns-token-r4mkp:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  coredns-token-r4mkp
    Optional:    false
QoS Class:       Burstable
Node-Selectors:  <none>
Tolerations:     CriticalAddonsOnly
                 node.kubernetes.io/not-ready:NoExecute for 300s
                 node.kubernetes.io/unreachable:NoExecute for 300s
Events:
  Type    Reason     Age   From               Message
  ----    ------     ----  ----               -------
  Normal  Scheduled  20m   default-scheduler  Successfully assigned kube-system/coredns-cc45bff6b-7zqsw to k8s2
  Normal  Pulling    19m   kubelet, k8s2      Pulling image "k8s.gcr.io/coredns:1.3.1"
  Normal  Pulled     19m   kubelet, k8s2      Successfully pulled image "k8s.gcr.io/coredns:1.3.1"
  Normal  Created    19m   kubelet, k8s2      Created container coredns
  Normal  Started    19m   kubelet, k8s2      Started container coredns

The IP of the resolver is correct:
vagrant@k8s1:~$ ks get svc kube-dns
NAME       TYPE        CLUSTER-IP   EXTERNAL-IP   PORT(S)                  AGE
kube-dns   ClusterIP   <IP_ADDRESS>   <none>        53/UDP,53/TCP,9153/TCP   38m

But the dig command is failing:
vagrant@k8s1:~$ dig +short test.local @<IP_ADDRESS>
;; connection timed out; no servers could be reached

Looking at coredns logs we can see that it is receiving the requests:
vagrant@k8s1:~$ ks logs -l k8s-app=kube-dns | grep test
2021-02-04T14:36:40.884Z [INFO] <IP_ADDRESS>:39865 - 19766 "A IN test.local. udp 51 false 4096" NXDOMAIN qr,rd,ra,ad 114 0.023345241s
2021-02-04T14:36:45.881Z [INFO] <IP_ADDRESS>:39865 - 19766 "A IN test.local. udp 51 false 4096" NXDOMAIN qr,rd,ra,ad 114 0.020891984s
2021-02-04T14:36:50.886Z [INFO] <IP_ADDRESS>:39865 - 19766 "A IN test.local. udp 51 false 4096" NXDOMAIN qr,rd,ra,ad 114 0.02507274s

So the responses are getting dropped for some reason.
Nothing interesting from tcpdump running on the hostns:
vagrant@k8s1:~$ sudo tcpdump -i any -n udp and port 53
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
14:44:07.769082 IP <IP_ADDRESS>.55554 > <IP_ADDRESS>.53: 49592+ [1au] A? test.local. (51)
14:44:12.771207 IP <IP_ADDRESS>.55554 > <IP_ADDRESS>.53: 49592+ [1au] A? test.local. (51)
14:44:17.771222 IP <IP_ADDRESS>.55554 > <IP_ADDRESS>.53: 49592+ [1au] A? test.local. (51)
^C
3 packets captured
3 packets received by filter
0 packets dropped by kernel

Running the same dig command on the other node (k8s2) works:
vagrant@k8s2:~$ dig +short kubernetes.default.svc.cluster.local @<IP_ADDRESS>
<IP_ADDRESS>

And looking at tcpdump on k8s2 (where coredns is running) I can also see the response:
vagrant@k8s2:~$ sudo tcpdump -i any -n udp and port 53
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
15:15:50.480991 IP <IP_ADDRESS>.50097 > <IP_ADDRESS>.53: 20781+ [1au] A? google.com. (51)
15:15:50.481074 IP <IP_ADDRESS>.50097 > <IP_ADDRESS>.53: 20781+ [1au] A? google.com. (51)
15:15:50.481356 IP <IP_ADDRESS>.33091 > <IP_ADDRESS>.53: 20781+ [1au] A? google.com. (51)
15:15:50.481412 IP <IP_ADDRESS>.33091 > <IP_ADDRESS>.53: 20781+ [1au] A? google.com. (51)
15:15:50.506223 IP <IP_ADDRESS>.53 > <IP_ADDRESS>.33091: 20781 1/0/1 A <IP_ADDRESS> (55)
15:15:50.506330 IP <IP_ADDRESS>.53 > <IP_ADDRESS>.33091: 20781 1/0/1 A <IP_ADDRESS> (55)
15:15:50.506510 IP <IP_ADDRESS>.53 > <IP_ADDRESS>.50097: 20781 1/0/1 A <IP_ADDRESS> (65) <--

so the response is somehow getting lost while being tunneled from k8s2 to k8s1

Restarted Cilium with monitor-aggregation: none and rerun cilium monitor:
k8s1:
vagrant@k8s1:~$ ks exec $(cilium_pod k8s1) -it cilium monitor | grep :53
<- host flow 0x0 identity host->unknown state new ifindex 0 orig-ip <IP_ADDRESS>: <IP_ADDRESS>:34111 -> <IP_ADDRESS>:53 udp
-> overlay flow 0x0 identity remote-node->unknown state new ifindex cilium_vxlan orig-ip <IP_ADDRESS>: <IP_ADDRESS>:34111 -> <IP_ADDRESS>:53 udp

and on k8s2:
vagrant@k8s1:~$ ks exec $(cilium_pod k8s2) -it cilium monitor | grep :53
<- overlay flow 0x0 identity unknown->unknown state new ifindex cilium_vxlan orig-ip <IP_ADDRESS>: <IP_ADDRESS>:52390 -> <IP_ADDRESS>:53 udp
-> endpoint 359 flow 0x0 identity remote-node->593 state new ifindex lxce71012cea7d0 orig-ip <IP_ADDRESS>: <IP_ADDRESS>:52390 -> <IP_ADDRESS>:53 udp
<- stack flow 0x0 identity world->unknown state new ifindex cilium_vxlan orig-ip <IP_ADDRESS>: <IP_ADDRESS>:52390 -> <IP_ADDRESS>:53 udp
-> endpoint 359 flow 0x0 identity world->593 state established ifindex 0 orig-ip <IP_ADDRESS>: <IP_ADDRESS>:52390 -> <IP_ADDRESS>:53 udp
<- endpoint 359 flow 0x0 identity 593->unknown state new ifindex 0 orig-ip <IP_ADDRESS>: <IP_ADDRESS>:53 -> <IP_ADDRESS>:52390 udp
-> stack flow 0x0 identity 593->host state reply ifindex 0 orig-ip <IP_ADDRESS>: <IP_ADDRESS>:53 -> <IP_ADDRESS>:52390 udp

Underlying problem: both nodes have the same IP for the enp0s3 interface:
vagrant@k8s1:~$ ip a s dev enp0s3 | grep inet
    inet <IP_ADDRESS>/24 brd <IP_ADDRESS> scope global dynamic enp0s3
    inet6 fe80::a00:27ff:fe4e:92d0/64 scope link

vagrant@k8s2:~$ ip a s dev enp0s3 | grep inet
    inet <IP_ADDRESS>/24 brd <IP_ADDRESS> scope global dynamic enp0s3
    inet6 fe80::a00:27ff:fe4e:92d0/64 scope link

so k8s2 is blackholing the traffic to k8s1

Setting enable-endpoint-routes to false causes k8s2 to not blackhole anymore the response traffic for k8s1:
vagrant@k8s1:~$ dig +short kubernetes.default.svc.cluster.local @<IP_ADDRESS>
<IP_ADDRESS>

I validated that the following diff fixes the flake locally:
$ git diff
diff --git a/pkg/datapath/iptables/iptables.go b/pkg/datapath/iptables/iptables.go
index 787a527b3..10a68b361 100644
--- a/pkg/datapath/iptables/iptables.go
+++ b/pkg/datapath/iptables/iptables.go
@@ -980,7 +980,7 @@ func (m *IptablesManager) installMasqueradeRules(prog, ifName, localDeliveryInte
                m.waitArgs,
                "-t", "nat",
                "-A", ciliumPostNatChain,
-               "!", "-o", localDeliveryInterface,
+               "!", "-o", ifName,
                "-m", "comment", "--comment", "exclude non-"+ifName+" traffic from masquerade",
                "-j", "RETURN"), false); err != nil {
                return err

Matching this iptables rules causes packets to bypass masquerading and leave with enp0s3's IP. This change (from ! -o cilium_host to ! -o lxc+) when per-endpoint routes are enabled was introduced by commit https://github.com/cilium/cilium/commit/c496e25635c27ea290d1a58816340f17f795265d.


Update overview.mdx

defintions for 'business domain', 'business entity', 'product feature', and 'business value' are added
Background

Changelog

Hi, thanks for the contribution! I like the definitions, but as of now, they don't read very well with the rest of the text. It's kind of an unrelated block in the middle of the text. I'd like to find a way to casually add these definitions to the text or maybe extract them to a reference page and link to it in the overview


(Feature Request) Allow user to specify how style attribute is computed

I have an admittedly uncommon use case of needing to scale the font, so I forked this library and made this minor change:
// (in addGlobalAttributes)
return {
    style: `font-size: calc(var(--font-scale) * ${attributes.fontSize})`
};

I wouldn't have needed to fork the library if it exposed an option that would allow the user to provide a function to calculate the value for the style attribute, in which case that line would look more like:
return {
    style: this.options.getStyle()
};

Seems like an easy enough change, and the current behavior could be the default.

@tomconnors Do you want to open a pr?


fix(dark-mode): Dark-Mode project-list improved hover contrast

:star2: What does this PR do?

Adds hover background to project list
adds unique selector below to not interrupt other selectors.
I tried adding light border as well; however, decided against it as I wanted to keep this simple and direct unless asked to do otherwise.

:bug: Recommendations for testing

This was tested in Chrome and Firefox and works fine
To reproduce, open the toggle button, tap on a task, select to choose a project, move mouse over project list options.
Previous Behavior
Cursor would change, but no change to bg-color.
Current Behavior
bg-color for project name changes to var(--main-bg-color); for consistency across themes.
Chrome

Firefox

:memo: Links to relevant issues or information

issue #1813 requested this fix.
feat(dark-mode) #1769 was the original PR for adding dark-theme feature.

@devnetkc can we have the dark mode be enabled automatically? via system color scheme i.e. activate when system dark mode is on and vice versa when dark mode is off?


main last setting

Description
Fixes #
Note: Before submitting a pull request, please open an issue for discussion if you are not associated with Google.
Checklist

[x] I have followed Contributing Guidelines from CONTRIBUTING.MD
[ ] Tests pass:   go test -v ./.. (see Testing)
[ ] Code formatted:   gofmt (see Formatting)
[ ] Vetting pass:   go vet (see Formatting)
[ ] These samples need a new API enabled in testing projects to pass (let us know which ones)
[ ] These samples need a new/updated env vars in testing projects set to pass (let us know which ones)
[ ] This sample adds a new sample directory, and I updated the CODEOWNERS file with the codeowners for this sample
[ ] This sample adds a new Product API, and I updated the Blunderbuss issue/PR auto-assigner with the codeowners for this sample
[ ] Please merge this PR for me once it is approved

Please file an issue with a description of what these changes are intended to do if you would like us to consider it.


Icon Button hangs Chrome mobile and Firefox (at least)

Since the migration to the icon-button (from icon-toggle) I've noted some issues using this component on Chrome (mobile) and Firefox (latest desktop on OS X).
When clicking the button, it hangs the browser. I'm using the component passing the toggle-on-content and toggle-off-content props.
I've been testing directly with the material framework, and the culprit seems to be the update() callback that is being called by the MutationObserver. When this method is called, it hangs the browser.

@ticamacho
Thanks for filling the issue! Can you please provide a reproduction.

I could reproduce the issue. It's the ripple effect that cause the freezes.

@matsp
Sorry for the delay. Yes, the ripple effect seems to be the culprit. Thanks for the quick fix.


all questions of Round B are solved in C++

Check the Guidelines. I'm closing this PR.

Okay sure


Improve compile times of the most expensive source modules

Some source modules took minutes to compile, mostly because they involve
lots of template instatiation for many type combinations.
So, first, some of the functions that had a very wide cross-product of
type combinations could be changed to the variety that only handles the
common types and uses float as an intermediate format for the outlier
cases. That reduces total compile work substantially.
But also, particularly long-compiling modules can screw up parallel
builds, because that all the other modules for a library may get done
compiling while that one with an extra long compile is still going, but
nothing else can proceed until that's done, so only one core is doing
work while the others wait. So to combat this, I took the two files with
the very longest times (imagebufalgo_pixelmath and imagebufalgo_copy)
and split them up into multiple pieces. That doesn't reduce the total
amount of compilation work, but it does make it easier to parallelize it
over multiple cores.
The net result can be seen by these stats for fresh full builds (after
clearing ccache) on my 4-core laptop:
     before:       315.85 real       850.53 user        42.60 sys
     after:        200.44 real       725.09 user        36.21 sys

The "real" time is the important one -- reduce wall clock time by ~35%
when doing a full parallel build on a 4-core machine.
Note: the big blocks of changes are just moving code from one file to another.
Those sections didn't have any logic changes.

For those curious, I reran the timings on a beefier Linux machine where I typically build with ninja -j 24, and the results were similar:
before:    3:01 real   23:51 user   0:41 sys
after:     2:02 real   22:48 user   0:41 sys

So it speeds up total work slightly (5%), but by load balancing among the threads better, it reduces the amount of human time waiting for the build by 33%!
Watching the graphical load meter as it goes, I saw that there is still a good 30-45 seconds where only 2 or 3 threads are working, so I think I can get even better utilization if I jiggle things a bit more.


Bus wires and wire design

If a chip is saved and then edited again, some information is lost or is not loaded correctly.
On the one hand, each input or output is always displayed as simple, regardless of which bus was set beforehand.
On the other hand, the wire design is not displayed correctly. Which in itself doesn't matter for the functionality of the chip, but with more complicated larger chips it makes it difficult to change things. However, this error only occurs if two or more wire go out from a starting point.
https://user-images.githubusercontent.com/56408700/187637490-05782ff5-2f89-470c-9a8f-00823f942633.mp4
It would also be cool if you could change and see the value for bus wires. Otherwise you have to create a lot of inputs again at some point.

OK, I already noticed this problem but your video gave me some idea so I played around with pins and discovered that the problem exists only with unnamed pins, with the named one everything seems to work fine. So I now know where to see to fix this bug

OK, I already noticed this problem but your video gave me some idea so I played around with pins and discovered that the problem exists only with unnamed pins, with the named one everything seems to work fine. So I now know where to see to fix this bug

unnamed pins appear to always lose their pin type, with no regard to whether they're named or not; however, I have confirmed that the lines themselves only move if the pins are unnamed

Update: I Found The bug but I can't fix it without breaking compatibility. There is an association problem between the saved wire layout and the editor wire layout in particular every time there are two or more wires with the same starting and ending point name only one wire perhaps is going to work all the others will be connected only to the start point and the end point.
so to those who want to check out the problem.
in the script ChipLoader at line 332, there is this

int wireIndex = Array.FindIndex(loadedChipData.wires, w =>w.startPin.pinName == startPinName && w.endPin.pinName == endPinName);

this selects the index of the wire in one array. that line is wrong in the situation I described above.


[SPARK-24133][SQL] Check for integer overflows when resizing WritableColumnVectors

ColumnVectors store string data in one big byte array. Since the array size is capped at just under Integer.MAX_VALUE, a single ColumnVector cannot store more than 2GB of string data.
But since the Parquet files commonly contain large blobs stored as strings, and ColumnVectors by default carry 4096 values, it's entirely possible to go past that limit. In such cases a negative capacity is requested from WritableColumnVector.reserve(). The call succeeds (requested capacity is smaller than already allocated capacity), and consequently java.lang.ArrayIndexOutOfBoundsException is thrown when the reader actually attempts to put the data into the array.
This change introduces a simple check for integer overflow to WritableColumnVector.reserve() which should help catch the error earlier and provide more informative exception. Additionally, the error message in WritableColumnVector.throwUnsupportedException() was corrected.
New units tests were added.
Author: Ala Luszczak<EMAIL_ADDRESS>Closes #21206 from ala/overflow-reserve.
(cherry picked from commit 8bd27025b7cf0b44726b6f4020d294ef14dbbb7e)
Signed-off-by: Ala Luszczak<EMAIL_ADDRESS>

@gatorsmile

Test build #90119 has started for PR 21227 at commit 638aea7.

Test build #90119 has finished for PR 21227 at commit 638aea7.

This patch passes all tests.
This patch merges cleanly.
This patch adds no public classes.

Merged build finished. Test PASSed.

Test PASSed.
Refer to this link for build results (access rights to CI server needed):
https://amplab.cs.berkeley.edu/jenkins//job/SparkPullRequestBuilder/90119/
Test PASSed.

LGTM - merging to 2.3. Thanks!


⚠ Taitopia Cloud Rendering Service Status has degraded performance

In ee743bb, Taitopia Cloud Rendering Service Status (https://status-api.taitopia.design/health/taco) experienced degraded performance:

HTTP code: 200
Response time: 55 ms

Resolved: Taitopia Cloud Rendering Service Status performance has improved in f496e9d after 4 hours, 57 minutes.


Why Chrome not edge and bing

[Enter feedback here]

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 2c35dd8c-d5d5-50d3-2f4c-26993f7966aa
Version Independent ID: 56842b5d-abd0-a5e8-a8b5-1f6a274940f7
Content: Exploring data - Power BI
Content Source: powerbi-docs/guided-learning/exploringdata.yml
Service: powerbi
GitHub Login: @davidiseminger
Microsoft Alias: davidi

Hi @aguptadel, thank you for your comment. I assume you are asking why our examples show Chrome vs. Edge and Bing. We do this for a couple of reasons. 1) we want to show readers that we are not Microsoft-centric and 2) we want to acknowledge that the majority of users are running Chrome and reflect that in our docs.


Any interest in joining inspect-js?

This package exactly fits with the other “environment detection” packages in the https://github.com/inspect-js GitHub/npm org. Would you be interested in moving the repo?

sure! is there also an npm org that i could grant ownership?

Yes! I’ll invite you to both orgs

I think I'm not allowed to add the package to the inspect-js:developers team on npm. i just added you as an owner instead

Thanks, I’ll add it to the proper teams. Welcome!


Voluptuous for notify needs to be fixed to support multiple targets

I made this ticket to bring together a bunch of different tickets under the same umbrella.
The fix is changing this line to vol.Optional(ATTR_TARGET): object,. I think I was told at some point that object was not a good idea though. We could either have object or maybe we can say either a single string or a list of strings?
#2093
#2469
#3516
cc @fabaff

@balloob suggested changing to vol.All(cv.ensure_list, [cv.string]) but we will need to update all platforms to support it.


More beginner friendly doc

Hi,
I've managed to get the plugin working, but it took me some time as I'm no expert in drone or docker buildx. Can you tell me if this pipeline is correctly defined? If so, can you include some basic "copy-paste" example in docu?
I don't want to install qemu support on OS level, so I install it during run. It's enough to install it once until next OS reboot, but running every time is more reliable.
---
kind: pipeline
name: default
steps:
  - name: dockerx prep
    image: thegeeklab/drone-docker-buildx
    privileged: true
    volumes:
      - name: dockersock
        path: /var/run
    commands:
      - sleep 5
      - docker run --rm --privileged multiarch/qemu-user-static --reset -p yes

  - name: dockerx
    image: thegeeklab/drone-docker-buildx
    privileged: true
    volumes:
      - name: dockersock
        path: /var/run
    settings:
      username: my-dh-user
      password:
        from_secret: MY_DH_SECRET
      repo: my-dh-repo/${DRONE_REPO_NAME/_/-}
      auto_tag: true
      platforms: linux/arm64/v8,linux/amd64

services:
  - name: docker
    image: docker:dind
    privileged: true
    volumes:
      - name: dockersock
        path: /var/run

volumes:
  - name: dockersock
    temp: {}

Found out most of the code is not needed, I was missing the experimental
This should do the trick, right?
kind: pipeline
name: default
steps:
  - name: dockerx
    image: thegeeklab/drone-docker-buildx
    privileged: true
    settings:
      experimental: true
      username: my-dh-user
      password:
        from_secret: MY_DH_SECRET
      repo: my-dh-repo/${DRONE_REPO_NAME/_/-}
      auto_tag: true
      platforms: linux/arm64/v8,linux/amd64

Hi,
I disagree a bit. This repo is a Drone CI Plugin. How Drone plugins work and how to define them in your pipeline is documented upstream already. There is absolutely nothing special to this plugin, the only thing that is a hard requirement is the privileged mode and that's already part of the plugin documentation as well as all available setting parameters.
The basic usage is:
 - name: Build
    pull: always
    image: thegeeklab/drone-docker-buildx:20
    settings:
      repo: thegeeklab/${DRONE_REPO_NAME}
      platforms:
        - linux/amd64
      username:
        from_secret: docker_username
      password:
       from_secret: docker_password

Everything else is optional and depends on your own environment. What exactly are you missing?

The issue was making sense for the first pipeline definition, because it seemed like the docu was missing something and I had to do some tasks by myself. But I was just missing some options.
It might be worth mentioning that both privileged and experimental are currently needed in order to enable cross-build of different platform images. But you are right.


[emerg] 1#1: host not found in upstream "down" in /etc/nginx/conf.d/default.conf

I have many containers. One of the containers didn't get an IP address (due to a misconfiguration).
With the current nginx.tmpl file this creates an incorrect nginx.conf file, since .Network.IP is empty. As a result ALL hosts are down.
{{ else if .Network }}
	# {{ .Container.Name }}
	server {{ .Network.IP }} down;
{{ end }}

Any idea how to solve this?

Had this happen recently as well. Could we not just use <IP_ADDRESS> if the .Network.IP is empty? Nginx requires  an IP address or domain for any upstream server declaration.

This seems to be a very critical issue. After a reboot one docker image did not get an IP address. If this is happens ALL the other services become unavailable.
I tested the solution from therealgambo and it works as expected.. Is there any disadvantage using the localhost (<IP_ADDRESS>) ip address?

I can confirm, this is VERY annoying.

Since 22th June I use the method described above without any problems.

+1. Just ran into this.


helm cannot download index from a url with params in it.

We cannot download index.yaml from url such as https://{some url}/index.yaml?token={some_token}
Maybe we should parse the url string to the URL object, and then download..

@qiujian16 Can you post the output from the error when you try to use a URL with params?

helm repo add test https://raw.github.ibm.com/IBMPrivateCloud/charts/stable/repo/stable/index.yaml?token=AAAMT610ReP-GOlOvY-n0HWRh45O7WYzks5ZVBoawA%3D%3D
Error: Looks like "https://raw.github.ibm.com/IBMPrivateCloud/charts/stable/repo/stable/index.yaml?token=AAAMT610ReP-GOlOvY-n0HWRh45O7WYzks5ZVBoawA%3D%3D" is not a valid chart repository or cannot be reached: Failed to fetch https://raw.github.ibm.com/IBMPrivateCloud/charts/stable/repo/stable/index.yaml?token=AAAMT610ReP-GOlOvY-n0HWRh45O7WYzks5ZVBoawA%3D%3D/index.yaml : 404 Not Found
From code, I see that we add "index.yaml" at the tail of the url, I think we may have more validation on the repo url?

https://raw.github.ibm.com/IBMPrivateCloud/charts/stable/repo/stable/index.yaml 404s for me, so it's probably a bad URL. I'd chat with IBM specifically about this.

@qiujian16 We are going to close this for now because it looks like it isn't an issue with Helm. If you check with IBM and it looks like it may be a bug in helm, feel free to ping us on this issue again


Add Clerk Astro guide

Description (required)
This PR adds Clerk and Astro integration to Authentication guide

Hello! Thank you for opening your first PR to Astro’s Docs! 🎉
Here’s what will happen next:

Our GitHub bots will run to check your changes.
If they spot any broken links you will see some error messages on this PR.
Don’t hesitate to ask any questions if you’re not sure what these mean!

In a few minutes, you’ll be able to see a preview of your changes on Vercel 🥳

One or more of our maintainers will take a look and may ask you to make changes.
We try to be responsive, but don’t worry if this takes a few days.

Just a quick thank you for the contribution, and heads up I'll be looking at this closely in the next few days! :raised_hands:

Hi @sarah11918, thank you for the detailed feedback and edits! I appreciate you taking the time to explain the style guidelines, especially regarding descriptive link text and introducing code examples.
Your suggested edits surely improved the clarity and readability of the content. I approved all of the edits except one. Let me know if that works! Thank you again 💯

Thank you and happy weekend @sarah11918!

Thank you both @wobsoriano and @LekoArts for creating this helpful content that was in great shape and didn't require much editing at all! Have a wonderful weekend, and welcome to Team Docs! 🥳


Add black theme (#000000 background)

I change #3F3F3F to #000000 to use with true black theme (like Deep Black)

Thanks for your help. In coming days, I will review the color in details.
May I ask: Is the color stick to the scheme used in NPP? Is there any style I can take reference?
Thanks!

@Edditoria I use it for “Deep Black” theme

Thank you. The color scheme are reviewed based on Deep Black theme. If you like it, feel free to update to latest in master branch. :)
In coming weeks, there will be an alternative version to improve em text. Pleaae stay tune. (Planning, most likely in alternative branch)


how to fastest drop a ctx without returning any values? just drop ctx or ctx without returning values

Describe the Question
how to fastest drop a ctx without returning any values? just drop ctx or ctx without returning values
Reproducible Code
package main

import (
	"context"

	"github.com/cloudwego/hertz/pkg/app"
	"github.com/cloudwego/hertz/pkg/app/server"
	"github.com/cloudwego/hertz/pkg/common/hlog"
	"github.com/cloudwego/hertz/pkg/common/utils"
	"github.com/cloudwego/hertz/pkg/network"
	"github.com/cloudwego/hertz/pkg/protocol/consts"
)

func main() {
	h := server.Default(server.WithOnAccept(func(conn network.Conn) context.Context {
		addr := conn.LocalAddr().String()
		hlog.Info(addr)
		return context.Background()
	}))
	h.GET("/fastdrop", func(c context.Context, ctx *app.RequestContext) {
		_, cancel := context.WithCancel(c)
		cancel()

		//this returns 404, which is wrong. should return nothing
	        //how to drop ctx? hijack or something?
	        //dont return anything? no status code, no html, nothing. how?
	})
	h.Spin()
}

Expected behavior
nothing returned
Hertz version:
0.5.1
Environment:
go 1.20
Additional context
currently returns something to client. i want nothing returned and fastest drop of ctx asap, better still close the connection or something

@li-jin-gou @Duslia @welkeyever
is there a way to not return anything? "cancel" the ctx. what's the command for cancelling ctx?
this is my last area.

hertz is used behind reverse proxy so needing only to drop the ctx (or conn of this particular ctx), whichever way to drop fastest without returning anything

currently doing this
		_, cancel := context.WithCancel(*cc)
		cancel()
		ctx.Response.Header.Reset()
		ctx.Response.Header.SetStatusCode(429)
		ctx.SetBodyString("")

possible to NOT return? means dropped or dont return anything.

You can try ctx.GetConn().Close()

@Duslia
ctx.GetConn().Close() seems to return header status 429
possible to not return anything at all?

Please debug by yourself. Hertz won'd return this status code.


mongodb-compass: 1.29.6 -> 1.30.1

Motivation for this change
mongodb-compass: 1.29.6 -> 1.30.1
Things done

Built on platform(s)

[X] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

[ ] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[X] Tested basic functionality of all binary files (usually in ./result/bin/)
22.05 Release Notes (or backporting 21.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module
[ ] (Release notes changes) Ran nixos/doc/manual/md-to-db.sh to update generated release notes

[X] Fits CONTRIBUTING.md.

Result of nixpkgs-review pr 156223 run on x86_64-linux 1

1 package built:

mongodb-compass


📥 Inbox

https://github.com/ufgo/fire_glow

https://defold.com/extension-fontgen/

https://github.com/MhadhbiXissam/dfnim


added argument for max amount of keypoints

Added simple extra argument to choose how many keypoints to predict. By default this arg is set to -1 meaning all peaks are turned into predictions.

-1 is not an ideal default, maybe set it back to 20


Additional Porn Sites

Hello @StevenBlack and @Sinfonietta,
I've found a few more porn sites to add to the filter:
epawg.com
en.vidmo.pro
erothots.co
I may update this list before the issue is closed, but feel free to close at any time.
Thank you for your dedication to this list!

another one:
<IP_ADDRESS> nutchaser.com

Ping @sinfonietta!  Thanks.

@StevenBlack these are added!

Closing!


Other situation

Can we add support for url encode, like data=P9%2bN0gB8z3do2u97LIO%2fJuo, it seems that it can't be decrypted, and support for original hexadecimal data after encryption (not base64)，thanks！

Can you please elaborate more??
What my understanding is

First data is encrypted
Then URL_encode(encrypted_data) which change/convert + to %2b and /  to %2f

If this is the case i will add URL_encode/decode option in this plugin. Meanwhile you can make it work with Obfuscation option
what you need to do is

in Off. char field place these values which gets url encoded separated with space like + /
in Replace with field place their URL encoded values separated with space %2b %2f

So before decrypting request/response code will first replace URL encoded char with original ones, then decrypt your url decoded data and vise versa for encryption
Hope this might help you right now 😈

Wow, thank you for your detailed and patient response. yes, you understand is right. I have encountered a lot of apps,after the final encryption then  do urlencode . like the picture below

The second case I want to say，some apps may not do base64, they will use  original hex encrypted data,I hope you can think about it.Thanks

Thanks @la0s  for suggestion. Sure i will look into it and update you soon.

Hi @la0s how you set Request/Response parameter to decrypt JSON format ? I'm stucking in this scenario. Thanks for your help

Added few variants for such challenges and can be modified easily
https://github.com/Ebryx/AES-Killer#variants

Added few variants for such challenges and can be modified easily
https://github.com/Ebryx/AES-Killer#variants


Login using Keyboard's "enter" button doesn't work

On the log-in page, when entering the username and password then hitting "enter", an error alert showing "Username or password is incorrect". Using the same input and clicking on the "Login" button with the mouse works however.

I believe this is actually because, whether using 'enter' or clicking, the input must be sent twice when logging in for the first time. Since we'll be removing the login in the full version, this is a lower priority.


Can't insantiate Supabase client; fails with GoTrue error "window is not defined."

Bug report

[x ] I confirm this is a bug with Supabase, not with my own application.
[x ] I confirm I have searched the Docs, GitHub Discussions, and Discord.

There is a similar-sounding and possibly related bug here: https://github.com/supabase/supabase-js/issues/786
But the workaround appears to be React-specific and doesn't seem to address the underlying problem.
Describe the bug
I wrote a Deno-based server that is attempting to use Supabase. Upon attempting to insantiate the Supabase client, the application stops with an assertion thrown from GoTrueClient.js, _isImplicitGrantFlow():
In GoTrueClient.js, _isImplicitGrantFlow()
Exception has occurred: ReferenceError: window is not defined
  at SupabaseAuthClient._isImplicitGrantFlow (file:///Users/stokestack/Library/Caches/deno/npm/registry.npmjs.org/@supabase/auth-js/2.64.2/dist/main/GoTrueClient.js:1138:62)
    at SupabaseAuthClient._initialize (file:///Users/stokestack/Library/Caches/deno/npm/registry.npmjs.org/@supabase/auth-js/2.64.2/dist/main/GoTrueClient.js:170:64)
    at file:///Users/stokestack/Library/Caches/deno/npm/registry.npmjs.org/@supabase/auth-js/2.64.2/dist/main/GoTrueClient.js:155:35
    at file:///Users/stokestack/Library/Caches/deno/npm/registry.npmjs.org/@supabase/auth-js/2.64.2/dist/main/GoTrueClient.js:749:36
    at SupabaseAuthClient.lockNoOp [as lock] (file:///Users/stokestack/Library/Caches/deno/npm/registry.npmjs.org/@supabase/auth-js/2.64.2/dist/main/GoTrueClient.js:33:18)
    at SupabaseAuthClient._acquireLock (file:///Users/stokestack/Library/Caches/deno/npm/registry.npmjs.org/@supabase/auth-js/2.64.2/dist/main/GoTrueClient.js:745:31)
    at file:///Users/stokestack/Library/Caches/deno/npm/registry.npmjs.org/@supabase/auth-js/2.64.2/dist/main/GoTrueClient.js:154:31
    at SupabaseAuthClient.initialize (file:///Users/stokestack/Library/Caches/deno/npm/registry.npmjs.org/@supabase/auth-js/2.64.2/dist/main/GoTrueClient.js:157:11)
    at new GoTrueClient (file:///Users/stokestack/Library/Caches/deno/npm/registry.npmjs.org/@supabase/auth-js/2.64.2/dist/main/GoTrueClient.js:136:14)
    at new SupabaseAuthClient (https://jsr.io/@supabase/supabase-js/2.44.3/src/lib/SupabaseAuthClient.ts:6:5)

To Reproduce
Set up a local-development environment for Supabase, and populate its public DB schema with a few tables. Run the Supabase TypeScript type generation on it and direct the output to DBTypes.ts in the source directory struture of any Deno project.
In that Deno project, try this:
import { createClient } from 'jsr:@supabase/supabase-js@2';
import { Database, Tables, Enums, TablesInsert, TablesUpdate } from './DBTypes.ts';

export const supabase = createClient<Database>('http://localhost:54321', 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6ImFub24iLCJleHAiOjE5ODM4MTI5OTZ9.CRXP1A7WOeoJeXxjNni43kdQwgnWNReilDMblYTn_I0')

Expected behavior
The client is created and I can start executing queries with it.
Screenshots

System information

OS: [e.g. macOS, Windows]
Mac OS version 14.5

Browser (if applies) [e.g. chrome, safari]
N.A.

Version of supabase-js: [e.g. 6.0.2]
I guess version 2, based on the import statement I'm using.

Version of Node.js: [e.g. 10.10.0]
N.A.

Additional context
Obviously this is a show-stopper.

Looks like this got resolved on Discord:
I'm not familiar with how you're using Deno, but if you add this option to your client, you shouldn't see the error. It's implying that you aren't doing implicit auth (and maybe you don't need auth anyway), and therefore won't call the _isImplictGrantFlow code.
const supabase = createClient(url, key, {
  auth: {
    detectSessionInUrl: false
  }
})

Thanks. I wouldn't say it's resolved, though, because this method isn't documented (as far as I've seen). If you invoke the client as documented, it fails.


Example of subscription filtering with directives

Hi
Is there any example you could point me at which shows how to implement subscription filtering via directives?
Our use-case is to have a regular expression directive on a field and only dispatch the subscribed object if the regular expression matches.  Is that possible or is there a better way to achieve the same result?
Thanks

Please also note that we are on v3.7.1

The directive filtering is only supported for directives on the root field of the subscription, so I'm not sure if that matches your scenario. The gist of it is you would implement a SubscriptionFilterCallback applyDirectives function/lambda which gets called for each directive on the root field. If it returns false for any directive (e.g. evaluating a directive argument against a regular expression), then the event is not delivered to that subscription. I can't tell if you mean that you want to pass the regex in an argument to the directive, but I'd be very worried about taking untrusted input and parsing it as a regular expression. That seems like it would be difficult to sanitize reliably.
If you want to evaluate the regex against something in the event (e.g. a field name or value rather than a token in the directive arguments), then you'll probably need to capture that token in the applyDirectives lambda and look for a match on the directive name, then a match on the argument name and value. It's up to you whether non-matching directives or argument names should return true or false, effectively ignoring or blocking any other directives besides the regex one.

I can't tell if you mean that you want to pass the regex in an argument to the directive, but I'd be very worried about taking untrusted input and parsing it as a regular expression. That seems like it would be difficult to sanitize reliably.
So an invalid regular expressions is a non-issue.  The graph is private to the application and regular expressions cannot be entered outside of development.
I spent some time on this today and it looks like I can't do what I want, to give a more specific example, lets say we have a subscription like this:
subscription example {       onThingHappened       {              nestedObject              {                     name @regExMatch( rx : ".*foo" )              }        } }
I am looking to drop/not deliver the request if regExMatch on the name field is true
As far as I can tell this is not possible.

I am looking to drop/not deliver the request if regExMatch on the name field is true
As far as I can tell this is not possible.

Correct, not without modification. You'd need to move the directive to onThingHappened (the root field of the subscription), and you'd need to capture the value of name (or an interface/callback to extract it) in the applyDirectives lambda to match the regex against it.

Alternatively, while the subscription is being evaluated it has access to the directives on name, you could bubble up an error from the resolver, but then the error will still get delivered. It would at least short-circuit recursive resolvers if that's expensive enough to matter.
You could also filter the delivery after evaluation, in the SubscriptionCallback. For instance, if there's an error generated by evaluating the directive's regex in the resolver, you could ignore the event in the callback.

ok, it looks like I will finally have to go down the route of forking the code.
I can probably throw a specific exception from a field getter to stop the subscription firing or alternativley I can maybe move the directive evaluation to after the query is resolved and pass the resolved result in to the applyDirectives callback.   I'll take a look tomorrow
Thanks once again for your help and your fast response.


Invalid redirect uri

Since Keycloak version 18, redirect_uri doesn't support when do logout because of performance and security (e.g. Is this user a real user do logout in our system or app?).
So, Keycloak version 18 give two options:

User see with confirmation page that they are logout or not?

We can omit first option by send post_logout_redirect_uri  param with id_token_hint  value.

Keycloak still support compatibility for redirect_uri param with command: --spi-login-protocol-openid-connect-legacy-logout-redirect-uri=true before versi Keycloak 21.
Things to do:

[x] Omit redirect_uri param so the user will see the first option
[x] Add post_logout_redirect_uri param with id_token_hint value. Question: how to get id_token_hint_value?

Finish!

Since this case, the version of package sso-laravel divide by two:

Version 1.x for Laravel 5.6 to 7.x with PHP version ^7.2.5
Version 2.x for Laravel 8.x to 9.x with PHP version ^7.3.0 or ^8.0.2

Cc @adijuliawan @Gustilanang


The application called an interface that was marshalled for a different thread. (0x8001010E (RPC_E_WRONG_THREAD))

Describe the bug
The application crashes on start up with the following exception:
System.Runtime.InteropServices.COMException: 'The application called an interface that was marshalled for a different thread. (0x8001010E (RPC_E_WRONG_THREAD))'

And the following stack trace:
onecoreuap\shell\coreapplication\application\lib\ApartmentHelpers.h(22)\twinapi.appcore.dll!00007FFF465061D1: (caller: 00007FFEDF01D06B) ReturnHr(1) tid(5414) 8001010E The application called an interface that was marshalled for a different thread.
    CallContext:[\AppRunOrActivateView]
onecoreuap\shell\coreapplication\application\lib\coreapplication.cpp(75)\twinapi.appcore.dll!00007FFF465061EC: (caller: 00007FFEDF01D06B) ReturnHr(2) tid(5414) 8001010E The application called an interface that was marshalled for a different thread.
    CallContext:[\AppRunOrActivateView]
onecoreuap\shell\coreapplication\application\lib\coreapplicationfactory.cpp(147)\twinapi.appcore.dll!00007FFF46506214: (caller: 00007FFEDF01D06B) ReturnHr(3) tid(5414) 8001010E The application called an interface that was marshalled for a different thread.

Steps to reproduce the bug
Run the application.
Expected behavior
I would expect it not to crash.
Actual behavior
It crashes.
Screenshots
Nothing on screen yet to screen shot.
Version Info
Gallery commit: https://github.com/microsoft/Xaml-Controls-Gallery/commit/0f0b39072f6703face2cc6fb89e3a18850193b16
Net Core SDK 5.0.100-preview.4
Gallery version (found on Settings page):
It doesn't start to see it, it's the version from the commit above, latest on the winui3preview branch as of writing this.
Windows 10 version:

[ ] Insider Build (xxxxx)
[ ] November 2019 Update (18363)
[ ] May 2019 Update (18362)
[X] October 2018 Update (17763)
[ ] April 2018 Update (17134)
[ ] Fall Creators Update (16299)
[ ] Creators Update (15063)
[ ] Anniversary Update (14393)

Device form factor:

[X] Desktop
[ ] Mobile
[ ] Xbox
[ ] Surface Hub
[ ] IoT

Additional context
N/A

Are you trying to run XamlControlsGallery.Desktop from a Visual Studio older than 16.7 Preview 1?  I believe that's what causes this error.

Oh, is that the requirement? Yeah, it's the latest 16.6, if that's the case then you can close this issue.

Yup, upgrading to 16.7 Preview 1 should fix this.  I'll close this issue for now, feel free to reopen if you still see it 👍


Phone

Is it possible to get samsung phone working so that I can receive calls on my pc?

I've already asked about it #7 . Sadly; it's not possible now

No, I had found a way to but they blocked it.
On Sun, Jun 2, 2024 at 12:31 PM Dmytro Denchenko @.***>
wrote:

I've already asked about it #7
https://github.com/Bananz0/GalaxyBookEnabler/issues/7 . Sadly; it's not
possible now
—
Reply to this email directly, view it on GitHub
https://github.com/Bananz0/GalaxyBookEnabler/issues/11#issuecomment-2143811830,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AHSOGBIWXNCCI4AK4VTMADTZFL7A3AVCNFSM6AAAAABIU4GBIOVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDCNBTHAYTCOBTGA
.
You are receiving this because you are subscribed to this thread.Message
ID: @.***>

As an alternative, the Microsoft "Phone Link" Program works great for this. I've never had issues as of yet. It works with all Android phones.


error xml tag to blocked testresult

Coverage increased (+0.05%) to 84.917% when pulling 1f76ccaa7a259eb74cacf59a6dbd61ed0fca18eb on nosetest-error-failure into 1730737db5f25679f9955487bf748777f86f600b on master.


no models for detection and depth estimation

Hi,
I am wondering about the implementation of detection and depth estimation,
could you please provide the relevant codes?
Thanks

I have modified the official code of VNL and FCOS, using the loss provided in the CVPR version. Please see the README. I also provided the trained model for these tasks.
Recently I have been working on a distillation toolbox with detectron2. I will release it after I finished.

okay thanks, I am modifying the code for detection using yolov3,  but I am not sure about the loss functions.

You can refer to this issue: https://github.com/irfanICMLL/structure_knowledge_distillation/issues/27
He has reproduced the results successfully.


Anicent Fruit Buy Price should be $0?

Since there are no shop selling Anicent Seed.

While they can be acquired through other technically free means, they can also be purchased from the Traveling Cart for 800g. In calculating profit and costs it is best to consider the worst case scenario, which is, in this case, spending 800g.

What's your source for 900g Ancient Seeds price? Wiki and an Arqade answer cite 400-700g.

It must have fluctuated a bit since I last updated the values (several months ago), but I got its current price (800g) from an earlier revision of the Crops page on the wiki. I'll update its price, thanks.


Hue lights no longer exposed to HomeKit upon update.

Issue
After updating to most recent version of the  plugin (sorry don't know what version I was on previously), native hue lights are no longer exported to homekit.  Other non-hue lights are still exported.
Using the square hue hub,  The hub is not joined up to HomeKit.
Plugin conf: "Native home kit lights" set to "no"
Log Messages
[Hue] Philips hue: error: /lights/27: {"state":{"on":true,"bri":254,"hue":14988,"sat":141,"effect":"none","xy":[0.4575,0.4101],"ct":366,"alert":"select","colormode":"ct","mode":"homeautomation","reachable":false},"swupdate":{"state":"noupdates","lastinstall":"2021-03-04T10:18:35"},"type":"Extended color light","name":"Dining 3","modelid":"LCT007","manufacturername":"Signify Netherlands B.V.","productname":"Hue color lamp","capabilities":{"certified":true,"control":{"mindimlevel":2000,"maxlumen":800,"colorgamuttype":"B","colorgamut":[[0.675,0.322],[0.409,0.518],[0.167,0.04]],"ct":{"min":153,"max":500}},"streaming":{"renderer":true,"proxy":true}},"config":{"archetype":"sultanbulb","function":"mixed","direction":"omnidirectional","startup":{"mode":"safety","configured":true}},"uniqueid":"00:17:88:01:02:44:9a:37-0b","swversion":"<IP_ADDRESS>000"}
TypeError: Cannot read property 'updateValue' of undefined
(one of these messages for each hue light no longer available).

Are you running the recommended Homebridge version?

Hello @ebaauw,  Apologies, your reply email got junked.  I was a minor version behind on hoobs.  Updating hoobs seems to have fixed the issue.  Thanks for all your work on homebridge hue.  It's awesome!.


Same here

You can try running the MSI Gaming App in Windows and turn on the RGB header from there.
Then warm boot back into Linux.  You could install Win10 on a thumbdrive if you don't have dual boot setup.

Try running with --ignore-check option.
You can also try running the MSI Gaming App in Windows and turn on the RGB header from there (it is disabled by default). Then warm boot back into Linux.  You could install Win10 on a thumbdrive if you don't have dual boot setup.

I don't have Windows on my computer...
I think this soft has been developped to work on Linux...

I think this soft has been developped to work on Linux...

This soft has been developed to work on Linux with B350 MORTAR ARCTIC board to scratch my own exclusive itch. The fact that it tends to work with some other boards and for other people is an accident.
What @dcerisano proposed is a workaround that might help to make this tool to work with your board, you’re welcome to not try it.

Okay, it seems I can kinda control the RGB strip now, for whatever reason.  Still not sure about the timing info.  Is there a way to set a single solid color, like all red?

It’s not working as expected. Even with the ignore option. What would be the steps to research why it is not working here? If somebody can give me any tips I can give it a try :)

You will have to give more detail. Also please look around at the other issues, there is a lot of repeated detail about getting msi-rgb working. Mostly, you need to first init the header in Windows using the msi gaming app every time you unplug your computer (resets the sio). Then boot into linux and run msi-rgb. The format for animations is given in the other issues.


External Storage Support

love the app, im a huge fan. lately i have started to organize almost a TB of family photos and videos. i started on my pc but then moved to my tablet and phone. my problem is that im currently doing the organizing with my file explorer and its not a very good experience tbh.
i have tried to use aves to do the job but it doesnt detect my thumb drive. is this possible to do with aves? if not, can it be implemented?
Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
N/A
Describe the solution you'd like
A clear and concise description of what you want to happen.
N/A
Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.
N/A
Additional context
Add any other context or screenshots about the feature request here.
N/A

Isn't your drive connected via OTG? If so, Aves does not support it but there is already a request:

#366

Feel free to upvote/subscribe to that issue to show interest.


Question filter default from have a go

A user clicking on 'have a go' 'choose your own questions' gets the filter open looking like this:

It's not obvious that it's a filter from this view.
This view is better, but also hides the further filters that can be applied

IMHO this would be perfect

as clicking any of the terms in the lower line will expand that, so the behaviour is immediately obvious.

I can't reproduce this at all, and the middle image is the behaviour that we see when loading the site for the first time. I don't think there's anything else we can do about this.


displaying calendar on december-january displays the wrong year for january

Hey,
The year is actually well displayed but the selected year is still wrong in the demo


feat: include the user time request in instrumentpicker question

Description
Creating a configurable option in instrument picker question to accept user's requested time for the instruments selected. The response will be saved in answers table.

Motivation and Context

In STFC, during the FAP meetings this requested time will be used as a basis for their decisions.
How Has This Been Tested

I have added e2e test cases for the new user time request field. Also tested manually.
Fixes

https://github.com/UserOfficeProject/issue-tracker/issues/1044
Changes

Added a method getCallByQuestionId in CallDataSource.ts to get the call details from question id. This is basically to get the allocation time unit from the call record.
Added a config.requestTime in InstrumentPicker.ts
Modifying the way we retrive the instrumentIds from answer in InstrumentPicker.ts. The logic in the method assignProposalsToInstrumentsInternal was broken at a place where it removed the proposal from the instrumentHasProposals table which it inserted in the earlier iteration.
Added a boolean requestTime in FieldConfig.ts
Code changes to display the answer in InstrumentPickerAnswerRendered.tsx when user time request field is answered.
Adding a checkbox option in QuestionInstrumentPickerFormCommon.tsx for Request Time field.
Code changes in QuestionaryComponentInstrumentPicker.tsx to dynamically display Request Time fields depending on the instruments selected. Earlier the answer that got persisted in the database were/was only instrument id(s). In this PR this has been modified to save the answer as an object having two fields instrument id and time requested.
Created a new react hook useQuestionCallData to get the call details from question id. This is required to get the allocation time unit from call record which is shown in InstrumentPickerAnswerRendered.tsx when request time field is answered.

Depends on

Yup validation for instrument picker question. A separate PR will be raised for the same.
Tests included/Docs Updated?

[x] I have added tests to cover my changes.

[ ] All relevant doc has been updated

@Bhaswati1148 is this one ready for review?

@Bhaswati1148 is this one ready for review?
Two of the test cases are failing in templateBasic.cy.ts which I need to look into. Otherwise it should be fine for review I believe.


Unknown Test Datas (?)

Affected Version
Silverstripe 4.12
Description
Hi there,
I just installed a silverstripe through a composer and added a couple of data objects. And as soon as I dev/build them, I got some unknown data objects, it got some records too btw. Is this supposed to happen? If it's yes, How can I hide them?
Here is the unknow data objects:

Test React FormBuilder
Elemental Behat Test Admin
GridField Test Navigation
Registry
Test ModelAdmin

Steps to Reproduce

I ran composer create-project silverstripe/installer .
Making a couple of data objects (This step might be doesn't mean anything but this is how I got them)
Running dev/build
Go to CMS Admin and there you go

Same issue here, the admin is flooded with test data.
composer remove silverstripe/frameworktest removes the mess in the admin.