Optimize ParseGatewayRDSRouteName

In real world we have seen this use 10% total Istiod CPU. It is trivial to optimize.
Technically we could get rid of the last allocation too but its more complex.
name                         old time/op    new time/op    delta
ParseGatewayRDSRouteName-16     227ns ± 8%      66ns ± 7%  -70.77%  (p=0.000 n=10+10)

name                         old alloc/op   new alloc/op   delta
ParseGatewayRDSRouteName-16      184B ± 0%        8B ± 0%  -95.65%  (p=0.000 n=10+10)

name                         old allocs/op  new allocs/op  delta
ParseGatewayRDSRouteName-16      4.00 ± 0%      1.00 ± 0%  -75.00%  (p=0.000 n=10+10)

/retest


Entities doesn't spawn

Hello. I don't know where I can get help with this library :(
I'm using MCProtocolLib 1.12.2-2 to create MC server proxy with ability to reconnect to proxy. Everything went well before i tried to write all entities to Map and spawn them on player reconnect.
I done everything from this guide.
I send packets to spawn entities at the end of everything that is said in the guide above. Some entities spawns and some do not. I don't know, where my mistake is...
The code I use to spawn entities.
The code I use to store entities in a Map.
Entity and MobEntity classes
entityMap - is a ConcurrentMap with (Integer entityId, Entity entity).
Entity - is my class to store all about entity (like x, y, z, metadata, etc...)

Sorry for the late reply, but older versions of the library are not actively supported. Hope you managed to solve your issue by now, though.


Can't get session and user after success call supabase.auth.signInWithOAuth(Provider.******)

Can't get session and user after success call supabase.auth.signInWithOAuth(Provider.******)
After signing into the app with supabase.auth.signInWithOAuth(Provider.******);
it is clear that everything worked correctly, the user's photo appears in the window.
But I can't get session and user: Supabase.instance.client.auth.currentSession == null
and Supabase.instance.client.auth.currentUser == null.
In the supabase console, the new user is not added to the user list.
Prompt the decision of reception of session and the user after OAUTH authorization.

@r-serega
Have you setup deep links to bring the user back to the app after completing the OAuth sign in?
You can follow here to configure deep links.

are you talking about this page?

so they are listed

+1


Update change-way-model-materialized.md

What are you changing in this pull request and why?

Checklist

[ ] Review the Content style guide so my content adheres to these guidelines.
[ ] For docs versioning, review how to version a whole page and version a block of content.
[ ] Add a checklist item for anything that needs to happen before this PR is merged, such as "needs technical review" or "change base branch."

Adding or removing pages (delete if not applicable):

[ ] Add/remove page in website/sidebars.js
[ ] Provide a unique filename for new pages
[ ] Add an entry for deleted pages in website/static/_redirects
[ ] Run link testing locally with npm run build to update the links that point to deleted pages

hey @BobClaerhoutTropos thanks for openign this up! can you give some more info on why the indentation change here?
This current config ensures that:

all models within the jaffle_shop namespace (directory) are materialized as tables.
all models within the example namespace (directory) are materialized as views.

so the existing block separates the configs for jaffle_shop and example:
models:
  jaffle_shop:
    +materialized: table
  example:
    +materialized: view

Hi @mirnawong1 ,
I don't see where the jaffle_shop directory would be created? The jaffle_shop is appearing because the tutorial directs you to change the name of the project. That's, according to me, the only way jaffle_shop ends up in this model config, right?
It starts from this example:
models:
  my_new_project:
    # Applies to all files under models/example/
    example:
      +materialized: table

Here you see that the example directory also has more indents compared to the my_new_project item. It was mostly because of this original structure, I made the PR. I just tested this again and it just doesn't work if the indentation is similar to the my_new_project or jaffle_shop


purpose of '.add_fn(|x| x * 0.125)' in cifar example

At https://github.com/LaurentMazare/tch-rs/blob/master/examples/cifar/main.rs#L45 we have a line of code where we take a Tensor, then multiply every element by 0.125 .
What is the purpose of this line and why do we do this? (Scaling everything by 1/8th seems pointless). Is this some type of magical constant that causes the algorithm to converge faster? If so, where can I read up more on this?

This model is adapted from cifar10-fast which has the same 0.125. I don't think there is anything deep behind this: you could probably achieve the same effect by tweaking the learning rate and the weight decay accordingly.

I'll look into the Stanford/Dawn paper. Thanks!


Add Labelary overlay to webapi

This PR offers the possibility to superimpose the image of Labelary on the image of the viewer. This allows you to quickly see how accurate the new viewer is.

Seems useful to me. It makes it easy to see which areas need attention.

I would suggest to do the two requests separately as it is a development support.

I would suggest to do the two requests separately as it is a development support.

Which two requests do you mean?

One for rendering with BinaryKits and a second for the optional request to Labelary. And the create the overlay in the browser

Okay then my pull requests fit right?

You have built the overlay logic into the main request. Which is activated with the parameter ShowLabelaryOverlay. I don't think that's so great.

You have built the overlay logic into the main request. Which is activated with the parameter ShowLabelaryOverlay. I don't think that's so great.

I do not understand the problem😔
Why is this not good?

The Single Responsibility Principle (SRP)
The idea behind the SRP is that every class, module, or function in a program should have one responsibility/purpose in a program. As a commonly used definition, "every class should have only one reason to change". The class above violates the single responsibility principle
In your modified version, the function now has several tasks. If I want to add another service I have to change the existing code again.
If you build an additional function you do not change the existing functions.

@Int32Overflow
I think he wants the new logic not to be inside the function RenderZpl, an easy adjust possible?

One for rendering with BinaryKits and a second for the optional request to Labelary. And the create the overlay in the browser

I second this. It would also make it possible to turn the overlay on and off without the need fire off a new request.

Superseded by #156.


Antrea communication security enhancement

Describe what you are trying to solve
antrea-controller now generates a self-signed certificate to serve requests, and its clients kube-apiserver and antrea-agent cannot get the CA that signed the cert so disable verifying server's certificate. This leaves antrea subject to MITM attacks if the underlying network is insecure.
We had #366 and #616 to track related issues, this proposal is to discuss a complete long term solution.
This proposal supports:

Taking user-provided TLS cert and the CA cert from a mounted secret antrea-controller-tls, can be created manually or generated by cert-manager
Auto-reloading the mounted secrets if the secret is updated
Generating and verifying self-signed TLS cert if selfSignedCert option is set to true.

Describe the solution you have in mind

Add selfSignedCert bool option to antrea-controller:

// Indicates whether to use auto-generated self-signed TLS certificate.
// If false, The TLS certificate key pair and the CA certificate must be provided via a secret:
//   ca.crt: <CA certificate>
//   tls.crt: <TLS certificate>
//   tls.key: <TLS private key>
// Then the secret must be mounted to antrea-controller Pod under "/var/run/antrea/secrets".
// Defaults to true.
SelfSignedCert bool `yaml:"selfSignedCert,omitempty"`

If user sets SelfSignedCert to true, antrea-controller will generate a self-signed TLS cert and publish the public cert to a well known configmap antrea-ca, inject the public cert to antrea APIServices.
If user sets SelfSignedCert to false, antrea-controller will expect a secret is mounted under /var/run/antrea/secrets which has 3 files: ca.crt, tls.crt, tls.key; antrea-controller will publish ca.crt to a well known configmap antrea-ca and inject ca.crt to antrea APIServices.
If user sets SelfSignedCert to false, antrea-controller will watch the mounted cert files, and restart its apiserver when a change is detected, and update CABundle in antrea-ca configmap and antrea APIServices.
antrea-agent will mount antrea-ca ConfigMap, so it will be pending before the configmap is created, then it will read the CA from the mounted volume and use it to verify the server.
antrea-agent will watch the mounted CA cert, and recreate its clientset when a change is detected.

Describe how your solution impacts user flows
Scenario (default): User doesn't provide certs, selfSignedCert is set to true

antrea-controller generates self-signed cert key pair, serves requests with them, publishes the public cert to antrea-ca ConfigMap and "caBundle" of antrea APIServices.
kube-apiserver verifies antrea-controller's serving cert with the "caBundle" of antrea APIServices.
antrea-agent verifies antrea-controller's serving cert with the CA mounted from antrea-ca ConfigMap.

Scenario: User provides ca.crt, tls.crt, tls.key by creating a secret

user signs a TLS cert key pair with dns names antrea.kube-system.svc, antrea.kube-system.svc.local.cluster
user creates a secret:

apiVersion: v1
kind: Secret
type: kubernetes.io/tls
metadata:
  name: antrea-controller-tls
  namespace: kube-system
data:
  ca.crt: <CA certificate>
  tls.crt: <TLS certificate>
  tls.key: <TLS private key>

users sets selfSignedCert=false and mounts the secret to antrea-controller Pod:

volumeMounts:
  - mountPath: /var/run/antrea/secrets
    name: antrea-controller-tls
...
volumes:
  - secret:
      secretName: antrea-controller-tls
      defaultMode: 0400
    name: antrea-controller-tls

antrea-controller reads secrets from mounted volume, serves requests with them, publishes the CA cert to antrea-ca ConfigMap and "caBundle" of antrea APIServices.
kube-apiserver verifies antrea-controller's serving cert with the "caBundle" of antrea APIServices.
antrea-agent verifies antrea-controller's serving cert with the CA mounted from antrea-ca ConfigMap.

Scenario: User uses a 3rd cert management tool to generate the secret, for example cert-manager

user creates a certificate request:

apiVersion: cert-manager.io/v1alpha2
kind: Certificate
metadata:
  name: antrea-controller-tls
  namespace: kube-system
spec:
  dnsNames:
    - antrea.kube-system.svc
    - antrea.kube-system.svc.local.cluster
  secretName: antrea-controller-tls
  issuerRef:
    name: ca-issuer

cert-manager will create a secret named antrea-controller-tls with keys ca.crt, tls.crt, tls.key.

user sets selfSignedCert=false and mounts the secret to antrea-controller Pod:

volumeMounts:
  - mountPath: /var/run/antrea/secrets
    name: antrea-controller-tls
...
volumes:
  - secret:
      secretName: antrea-controller-tls
      defaultMode: 0400
    name: antrea-controller-tls

antrea-controller reads secrets from mounted volume, serves requests with them, publishes the CA cert to antrea-ca ConfigMap and "caBundle" of antrea APIServices.
kube-apiserver verifies antrea-controller's serving cert with the "caBundle" of antrea APIServices.
antrea-agent verifies antrea-controller's serving cert with the CA mounted from antrea-ca ConfigMap.

Possible questions:

Why is there a separate ConfigMap antrea-ca to publish the CA cert instead of reusing the secret?
We cannot mount the secret that has TLS cert key pair to antrea-agent to follow the principle of least privilege.
We don't always have the antrea-controller-tls secret as it's optional.
It's a common practice to publish the CA cert as ConfigMap: Kubernetes uses extension-apiserver-authentication ConfigMap to publish client-ca-file and requestheader-client-ca-file to aggregated apiservers; Istio uses istio-security ConfigMap to publish the self-signed root cert.

What should be the type of antrea-controller-tls?
Both Opaque and kubernetes.io/tls can work. But if you want to use kubernetes.io/tls, kubectl create secret tls can only take the TLS cert and the TLS key and not the CA cert, though ca.crt is acceptable as a key of tls secret (cert-manager will always set it).
You can use kubectl apply -f to create a kubernetes.io/tls secret like the example shows.
Or you can use kubectl create secret generic to create a Opaque secret, the keys must be tls.crt, tls.key, ca.crt.

@jianjuns @antoninbas @salv-orlando @vicky-liu Please review the proposal.

LGTM. I still like to simply mount the Secret, but I know it might not work for the controller generated cert.
Question:

c. If antrea-ca.crt, antrea-controller.crt and antrea-controller.key don't exist, it generates a CA and self-signed cert/key, inject the CA cert to the antrea APIServices and the antrea-ca Secret. It doesn't persist the CA key and self-signed cert/key, so a restart can achieve cert rotation.

Why we need a separate CA cert here? Controller could just publish the self signed cert as the CA cert for Agent right?

@tnqn thanks for the detailed proposal
Do you think any user may express concerns about antrea-controller-tls using the Opaque secret type instead of kubernetes.io/tls? Concretely is there any difference from a security perspective?
Maybe you can clarify the following:

TLS type requires valid cert and key, it makes user-provided certs mandatory, which might stop users that are not familiar with certs from trying out antrea.

I would think that we could omit the secret altogether (instead of not setting the data fields) to use the current insecure behavior, and the user could create the secret themselves when they want to use an actual certificate:
kubectl create secret tls antrea-controller-tls ...

Antrea could check if a certificate with name antrea-controller-tls exists and react appropriately.

LGTM. I still like to simply mount the Secret, but I know it might not work for the controller generated cert.

In this proposal, CA is mounted to antrea-agent, TLS cert is mounted to antrea-controller, but we have to grant update permission of CA to antrea-controller, so it doesn't make difference between adding a get/watch permission to antrea-controller or mounting it. But I guess an API based watcher is simpler to implement and quicker to update APIServices, as mounted secret needs up to 1 minute to get the update.

Question:

c. If antrea-ca.crt, antrea-controller.crt and antrea-controller.key don't exist, it generates a CA and self-signed cert/key, inject the CA cert to the antrea APIServices and the antrea-ca Secret. It doesn't persist the CA key and self-signed cert/key, so a restart can achieve cert rotation.

Why we need a separate CA cert here? Controller could just publish the self signed cert as the CA cert for Agent right?

I was following the way kube-apiserver generating its self signed cert: creating a self signed CA first, then signing a TLS cert with it and using the latter one: https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/client-go/util/cert/cert.go#L94.
Cilium is doing similar things but it's signing multiple TLS certs: https://github.com/cilium/cilium-etcd-operator/blob/master/certs/certs.go#L33.
However, I found cert-manager just generates a self-signed CA and uses it as the serving cert of its webhook server: https://github.com/jetstack/cert-manager/blob/master/pkg/webhook/authority/authority.go#L312.
So I guess both approaches can work technically, maybe let's decide this later after I experiment generating cert or using mounted cert with lib apiserver's utils to see which is more convenient?

Do you think any user may express concerns about antrea-controller-tls using the Opaque secret type instead of kubernetes.io/tls? Concretely is there any difference from a security perspective?

AFAIK there's no security difference between tls and Opaque as Opaque is also widely used to store TLS certs, e.g. the CA cert/key of the webhook of cert-manager: https://github.com/jetstack/cert-manager/blob/master/pkg/webhook/authority/authority.go#L351.
Essentially TLS secret is just a type that will do some validation. Both of them are stored as base64 encoded plain text. I did some experiment and found the TLS secret doesn't validate cert and key's on server side but just checks whether there are two keys "tls.crt" and "tls.key", it's kubectl create secret tls validating the certs. So if we use kubectl apply to create the tls secret, we are able to set empty values.

Maybe you can clarify the following:

TLS type requires valid cert and key, it makes user-provided certs mandatory, which might stop users that are not familiar with certs from trying out antrea.

I would think that we could omit the secret altogether (instead of not setting the data fields) to use the current insecure behavior, and the user could create the secret themselves when they want to use an actual certificate:
kubectl create secret tls antrea-controller-tls ...

Antrea could check if a certificate with name antrea-controller-tls exists and react appropriately.

That depends on whether we still want to mount the secret or read the secret from API. If mounting, the secret must exist otherwise kubelet will pending on waiting for secret. I think both Jianjun and Andy suggest to use the mount way and read certs from filesystem. But given that we can actually set empty value when creating TLS secret, I suppose this is no longer a problem?

@jianjuns @antoninbas I made some changes to the proposal based on some new investigation result and the PoC code in #714. Now we should be able to support user providing secrets themselves, or via cert-manager, or antrea generating self-signed certs.
Please take another look.

Thanks @tnqn, I did a quick review and left some initial comments in the PR

Took a quick look too. LGTM overall. Will do more detailed code review.


sesman.ini and killdisconnected setting doesn't seem to work

I have MaxSessions set to 1 in my sesman.ini and killDisconnected=true.
When a user disconnects from RDP I wait 60seconds and the process is still running and holding port 5910 so that any other use can't disconnect. Is this working as intended? Shouldn't that setting kill the process holding that port after 60 seconds?

It seems you're using Xvnc backend because you mention about port 5910. The feature doesn't work with Xvnc session. Use xorgxrdp instead.

No feedback from the reporter for 1 month. Closing.

Tip for the Tigervnc users:
Tigervnc implementation of Xvnc supports a "−MaxDisconnectionTime" option:
So editing sesman.ini to work around:
[Xvnc]

...

param=-MaxDisconnectionTime

param=60


Update r.tracking in RenameFile

Previously, renaming a file would cause that file to stop uploading.
As discussed OOB, going forward, all file-related info should be stored in one place in the renter. The "right thing to do" in this case is probably to move the RepairPath field to the file type, rather than maintaining a separate map in the renter.

Need an identical PR into LTS. Leaving this open until that is created.

This needs testing, preferably in the api

The core behavior change was already tested, but I added further testing in the API package to confirm that uploads and downloads continue to work after renaming.

Testing needs to be added for all bugfixes, to verify that the bug is properly fixed and also that it says fixed in the future.


Issue when using Session.Click(pattern, timeout) function with timeout > 0f

Hi,
I have a quick look in the code and see that it maybe something wrong for this
[code]
protected bool RunCommand(string command, IPattern pattern, float timeoutInSeconds)
{
pattern.Validate();
		var script = string.Format(
			"print \"SIKULI#: YES\" if {0}({1}{2}) else \"SIKULI#: NO\"",
			command,
			pattern.ToSikuliScript(),
			AddTimeout(timeoutInSeconds)
			);
           ...
           }

[code]
This will ad a key modifier code into click function in stead of a timeout for click action.
Please help me check.

Ah, you are correct! The click's 2nd parameter is a modified, not a timeout! Actually, I don't think "click" even supports a timeout. This is indeed a bug, though in practice you can simply not provide a timeout and it'll work. I'll mark this as a defect, thanks!

I "fixed" the timeout issues on these methods by... removing the timeout parameter :)


Add note about Preact X

We've been getting a few issues where users mixed preact-compat with Preact X. Hopefully this small note will guide users into the right direction :)
Related: https://github.com/developit/preact/issues/1514

Looks like we need to update the node version in Travis for rollup


Is this repo no longer maintained?

I was just surprised to see the last release was 4 years ago ... :exploding_head:
It seems so awesome! What happened?

It is maintained but I think the next major release will be with fully implemented TypeScript

It is maintained but I think the next major release will be with fully implemented TypeScript

Oh great, that's fantastic news. Thank you @Nelias.

It is maintained but I think the next major release will be with fully implemented TypeScript

very good, looking forward to it ( :

It is maintained but I think the next major release will be with fully implemented TypeScript

is the new code being developed in another fork of the repo? i couldn't find any other active branch with typescript code in it?

We're close to a new release, just hardening the overall implementation.


Merge latest dev changes into Global

There are upcoming changes to the URL structure that have been and will be made against the Global branch and deployed to Thor, so this is making sure global is up to date with the latest dev changes so everything can be tested together.

:+1: :facepalm:

Oh crap. Ok, should I be merging into Global then? Cause I was and then we had decided not to anymore, so I went back to merging into Dev...


remove small chart titles and legend files

Removed chart legend component (its a leftover garbage that I was trying to implement before using out of the box Patternfly chart)
Also removed small titles because mocks are updated and they were removed
Before

After

/lgtm


update libphonenumber-js to 1.4.6 for bug in the number validation

#41
Apparently this problem comes from the same library of validation of numbers, which is currently solved, just update the library and change the name of the functions that changed in the new version
https://github.com/catamphetamine/libphonenumber-js/issues/159
update libphonenumber-js to 1.4.6 for bug in the number validation
update functions format to formatNumber, asYouType to AsYouType in component

sorry for the delay guys.
Thank you!


Contradicting information regarding Quarantine data retention timeframe in Microsoft defender

This is the exact text from Group policy setting in Windows 11 22631.1830

If you disable or do not configure this setting, items will be kept in the quarantine folder indefinitely and will not be automatically removed.

But this web page says Quarantined items will be deleted after 90 days by default.

I'm not using Defender for Endpoint, I use the normal Microsoft Defender for consumer, and the page says it also applies to Microsoft Defender.

So I'm reporting this contradicting info to be reviewed and fixed, thanks.

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: 77c974b4-7004-d52c-0ffe-c6f3729477f9
Version Independent ID: 7162a35d-fc78-54ac-531a-02ec8c07a8ff
Content: Configure remediation for Microsoft Defender Antivirus detections
Content Source: microsoft-365/security/defender-endpoint/configure-remediation-microsoft-defender-antivirus.md
Service: microsoft-365-security
Sub-service: mde
GitHub Login: @denisebmsft
Microsoft Alias: deniseb

@HotCakeX Thank you for your feedback. We have made changes to the document via PR#https://github.com/MicrosoftDocs/microsoft-365-docs/pull/12195
Once the author approves, the changes will be live.
Thanks
Sri


[TC-OO-1.1] Add Featuremap to pump-app and pump-controller-app

Problem
Featuremap is missing in OnOff cluster for some examples
Proposed Solution
Add featuremap Example projects where it is missing

PR merged


Fix onOpenDocument example function

Message toast wasn’t showing up because the dictionary structure of context is slightly different.

Good catch. The guide is actually in the develop branch, in docs/guides. Could you rebase your PR?

oops yeah!


Doe not compile on Ubuntu xenial against varnish-5.1.3 source

When I run:
 ./configure VARNISHSRC=/root/varnish-5.1.3 VMODDIR=/usr/lib/varnish/vmods
It fails with error:
checking for /root/varnish-5.1.3/include/varnishapi.h... no
configure: error: in `/root/libvmod-ldap':
configure: error: "/root/varnish-5.1.3" is not a Varnish source directory

although I've the source fetched via apt-get source varnish=5.1.3. Same result when I tried with the downloaded source tarball. Also tried to build the varnish source first but that didn't make any difference either.
Am I doing something wrong or the module is not compatible with varnish-5.1?

Thank you for having interest in this VMOD.
This VMOD support to Varnish3.0.x
I'll think about support current version.
Please wait a little while.


Password Authentication?

Can you use password authentication? It appears that it only takes a username to login (based on the database only requiring a username)

It is not supported right now. If you want to add it you need to add it here. You can sende a StatusResponse.INVALID_CREDENTIALS if the password check fails. It will probably be fixed when de login server gets added.


common/cgroup: don't add isolators with nil limits

If someone calls MaybeAddIsolator with a recognised isolator type but a
nil *resource.Limit, a kernel panic results when we try to call Value()
on the nil Limit. Rather than reaching this stage, just skip trying to
create an isolator when the supplied limit is nil.
Fixes #1377

LGTM

As pointed out by @ecnahc515 this is a bit of a brute-force solution in that it doesn't allow for individual isolators that might deal fine with a nil resource.Limit (perhaps because they have their own default value?); but I think we can deal that if/when we need it.


Evac Point (Map)

About the PR

Added a proper evacuation point map
Media

[ ] I have added screenshots/videos to this PR showcasing its changes ingame, or this PR does not require an ingame showcase

Changelog

:cl:

add: Added an actual playable map

erroneous test fail


bin/youtube-dl has problem

Hello you,
I see your bin/youtube-dl had problem, please check.
Best regard
Phong Dao

what problem?

events.js:72
throw er; // Unhandled 'error' event
^
Error: Command failed: Usage: youtube-dl [OPTIONS] URL [URL...]
youtube-dl: error: no such option: --max-quality
at ChildProcess.exithandler (child_process.js:648:15)
at ChildProcess.emit (events.js:98:17)
at maybeClose (child_process.js:756:16)
at Process.ChildProcess._handle.onexit (child_process.js:823:5)

Seems to be related to #74.

--max-quality was changed to --format


[New chain]: Lisk Sepolia 1.4.1

Summary

https://github.com/safe-global/safe-deployments/pull/589
https://github.com/ethereum-lists/chains/blob/master/_data/chains/eip155-4202.json

Chain ID
4202
Chain detail URL
https://chainlist.org/chain/4202
RPC URL
https://rpc.sepolia-api.lisk.com
Blockscout Client URL
https://sepolia-blockscout.lisk.com/api/v1/graphql
Etherscan Client URL
No response
Etherscan Client API URL
No response
Version
1.4.1
Address (Master copy)
0x41675C099F32341bf84BFc5382aF534df5C7461a
Deployment Tx hash (Master copy)
0xcc00d45c8d4398b504d3d3f0e8458d268aafe6e952b31f816c53bf2ac63b0358
Block explorer URL (Master copy)
No response
Address (Master copy L2)
0x29fcB43b46531BcA003ddC8FCB67FFE91900C762
Deployment Tx hash (Master copy L2)
0xd93b1879d70bb2115baa57027fd50a175786342b68087d858de78d21dd5c9972
Block explorer URL (Master copy L2)
No response
Address (Proxy factory)
0x4e1DCf7AD4e460CfD30791CCC4F9c8a4f820ec67
Deployment Tx hash (Proxy factory)
0x12dff953102d99cc0f3634aa1c58fc2b41244b1a953b0939156e85598216658c
Block explorer URL (Proxy factory)
No response

/execute


Usecase: editing an entry

With the current setup, editing an entry is a challenge. One needs the entry to show the current information but you need an entry builder to actually update the entry. GUI wise this is kind of a hell toggling between two different objects to handle this.
Is this usecase not in view for this project? or is there another pattern in use here?

Editing an entry is of course a valid use-case. The domain objects are mostly immutable which has a few advantages. But I also know that handling immutable objects in java can be a challenge.
If you want to build a GUI around KeePass it could make sense that you don't use the domain objects directly in your GUI but instead use some kind of intermediate layer that is fully mutable. If the user has finished his work and want to save the changes in the KeePass file, you could then use the builders to transfer the changes into the domain model and write the KeePass file.
What do you think about this?

Yeah that is the solution I am already working on.  It makes sense in my case as I am can make it a kotlin class and javaFX enabled ;)

Ok, let me know if you need some help or if you have trouble with the api.


CWE-300: Channel Accessible by Non-Endpoint

Expected behavior
Actual behavior
How can we resolve this vulnerability?
The netty-handler package is vulnerable to Improper Certificate Validation. The newHandler methods in SslContext.class do not verify hostnames by default when generating a new SSLEngine. An attacker can exploit this as part of a Man-in-the-Middle (MITM) attack to spoof their identity and gain access to or modify sensitive data.
Vulnerability reported in<EMAIL_ADDRESS>which depends on netty-handler-4.1.101.Final.jar
Steps to reproduce
Synk Scan reported this vulnerability
https://cwe.mitre.org/data/definitions/300.html
Minimal yet complete reproducer code (or URL to code)
Netty version
4.1.101.FINAL
JVM version (e.g. java -version)
Java 17
OS version (e.g. uname -a)

Please see previous issue reports on this invalid finding, such as #13665.


Install virtualenv on ubuntu 16.04

Hello, thank you for doing great job!
Testing on xubuntu 16.04, however shows that .deb pkg required for virtualenv:
app1@jm:~/prj-ex$ hatch env dk
Traceback (most recent call last):
  File "/usr/local/bin/hatch", line 11, in <module>
    sys.exit(hatch())
  File "/home/app1/.local/lib/python3.5/site-packages/click/core.py", line 722, in __call__
    return self.main(*args, **kwargs)
  File "/home/app1/.local/lib/python3.5/site-packages/click/core.py", line 697, in main
    rv = self.invoke(ctx)
  File "/home/app1/.local/lib/python3.5/site-packages/click/core.py", line 1066, in invoke
    return _process_result(sub_ctx.command.invoke(sub_ctx))
  File "/home/app1/.local/lib/python3.5/site-packages/click/core.py", line 895, in invoke
    return ctx.invoke(self.callback, **ctx.params)
  File "/home/app1/.local/lib/python3.5/site-packages/click/core.py", line 535, in invoke
    return callback(*args, **kwargs)
  File "/usr/local/lib/python3.5/dist-packages/hatch/cli.py", line 1194, in env
    create_venv(venv_dir, pypath, verbose=verbose)
  File "/usr/local/lib/python3.5/dist-packages/hatch/venv.py", line 69, in create_venv
    subprocess.run(command, shell=NEED_SUBPROCESS_SHELL)
  File "/usr/lib/python3.5/subprocess.py", line 693, in run
    with Popen(*popenargs, **kwargs) as process:
  File "/usr/lib/python3.5/subprocess.py", line 947, in __init__
    restore_signals, start_new_session)
  File "/usr/lib/python3.5/subprocess.py", line 1551, in _execute_child
    raise child_exception_type(errno_num, err_msg)
FileNotFoundError: [Errno 2] No such file or directory: 'virtualenv'
app1@jm:~/prj-ex$ virtualenv
The program 'virtualenv' is currently not installed. You can install it by typing:
sudo apt install virtualenv
app1@jm:~/prj-ex$

What is a good way to add this depency to setup.py?

python packages provided by Linux distros usually are namespaced: https://packages.ubuntu.com/trusty/python-virtualenv
$ sudo apt install python-virtualenv

One should not install packages at system level as it have put some load on your system.
Always try using pip or other package managers

It's working with installed package, no doubt. But if this tool gonna replace all the things needed in python, maybe understandable exception gonna help, for users that doesn't know anythyng about python tools, or maybe it's just a waste of time.

Sorry I am so late to this! Had to see my doctor.
@lulunevermind How did you install Hatch?

It seems like a my fresh ubuntu vm somehow have spoiled access rights or wrong user.
app1@u36qaxubu07:~$ pip3 install hatch
Collecting hatch
  Downloading hatch-0.8.0-py3-none-any.whl (85kB)
    100% |████████████████████████████████| 92kB 844kB/s
Collecting appdirs (from hatch)
  Downloading appdirs-1.4.3-py2.py3-none-any.whl
Collecting pip>=9.0.1 (from hatch)
  Downloading pip-9.0.1-py2.py3-none-any.whl (1.3MB)
    100% |████████████████████████████████| 1.3MB 840kB/s
Collecting twine>=1.9.1 (from hatch)
  Downloading twine-1.9.1-py2.py3-none-any.whl
Collecting colorama (from hatch)
  Downloading colorama-0.3.9-py2.py3-none-any.whl
Collecting coverage (from hatch)
  Downloading coverage-4.4.1-cp35-cp35m-manylinux1_x86_64.whl (196kB)
    100% |████████████████████████████████| 204kB 2.8MB/s
Collecting setuptools>=36.0.0 (from hatch)
  Downloading setuptools-36.4.0-py2.py3-none-any.whl (478kB)
    100% |████████████████████████████████| 481kB 1.9MB/s
Collecting atomicwrites (from hatch)
  Downloading atomicwrites-1.1.5-py2.py3-none-any.whl
Collecting virtualenv (from hatch)
  Downloading virtualenv-15.1.0-py2.py3-none-any.whl (1.8MB)
    100% |████████████████████████████████| 1.8MB 658kB/s
Collecting pytest (from hatch)
  Downloading pytest-3.2.2-py2.py3-none-any.whl (187kB)
    100% |████████████████████████████████| 194kB 3.9MB/s
Collecting wheel>=0.27.0 (from hatch)
  Downloading wheel-0.29.0-py2.py3-none-any.whl (66kB)
    100% |████████████████████████████████| 71kB 6.9MB/s
Collecting semver>=2.7.8 (from hatch)
  Downloading semver-2.7.8.tar.gz
Collecting click (from hatch)
  Downloading click-6.7-py2.py3-none-any.whl (71kB)
    100% |████████████████████████████████| 71kB 5.5MB/s
Collecting requests-toolbelt>=0.8.0 (from twine>=1.9.1->hatch)
  Downloading requests_toolbelt-0.8.0-py2.py3-none-any.whl (54kB)
    100% |████████████████████████████████| 61kB 7.7MB/s
Collecting requests!=2.15,!=2.16,>=2.5.0 (from twine>=1.9.1->hatch)
  Downloading requests-2.18.4-py2.py3-none-any.whl (88kB)
    100% |████████████████████████████████| 92kB 5.7MB/s
Collecting pkginfo>=1.0 (from twine>=1.9.1->hatch)
  Downloading pkginfo-1.4.1-py2.py3-none-any.whl
Collecting tqdm>=4.11 (from twine>=1.9.1->hatch)
  Downloading tqdm-4.15.0-py2.py3-none-any.whl (46kB)
    100% |████████████████████████████████| 51kB 8.1MB/s
Collecting py>=1.4.33 (from pytest->hatch)
  Downloading py-1.4.34-py2.py3-none-any.whl (84kB)
    100% |████████████████████████████████| 92kB 6.5MB/s
Collecting chardet<3.1.0,>=3.0.2 (from requests!=2.15,!=2.16,>=2.5.0->twine>=1.9.1->hatch)
  Downloading chardet-3.0.4-py2.py3-none-any.whl (133kB)
    100% |████████████████████████████████| 143kB 4.0MB/s
Collecting urllib3<1.23,>=1.21.1 (from requests!=2.15,!=2.16,>=2.5.0->twine>=1.9.1->hatch)
  Downloading urllib3-1.22-py2.py3-none-any.whl (132kB)
    100% |████████████████████████████████| 133kB 4.3MB/s
Collecting certifi>=2017.4.17 (from requests!=2.15,!=2.16,>=2.5.0->twine>=1.9.1->hatch)
  Downloading certifi-2<IP_ADDRESS>-py2.py3-none-any.whl (349kB)
    100% |████████████████████████████████| 358kB 2.6MB/s
Collecting idna<2.7,>=2.5 (from requests!=2.15,!=2.16,>=2.5.0->twine>=1.9.1->hatch)
  Downloading idna-2.6-py2.py3-none-any.whl (56kB)
    100% |████████████████████████████████| 61kB 6.6MB/s
Building wheels for collected packages: semver
  Running setup.py bdist_wheel for semver ... done
  Stored in directory: /home/app1/.cache/pip/wheels/dc/45/11/33c3c46fc699c32f15d4d7e05fc8806af62ad653c6abc9e97d
Successfully built semver
Installing collected packages: appdirs, pip, chardet, urllib3, certifi, idna, requests, requests-toolbelt, setuptools, pkginfo, tqdm, twine, colorama, coverage, atomicwrites, virtualenv, py, pytest, wheel, semver, click, hatch
Successfully installed appdirs-1.4.3 atomicwrites-1.1.5 certifi-2<IP_ADDRESS> chardet-3.0.4 click-6.7 colorama-0.3.9 coverage-4.4.1 hatch-0.8.0 idna-2.6 pip-9.0.1 pkginfo-1.4.1 py-1.4.34 pytest-3.2.2 requests-2.18.4 requests-toolbelt-0.8.0 semver-2.7.8 setuptools-36.4.0 tqdm-4.15.0 twine-1.9.1 urllib3-1.22 virtualenv-15.1.0 wheel-0.29.0
app1@u36qaxubu07:~$ hatch env dk
No command 'hatch' found, did you mean:
 Command 'match' from package 'mailavenger' (universe)
 Command 'hitch' from package 'hitch' (universe)
 Command 'batch' from package 'at' (main)
 Command 'phatch' from package 'phatch-cli' (universe)
 Command 'watch' from package 'procps' (main)
 Command 'patch' from package 'patch' (main)
hatch: command not found
app1@u36qaxubu07:~$

On fresh Docker py3.5 all works perfectly.
8831 ◯  docker run --name py35 --entrypoint '/bin/bash' -it sgoblin/python3.5                    ⏎
Unable to find image 'sgoblin/python3.5:latest' locally
latest: Pulling from sgoblin/python3.5
d5c6f90da05d: Already exists
1300883d87d5: Already exists
c220aa3cfc1b: Already exists
2e9398f099dc: Already exists
dc27a084064f: Already exists
4e91d3d08229: Pull complete
bb234ad3daa6: Pull complete
Digest: sha256:a061b3f2cd6d8805cd515c52e4325e0a90f36b00e2928863d825c72bcf68412e
Status: Downloaded newer image for sgoblin/python3.5:latest
root@a5c958742cf1:/# pip3 install hatch
Collecting hatch
  Downloading hatch-0.8.0-py3-none-any.whl (85kB)
    100% |################################| 92kB 799kB/s
Collecting pytest (from hatch)
  Downloading pytest-3.2.2-py2.py3-none-any.whl (187kB)
    100% |################################| 194kB 3.7MB/s
Collecting pip>=9.0.1 (from hatch)
  Downloading pip-9.0.1-py2.py3-none-any.whl (1.3MB)
    100% |################################| 1.3MB 1.4MB/s
Collecting twine>=1.9.1 (from hatch)
  Downloading twine-1.9.1-py2.py3-none-any.whl
Collecting colorama (from hatch)
  Downloading colorama-0.3.9-py2.py3-none-any.whl
Collecting coverage (from hatch)
  Downloading coverage-4.4.1-cp35-cp35m-manylinux1_x86_64.whl (196kB)
    100% |################################| 204kB 4.1MB/s
Collecting appdirs (from hatch)
  Downloading appdirs-1.4.3-py2.py3-none-any.whl
Collecting semver>=2.7.8 (from hatch)
  Downloading semver-2.7.8.tar.gz
Collecting atomicwrites (from hatch)
  Downloading atomicwrites-1.1.5-py2.py3-none-any.whl
Collecting setuptools>=36.0.0 (from hatch)
  Downloading setuptools-36.4.0-py2.py3-none-any.whl (478kB)
    100% |################################| 481kB 2.9MB/s
Requirement already satisfied (use --upgrade to upgrade): virtualenv in /usr/local/lib/python3.5/dist-packages (from hatch)
Requirement already satisfied (use --upgrade to upgrade): wheel>=0.27.0 in /usr/lib/python3/dist-packages (from hatch)
Collecting click (from hatch)
  Downloading click-6.7-py2.py3-none-any.whl (71kB)
    100% |################################| 71kB 6.1MB/s
Collecting py>=1.4.33 (from pytest->hatch)
  Downloading py-1.4.34-py2.py3-none-any.whl (84kB)
    100% |################################| 92kB 5.8MB/s
Collecting requests-toolbelt>=0.8.0 (from twine>=1.9.1->hatch)
  Downloading requests_toolbelt-0.8.0-py2.py3-none-any.whl (54kB)
    100% |################################| 61kB 1.0MB/s
Collecting tqdm>=4.11 (from twine>=1.9.1->hatch)
  Downloading tqdm-4.15.0-py2.py3-none-any.whl (46kB)
    100% |################################| 51kB 6.5MB/s
Collecting requests!=2.15,!=2.16,>=2.5.0 (from twine>=1.9.1->hatch)
  Downloading requests-2.18.4-py2.py3-none-any.whl (88kB)
    100% |################################| 92kB 1.3MB/s
Collecting pkginfo>=1.0 (from twine>=1.9.1->hatch)
  Downloading pkginfo-1.4.1-py2.py3-none-any.whl
Collecting chardet<3.1.0,>=3.0.2 (from requests!=2.15,!=2.16,>=2.5.0->twine>=1.9.1->hatch)
  Downloading chardet-3.0.4-py2.py3-none-any.whl (133kB)
    100% |################################| 143kB 1.6MB/s
Collecting urllib3<1.23,>=1.21.1 (from requests!=2.15,!=2.16,>=2.5.0->twine>=1.9.1->hatch)
  Downloading urllib3-1.22-py2.py3-none-any.whl (132kB)
    100% |################################| 133kB 1.5MB/s
Collecting idna<2.7,>=2.5 (from requests!=2.15,!=2.16,>=2.5.0->twine>=1.9.1->hatch)
  Downloading idna-2.6-py2.py3-none-any.whl (56kB)
    100% |################################| 61kB 6.0MB/s
Collecting certifi>=2017.4.17 (from requests!=2.15,!=2.16,>=2.5.0->twine>=1.9.1->hatch)
  Downloading certifi-2<IP_ADDRESS>-py2.py3-none-any.whl (349kB)
    100% |################################| 358kB 3.1MB/s
Building wheels for collected packages: semver
  Running setup.py bdist_wheel for semver ... done
  Stored in directory: /root/.cache/pip/wheels/dc/45/11/33c3c46fc699c32f15d4d7e05fc8806af62ad653c6abc9e97d
Successfully built semver
Installing collected packages: py, setuptools, pytest, pip, chardet, urllib3, idna, certifi, requests, requests-toolbelt, tqdm, pkginfo, twine, colorama, coverage, appdirs, semver, atomicwrites, click, hatch
  Found existing installation: setuptools 20.7.0
    Not uninstalling setuptools at /usr/lib/python3/dist-packages, outside environment /usr
  Found existing installation: pip 8.1.1
    Not uninstalling pip at /usr/lib/python3/dist-packages, outside environment /usr
Successfully installed appdirs-1.4.3 atomicwrites-1.1.5 certifi-2<IP_ADDRESS> chardet-3.0.4 click-6.7 colorama-0.3.9 coverage-4.4.1 hatch-0.8.0 idna-2.6 pip-9.0.1 pkginfo-1.4.1 py-1.4.34 pytest-3.2.2 requests-2.18.4 requests-toolbelt-0.8.0 semver-2.7.8 setuptools-36.4.0 tqdm-4.15.0 twine-1.9.1 urllib3-1.22
root@a5c958742cf1:/# hatch env -ll
Traceback (most recent call last):
  File "/usr/local/bin/hatch", line 11, in <module>
    sys.exit(hatch())
  File "/usr/local/lib/python3.5/dist-packages/click/core.py", line 722, in __call__
    return self.main(*args, **kwargs)
  File "/usr/local/lib/python3.5/dist-packages/click/core.py", line 676, in main
    _verify_python3_env()
  File "/usr/local/lib/python3.5/dist-packages/click/_unicodefun.py", line 118, in _verify_python3_env
    'for mitigation steps.' + extra)
RuntimeError: Click will abort further execution because Python 3 was configured to use ASCII as encoding for the environment.  Consult http://click.pocoo.org/python3/for mitigation steps.

This system supports the C.UTF-8 locale which is recommended.
You might be able to resolve your issue by exporting the
following environment variables:

    export LC_ALL=C.UTF-8
    export LANG=C.UTF-8
root@a5c958742cf1:/# export LC_ALL=C.UTF-8
root@a5c958742cf1:/# export LANG=C.UTF-8
root@a5c958742cf1:/# hatch env -ll
No virtual environments found in `/root/.local/share/hatch/venvs`. To create one do `hatch env NAME`.
root@a5c958742cf1:/# hatch env dk
Already using interpreter /usr/bin/python3
Successfully saved virtual env `dk` to `/root/.local/share/hatch/venvs/dk`.
root@a5c958742cf1:/#

@lulunevermind Please try https://github.com/ofek/hatch#installation

Nope, --user hatch doesn't help.
app1@jm:~$ pip3 install hatch --user hatch
Collecting hatch
  Downloading hatch-0.8.0-py3-none-any.whl (85kB)
    100% |████████████████████████████████| 92kB 894kB/s
Requirement already satisfied: appdirs in ./.local/lib/python3.5/site-packages (from hatch)
Requirement already satisfied: click in ./.local/lib/python3.5/site-packages (from hatch)
Requirement already satisfied: pip>=9.0.1 in ./.local/lib/python3.5/site-packages (from hatch)
Requirement already satisfied: wheel>=0.27.0 in ./.local/lib/python3.5/site-packages (from hatch)
Requirement already satisfied: virtualenv in ./.local/lib/python3.5/site-packages (from hatch)
Requirement already satisfied: setuptools>=36.0.0 in ./.local/lib/python3.5/site-packages (from hatch)
Collecting colorama (from hatch)
  Downloading colorama-0.3.9-py2.py3-none-any.whl
Requirement already satisfied: semver>=2.7.8 in ./.local/lib/python3.5/site-packages (from hatch)
Requirement already satisfied: coverage in ./.local/lib/python3.5/site-packages (from hatch)
Requirement already satisfied: pytest in ./.local/lib/python3.5/site-packages (from hatch)
Requirement already satisfied: twine>=1.9.1 in ./.local/lib/python3.5/site-packages (from hatch)
Requirement already satisfied: atomicwrites in ./.local/lib/python3.5/site-packages (from hatch)
Requirement already satisfied: py>=1.4.33 in ./.local/lib/python3.5/site-packages (from pytest->hatch)
Requirement already satisfied: requests!=2.15,!=2.16,>=2.5.0 in ./.local/lib/python3.5/site-packages (from twine>=1.9.1->hatch)
Requirement already satisfied: requests-toolbelt>=0.8.0 in ./.local/lib/python3.5/site-packages (from twine>=1.9.1->hatch)
Requirement already satisfied: tqdm>=4.11 in ./.local/lib/python3.5/site-packages (from twine>=1.9.1->hatch)
Requirement already satisfied: pkginfo>=1.0 in ./.local/lib/python3.5/site-packages (from twine>=1.9.1->hatch)
Requirement already satisfied: certifi>=2017.4.17 in ./.local/lib/python3.5/site-packages (from requests!=2.15,!=2.16,>=2.5.0->twine>=1.9.1->hatch)
Requirement already satisfied: urllib3<1.23,>=1.21.1 in ./.local/lib/python3.5/site-packages (from requests!=2.15,!=2.16,>=2.5.0->twine>=1.9.1->hatch)
Requirement already satisfied: idna<2.7,>=2.5 in ./.local/lib/python3.5/site-packages (from requests!=2.15,!=2.16,>=2.5.0->twine>=1.9.1->hatch)
Requirement already satisfied: chardet<3.1.0,>=3.0.2 in ./.local/lib/python3.5/site-packages (from requests!=2.15,!=2.16,>=2.5.0->twine>=1.9.1->hatch)
Installing collected packages: colorama, hatch
Successfully installed colorama-0.3.9 hatch-0.8.0
app1@jm:~$ hatch env dk
No command 'hatch' found, did you mean:
 Command 'phatch' from package 'phatch-cli' (universe)
 Command 'match' from package 'mailavenger' (universe)
 Command 'hitch' from package 'hitch' (universe)
 Command 'watch' from package 'procps' (main)
 Command 'patch' from package 'patch' (main)
 Command 'batch' from package 'at' (main)
hatch: command not found
app1@jm:~$

Installing as sudo helps to fix problem with symlink, however virtualenv not found.
Testing in fresh ubuntu in Dokcker with --hatch - doesn't work, but without do just fine.
8851 ◯  docker run --name py35 --entrypoint '/bin/bash' -it sgoblin/python3.5
root@db39c535cfcd:/#
root@db39c535cfcd:/# pip3 install hatch --user hatch
Collecting hatch
  Downloading hatch-0.8.0-py3-none-any.whl (85kB)
    100% |################################| 92kB 1.0MB/s
Collecting coverage (from hatch)
  Downloading coverage-4.4.1-cp35-cp35m-manylinux1_x86_64.whl (196kB)
    100% |################################| 204kB 4.5MB/s
Collecting appdirs (from hatch)
  Downloading appdirs-1.4.3-py2.py3-none-any.whl
Collecting pytest (from hatch)
  Downloading pytest-3.2.2-py2.py3-none-any.whl (187kB)
    100% |################################| 194kB 5.5MB/s
Collecting pip>=9.0.1 (from hatch)
  Downloading pip-9.0.1-py2.py3-none-any.whl (1.3MB)
    100% |################################| 1.3MB 607kB/s
Collecting setuptools>=36.0.0 (from hatch)
  Downloading setuptools-36.4.0-py2.py3-none-any.whl (478kB)
    100% |################################| 481kB 814kB/s
Collecting twine>=1.9.1 (from hatch)
  Downloading twine-1.9.1-py2.py3-none-any.whl
Collecting atomicwrites (from hatch)
  Downloading atomicwrites-1.1.5-py2.py3-none-any.whl
Requirement already satisfied (use --upgrade to upgrade): virtualenv in /usr/local/lib/python3.5/dist-packages (from hatch)
Collecting colorama (from hatch)
  Downloading colorama-0.3.9-py2.py3-none-any.whl
Requirement already satisfied (use --upgrade to upgrade): wheel>=0.27.0 in /usr/lib/python3/dist-packages (from hatch)
Collecting click (from hatch)
  Downloading click-6.7-py2.py3-none-any.whl (71kB)
    100% |################################| 71kB 683kB/s
Collecting semver>=2.7.8 (from hatch)
  Downloading semver-2.7.8.tar.gz
Collecting py>=1.4.33 (from pytest->hatch)
  Downloading py-1.4.34-py2.py3-none-any.whl (84kB)
    100% |################################| 92kB 1.8MB/s
Collecting tqdm>=4.11 (from twine>=1.9.1->hatch)
  Downloading tqdm-4.15.0-py2.py3-none-any.whl (46kB)
    100% |################################| 51kB 9.9MB/s
Collecting requests-toolbelt>=0.8.0 (from twine>=1.9.1->hatch)
  Downloading requests_toolbelt-0.8.0-py2.py3-none-any.whl (54kB)
    100% |################################| 61kB 697kB/s
Collecting pkginfo>=1.0 (from twine>=1.9.1->hatch)
  Downloading pkginfo-1.4.1-py2.py3-none-any.whl
Collecting requests!=2.15,!=2.16,>=2.5.0 (from twine>=1.9.1->hatch)
  Downloading requests-2.18.4-py2.py3-none-any.whl (88kB)
    100% |################################| 92kB 1.9MB/s
Collecting certifi>=2017.4.17 (from requests!=2.15,!=2.16,>=2.5.0->twine>=1.9.1->hatch)
  Downloading certifi-2<IP_ADDRESS>-py2.py3-none-any.whl (349kB)
    100% |################################| 358kB 1.0MB/s
Collecting idna<2.7,>=2.5 (from requests!=2.15,!=2.16,>=2.5.0->twine>=1.9.1->hatch)
  Downloading idna-2.6-py2.py3-none-any.whl (56kB)
    100% |################################| 61kB 1.2MB/s
Collecting urllib3<1.23,>=1.21.1 (from requests!=2.15,!=2.16,>=2.5.0->twine>=1.9.1->hatch)
  Downloading urllib3-1.22-py2.py3-none-any.whl (132kB)
    100% |################################| 133kB 703kB/s
Collecting chardet<3.1.0,>=3.0.2 (from requests!=2.15,!=2.16,>=2.5.0->twine>=1.9.1->hatch)
  Downloading chardet-3.0.4-py2.py3-none-any.whl (133kB)
    100% |################################| 143kB 1.1MB/s
Building wheels for collected packages: semver
  Running setup.py bdist_wheel for semver ... done
  Stored in directory: /root/.cache/pip/wheels/dc/45/11/33c3c46fc699c32f15d4d7e05fc8806af62ad653c6abc9e97d
Successfully built semver
Installing collected packages: coverage, appdirs, setuptools, py, pytest, pip, tqdm, certifi, idna, urllib3, chardet, requests, requests-toolbelt, pkginfo, twine, atomicwrites, colorama, click, semver, hatch
Successfully installed appdirs atomicwrites certifi chardet click colorama coverage hatch idna pip-8.1.1 pkginfo py pytest requests requests-toolbelt semver setuptools-20.7.0 tqdm twine urllib3
You are using pip version 8.1.1, however version 9.0.1 is available.
You should consider upgrading via the 'pip install --upgrade pip' command.
root@db39c535cfcd:/# whoami
root
root@db39c535cfcd:/# su - hatch
No passwd entry for user 'hatch'
root@db39c535cfcd:/# adduser hatch
Adding user `hatch' ...
Adding new group `hatch' (1000) ...
Adding new user `hatch' (1000) with group `hatch' ...
Creating home directory `/home/hatch' ...
Copying files from `/etc/skel' ...
Enter new UNIX password:
Retype new UNIX password:
passwd: password updated successfully
Changing the user information for hatch
Enter the new value, or press ENTER for the default
	Full Name []: hatch
	Room Number []: 123
	Work Phone []: 123
	Home Phone []:
	Other []:
Is the information correct? [Y/n] y
root@db39c535cfcd:/# su - hatch
hatch@db39c535cfcd:~$ hatch env dk
-su: hatch: command not found
hatch@db39c535cfcd:~$ ^C
hatch@db39c535cfcd:~$ logout
root@db39c535cfcd:/# pybin
bash: pybin: command not found
root@db39c535cfcd:/# su hatch
hatch@db39c535cfcd:/$ hatch
bash: hatch: command not found

@lulunevermind Run this https://github.com/ofek/pybin#installation then https://github.com/ofek/pybin#pybin-put
I make docs more explicit.


How to correctly decorate a stateful criterion?

Hi
[For now I'm using BCECriterion as my classification problem is binary and this is stateless so works with SequencerCriterion, but I do want to scale the code out to do multi-class, so would like to go back to ClassNLLCriterion eventually..]
In extending the code written for #92 to a real-world data set I've hit a problem with using nn.ClassNLLCriterion() as follows. I can see why the errors are happening and understand the logic, the issue is that it seems as if SequencerCriterion is not compatible with the criterion (ClassNLLCriterion) I want to use as I'm trying to solve a classification problem. The issue is described as follows:
--gives the error 'SequencerCriterion only decorates stateless criterions : nn.ClassNLLCriterion'
--when we call seqC:backward(out, batchTargets) later on in the code
local crit = nn.ClassNLLCriterion()
local seqC = nn.SequencerCriterion(crit)

Then looking at #93 I tried:
--gives 'SequencerCriterion shouldn't decorate a ModuleCriterion. Instead, try the other way around :
--ModuleCriterion decorates a SequencerCriterion. Its modules can also be similarly decorated with a
--Sequencer.' - thrown in the constructor..
local seqC = nn.SequencerCriterion(nn.ModuleCriterion(nn.ClassNLLCriterion(), nn.LogSoftMax()))

Then I looked for "ModuleCriterion" in the repo to find a working example and I see code similar to my original code which I think should work, e.g. https://github.com/Element-Research/rnn/blob/442276f1e185867f22744386096eb6320a1362f6/examples/recurrent-language-model.lua#L131-#L135
All insights appreciated into what I'm missing?!

@hsheil I cannot reproduce your error with nn.SequencerCriterion(nn.ClassNLLCriterion()). I updated my nn package to see if your error wasn't caused by changed to nn. This criterion is explicitly unit tested to be stateless (see test/test.lua).
For your second issue, do as in the example you pointed to, i.e. the ModuleCriterion wraps the SequencerCriterion; you are doing the opposite :).

@nicholas-leonard I have to take it back - I luarocks installed everything again and the original code seems to be working.
Almost have code ready for part two, just a weird error I have to debug ("Sequencer.lua:73: gradOutput should have as many elements as input"). In this case gradOutput from rnn:forward(batchInputs) is always 0. Here's a code snippet:
   -- For this data set, a single element of the batch is 1..* session events
   -- so 'batchSize = 5' means give me all of the events for the next 5 sessions in the yoochoose dataset
   ds.setBatchSize(batchSize)
   --the ds is a cursor into our training set, giving back a batch each time it is called
   --next() operates like / is inspired by a JDBC ResultSet e.g. https://docs.oracle.com/javase/8/docs/api/java/sql/ResultSet.html#next--
   while ds.next() do
      local start =torch.tic()
      local batchInputs = {}
      local batchTargets = {}
      batchInputs, batchTargets = ds.getData()
      local out = rnn:forward(batchInputs)
      print('out size is ' ..#out)
      err = err + seqC:forward(out, batchTargets)
      print('err is ' .. err)
      gradOut = seqC:backward(out, batchTargets)
      print('gradOut size is ' .. #gradOut .. ' and batchInputs size is ' .. #batchInputs)
      rnn:backward(batchInputs, gradOut)
      rnn:updateParameters(opt.lr)
      rnn:zeroGradParameters()
      local currT = torch.toc(start)
      print('loss', err .. ' in ', currT .. ' s')
   end

And the output:
Moving data to CUDA for training
Training phase starting
out size is 0
err is 0
gradOut size is 0 and batchInputs size is 2

@hsheil can you print batchInputs, batchTargets?

Hi @nicholas-leonard I figured it out - I wasn't batching the individual events correctly so was creating a tensor of 187x1 for each table entry (187 is soon to grow to 53,272 when all of the attributes are in..) when it should have been of dimension 187xn where n is the variable number of events for that session.

Hi @nicholas-leonard I got this error again and given that ClassNLLCriterion should work, I played around with the data I was feeding to the RNN. Turns out that input with a length of 1 and a batchSize of >= 3 triggers this if statement to fire with a false positive of a stateful criterion (I think..). I found this when debugging something else (why increasing batchSize causes loss to explode).
if #inputTable >= 3 and not self.isStateless then
      -- make sure the criterion is stateless
      local gradInput
      for i = 1,3 do
         self.criterion:forward(inputTable[i], targetTable[i])
         gradInput = self.criterion:backward(inputTable[i], targetTable[i])
         nn.utils.recursiveAdd(gradInput -1, self.gradInput[i])
         if math.abs(nn.rnn.recursiveSum(gradInput)) < 0.0001 then
            error("SequencerCriterion only decorates stateless criterions : "..tostring(self.criterion))
         end
      end
      self.isStateless = true -- test should only be run once
   end

@hsheil Can you create a snippet of code that fails for your use case so that I can reproduce on my end? Also, #inputTable is not the batch size, but the sequence length.

@nicholas-leonard Will do. See my other reply on the #inputTable :)

@nicholas-leonard I think the data creation step - creating the inputs {} and targets {} that RNN needs is a key part to understanding RNN / using it effectively. An animation / graphic could help, possibly inspired by something like this one: http://www.acnc.com/raidedu/0. We could have a crack at it here if you like, maybe using d3 / c3 (http://d3js.org/ / http://c3js.org/)?

@hsheil You are right! Will look into it this afternoon.

I just ran into the sequencer, classnll error on my own and it was because the number of outputs into the criterion was not equal to the number of classes in my output. Could you post the code for your neural network?
Thanks!

[image: Inline image 1]
http://peterroelants.github.io/posts/rnn_implementation_part02/
On Tue, Feb 2, 2016 at 4:54 PM, trevorfiez<EMAIL_ADDRESS>wrote:

I just ran into the sequencer, classnll error on my own and it was because
the number of outputs into the criterion was not equal to the number of
classes in my output. Could you post the code for your neural network?
Thanks!
—
Reply to this email directly or view it on GitHub
https://github.com/Element-Research/rnn/issues/120#issuecomment-178846507
.

@jrich9999 ?

@hsheil https://github.com/hsheil @nicholas-leonard
https://github.com/nicholas-leonard I saw Humphrey's earlier message - "I
think the data creation step - creating the inputs {} and targets {} that
RNN needs is a key part to understanding RNN / using it effectively. An
animation / graphic could help, etc.."  I know that a graphic on the data
creation or taking live data and getting in the right form to feed the
batch processing would be a big help to a new guy like me.  I know I
stumbled on that and still have some real gray areas of understanding.  I
guess it is only natural when you use a framework at an abstracted level.
Unless you dig deep into how the framework works, you need some good
guidance on how to set thing up right to feed it.  I had saw petter's (
http://peterroelants.github.io/posts/rnn_implementation_part02/) and
figured I would reference it, though it is for python RNN, it seamed
somewhat relevant.  But I'm new, sorry if I am off base...  I do love Torch
and the Element-Research's additions and you guys for your time and
guidance...
On Wed, Feb 3, 2016 at 10:34 AM, Nicholas Léonard<EMAIL_ADDRESS>wrote:

@jrich9999 https://github.com/jrich9999 ?
—
Reply to this email directly or view it on GitHub
https://github.com/Element-Research/rnn/issues/120#issuecomment-179295976
.

So I added some documentation with images in #131. The new doc is visible here : https://github.com/Element-Research/rnn#inputoutput-format . Hope that works?


Fix Default Value

Hi Stephen,
on Line 1732 you need to add the Default value of 0 in order to work with built in BH Queries:
'authorizedsignatures': self._fp(entry, 'msPKI-RA-Signature', 0),
Regards Christoph

Thanks Christoph, good input,  fixed in 8abfe3b


Update connector dependencies

Description:
Update connector dependencies from daily build.
Some of connectors use ballerina-lang version to compile interopt content and stdlib versions are used in Dependencies.toml file.

Fixed with https://github.com/ballerina-platform/ballerina-release/pull/264


Dotnet is not installed. Please install dotnet.

Hello, Tried asking for help in the discord but no one could help. My Nadeko installation (In a sub-folder) cannot see my dotnet installation. I've already re-installed both dotnet and Nadeko, including a restart of my box. If it helps I did the workaround for Ubuntu 18.04 previously with the export path solution. I've since removed that workaround but yet my installation of Nadeko still does not see dotnet. Dotnet was also recently re-installed twice and shown to be working. I also checked if Nadeko worked from the home folder itself following direct instructions and it did. However I'm attempting to run it from this sub-folder.
Provided below is my terminal session.

Have you tried:
cd ~ && wget -N https://github.com/Kwoth/NadekoBot-BashScript/raw/1.9/linuxAIO.sh && bash linuxAIO.sh

Install prerequisites. Check some guide online on how to install dotnet core sdk 2.1 on your distro. You didn't prove to us that your dotnet is installed.
Type dotnet --version and see if it works.

@shikhir-arora I have tried that, hence my explanation of "I also checked if Nadeko worked from the home folder itself following direct instructions and it did. However I'm attempting to run it from this sub-folder."
@Kwoth I believe the above explanation proves that it's installed and working since the bot actually works from the home folder. However I've fixed this issue by symlinking dotnet from /usr/share/dotnet/dotnet to /usr/local/bin/ - Apparently the workaround I performed for Ubuntu 18.04 on the Discord messed with that, and even after re-install did not re-create this.
sudo ln -s /usr/share/dotnet/dotnet /usr/local/bin/


createMiddlewareSupabaseClient does not return the Session in Next.js middleware.

This boilerplate code does not currently work: https://supabase.com/docs/guides/auth/auth-helpers/nextjs#auth-with-nextjs-middleware, with createMiddlewareSupabaseClient writing this error to terminal:
Failed to parse cookie string: [Error: The edge runtime does not support Node.js 'buffer' module. Learn More: https://nextjs.org/docs/messages/node-module-in-edge-runtime]
In my project, which is currently using the most basic boilerplate from the docs and Auth UI, I can confirm that the session is being created on login, stored in a cookie, and accessible by other means such as useUser.

Same here. Suddenly my Next.js app at Vercel started falling on auth.
It seems like the issue is here: https://github.com/supabase/auth-helpers/commit/1ea258efbfcd0501c7528b2d95749b62d0fdf12f#diff-ab917dde7a6f132319af890fd890465d092c2787251a43b45088392a313b9608

I'm experiencing this as well. Worked fine up until 0.5.8

I have the same problem

This blocks me from upgrading to next 13.3, which brings A LOT for app router

+1

+1 help out the NextJS gang

+1 Confirmed that it breaks at 0.5.9. Using 0.5.8 as @mryechkin suggested until it is fixed.

0.5.8 doesn't work with next 13.3

Same here. Suddenly my Next.js app at Vercel started falling on auth.
It seems like the issue is here: 1ea258e#diff-ab917dde7a6f132319af890fd890465d092c2787251a43b45088392a313b9608

You seem to be on the money with this one. The library relies on Buffer:
return Buffer.from(bin, 'binary').toString('base64');

Buffer is not explicitly imported in the library's source, which may have caused the confusion.
https://nodejs.dev/en/api/v19/buffer/

its working on next 13.2.4 and auth-helpers-nextjs 0.5.8

@nico-bachner the dependency we are using has Buffer in it, but if the server you are using doesn't support Buffer it falls back to its own implementation. I reached out to the Vercel team about this and they mentioned to me that Vercel Edge Runtime now supports Buffer and the latest NextJS works fine with buffer. However upon my test with a new NextJS project while doing the build step I get warnings about Buffer being used in the dependency we are using, these warnings are to do with not even the use of Buffer but to check if Buffer is available in the first place. I created a test repo showing the warnings and asked the Vercel team to look into it but I haven't heard back from them as yet.
https://vercel.com/changelog/improved-node-js-compatibility-for-edge-middleware-and-edge-functions

@silentworks Interesting. Thanks a bunch for the explanation.

I'm looking into using jose as a dependency instead of js-base64. My initial tests shows there are no warnings when trying to run the build, but I need to do more test to make sure that the correct values are being returned from the token and to also make sure that the issue from #487 doesn't return with this change. I will keep everyone updated on this thread if all tests go well and when a new release goes out. I'm still waiting to hear from the Vercel team but this will be a more immediate fix I think.

@silentworks confirming the error went away for me with Next 13.3 and auth-helpers-nextjs at 0.5.9

@bramarcade yeah that's because we removed buffer and used a custom implementation at that time but that had a knock on effect and cause issues #487.

Can someone in this thread facing this issue please try with the latest canary release of NextJS. It would seem like they fixed the buffer issue in this version. I just tested it with version 13.3.1-canary.8 of next. Please report back if the issue has been resolved when using this version.

@silentworks I've tried with 13.3.1-canary.8, but the issue still seems to be present.
The session returned by getSession() from createMiddlewareSupabaseClient() is null, whereas on the client side, the correct session object is shown.

@nico-bachner the issue I'm referring to here is buffer showing up as an error or warning.

I´ve managed to make it work using
"@supabase/auth-helpers-nextjs": "^0.6.0", "@supabase/auth-helpers-react": "^0.3.1", "@supabase/supabase-js": "^2.15.0", "next": "^13.3.0",
Remember that next 13.3.0 has a problem (fail to parse json) that you can fix by changing the export default function to const and then exporting it below

i've updated to the latest canary versions, now its unable to parse the cookies
Failed to parse cookie string: [SyntaxError: Unexpected token , in JSON at position 608]

Somewhere here in this file @ parseSupabaseCookie
Cookies are being set, i've parsed the cookies by hand. Sorry though im unable to debug the nextjs server somehow.

Remember that next 13.3.0 has a problem (fail to parse json) that you can fix by changing the export default function to const and then exporting it below
Any guide on this one or any open issue on the next repo about this that I could have a read about?

I'm waiting for some feedback from my previous message above https://github.com/supabase/auth-helpers/issues/497#issuecomment-1510434503 to know if it's fixed in this version before I create a new version of auth-helpers with jose as it's dependency. You can see I have an active PR waiting to be merged once I hear from folks in this issue if the above works or not. https://github.com/supabase/auth-helpers/pull/515

vercel/next.js#48447

I'm closing this one out as I've published a new version that uses jose and it also seems that Vercel has fixed Buffer in NextJS now.

Can confirm the issue is now fixed for me on<EMAIL_ADDRESS>and<EMAIL_ADDRESS>🎉

I'm having this exact problem with<EMAIL_ADDRESS>and<EMAIL_ADDRESS>

@j1-dev same here... In my case when I deploy to Vercel I get:
Error: The Edge Function "middleware" is referencing unsupported modules:
- next: stream, fs, url

Same issue here, have tried toggling all kinds of versions but no luck at all, was only able to bring my application back online by rolling back to a commit from last week.
I am running:
next v13.1.6
@supabase/auth-helpers-nextjs v.0.5.9 (but have tested on multiple versions)

@j1-dev @aleix10kst @Reikon95 If you're having the issue that was fixed it means Vercel/NextJS has changed something again. The issue isn't with the auth-helpers but with NextJS. You should open an issue on their repository.

@j1-dev @aleix10kst @Reikon95 If you're having the issue that was fixed it means Vercel/NextJS has changed something again. The issue isn't with the auth-helpers but with NextJS. You should open an issue on their repository.

Yeah that adds up, I'll open an issue there. Thanks

Worked when I updated next.js and auth-helpers-nextjs

Same at the moment. I have 1 app that just didn't auth anymore. No changes, no updates. Weird. Client auth seems to be the issue you tho, if you move your auth to the server via server action or api route I seems to work.

I also have this issue when the cookie token is malformed/invalid format.
@supabase/auth-helpers-nextjs: 0.7.4
@supabase/supabase-js: 2.32.0
next: 13.4.17

I have the same issue as well, any possible fixes from the NextJS team?

@arshtec this isn't the correct place to ask the NextJS team questions, that would be on their own GitHub repository.


allow to set a max number of failed items to keep via FailQueueStrategy

By default there is no upper limit for the amount of items to keep in a failed queue.
If there are many failing jobs with huge stacktraces, the redis instance may go OOM.
We're currently doing this in our own execute implementation, would be nice to have this upstream so others could use this as well.

What about having some common class for the WorkerImpl and WorkerPoolImpl?
Would save us quite some duplicated code.

Thanks for the contribution, Florian!


Logical error in add_hook and __hook_reversed

As of 492985f4 in line 671:
    __hook_reversed = 'after_request'

Hooks that are supposed to be called in reversed order should be in some sort of collection. It is set as a single string right now, which works as intended by pure accident, as in line 688:
        if name in self.__hook_reversed:

Here we are checking sub-string instead, it works because "after_request" is a sub-string of itself, but anything shorter will work, e.g:
>>> 'after_request' in 'after_request'
True
>>> 'af' in 'after_request'
True
>>> 'a' in 'after_request'
True

Good catch! How did you find this one?

It's also by pure accident :).
I am about to write a gallery app/plugin and was reading the API reference, clicking the [source] link here and there, when I read add_hook and a few lines above, my instincts told me that something is not right...
I am going to read the whole source later on.


Where to host files besides Discord and Github?

Where to host files besides Discord and Github? I know anonfiles, file io, mediafire and such wouldnt be a good options, so where could I host em

Apart from Discord/GitHub you could potentially use BitBucket, possibly Google Drive (use https://sites.google.com/site/gdocs2direct/ and then add &confirm=t to the final URL) or maybe Dropbox (change domain to dl.dropboxusercontent.com in share link).


Timer setup

Hello, everyone! I am a bit confused with the two timer modes that can be used. In the cyclic mode, I must set a timer to generate periodic interrupts at a given period (say 1ms) and call the COTmrService() inside the interrupt service routine, correct? In this case, the timer driver employed must be the co_timer_swcycle.c. In this case, the reload parameter of the DrvTimerReload() is the number of ticks to the next event.
In the delta mode, do I need to call COTmrService() inside the ISR? What is the meaning of the reload parameter in this case?
Thank you very much in advance.

Yes, you are right. In delta mode, you need to call COTmrService() in ISR, too.
The difference to the cyclic mode is, that your timer driver must reprogram the timer on every event to the exact time intervall for the upcoming needed timer event. In other words, we will get interrupts at every event time and no interrupts in between.

The unit of the reload parameter depends on your driver. I typically configure the timer with a frequency of 1MHz. Then you get an accuracy of 1tick = 1us. The reload parameter is in ticks which is equal to 1us - very comfortable.


[helm] imagePullPolicy value doesn't set image pull policy for trident, and other images.

Describe the bug
The trident helm chart has a value 'imagePullPolicy'.
And it is described in the values.yaml as follows
# imagePullPolicy sets the image pull policy for the trident-operator, trident, and other images.
imagePullPolicy: IfNotPresent

It is for the trident-operator, trident, and other images.
But if we install trident helm chart with default values, the trident-autosupport container image pull policy is set to 'Always'.
It seems that this value is reflected to trident-operator's image pull policy only.
Environment

Trident version: 21.04.0
Trident installation flags used: helm install trident trident-operator-21.04.0.tgz -n trident -f myvalues.yaml
Container runtime: containerd.io 1.4.4-1
Kubernetes version: 1.21.1
Kubernetes orchestrator: kubeadm
Kubernetes enabled feature gates: none/default
OS: Debian 10
NetApp backend types: na
Other:

To Reproduce

install trident with helm with default.
the trident-autosupport container's pull policy  is set to 'Always'

Expected behavior

install trident with helm with default.
the all of trident containers pull policy are set to 'IfNotPresent'

or
Fix the description of imagePullPolicy for values.yaml.
I would appreciate it if you could change the trident-autosupport container image pull policy to "IfNotPresent".
The trident-autosupport image is put on the docker.io.
It has a image request limit with a free acount.
This limitation is often imposed in PoC/Lab environments.
I have pre-loaded the container images on the nodes to avoid it.
But the trident-autosupport container image is always pulled.
And if we install with TridentOrchestrator, we cannot change the imagepull policy of trident-csi deployment.
Additional context

This issue was fixed with commit a86d4ae and will be included in the Trident v21.07 release.


Put custom CSL-JSON properties in special subobject

Currently, props like wikiID for Wikidata IDs and label for BibTeX labels, is put in the root object. I propose to put these in a _custom object, e.g.:
{
  author: "Lars Willighagen",
  title: "Citation.js",
  year: 2017,
  _custom: {
    wikiID: "Q1",
    label: "Willighagen2017Citation.js"
  }
}

Change of plan: custom properties simply start with an underscore


document how to alias one bidder to another

My understanding of this right now based on reading a Slack convo is:

edit adapters.json like so:

{
  "appnexus": {
    "alias": "clientname"
  }
},

set up everything in DFP/etc with the "clientname" ID

also need to edit their bidderSettings to match

This is addressed by https://github.com/prebid/prebid.github.io/issues/279


xdgmenumaker: 1.4 -> 1.5

Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/xdgmenumaker/versions.
meta.description for xdgmenumaker is: '"Command line tool that generates XDG menus for several window managers"'.
Compare changes on GitHub

Checks done (click to expand)

built on NixOS
/nix/store/f5p9b2pblis25rs858n9173wa2pvyxcv-xdgmenumaker-1.5/bin/xdgmenumaker passed the binary check.
/nix/store/f5p9b2pblis25rs858n9173wa2pvyxcv-xdgmenumaker-1.5/bin/..xdgmenumaker-wrapped-wrapped passed the binary check.
/nix/store/f5p9b2pblis25rs858n9173wa2pvyxcv-xdgmenumaker-1.5/bin/.xdgmenumaker-wrapped passed the binary check.
3 of 3 passed binary check by having a zero exit code.
0 of 3 passed binary check by having the new version present in output.
found 1.5 with grep in /nix/store/f5p9b2pblis25rs858n9173wa2pvyxcv-xdgmenumaker-1.5
directory tree listing: https://gist.github.com/ca80249086b88ff44edafd3baf0a33b1
du listing: https://gist.github.com/029363f71474475185bbc198fc47b7e9

Instructions to test this update (click to expand)

One-time optional setup to skip building using Cachix:

Install cachix from https://cachix.org/
Use r-ryantm's cache:cachix use r-ryantm

Test this update by entering a nix shell, seeing what is inside the
result, and if applicable, running some binaries:
nix-shell --pure -I nixpkgs=https://github.com/r-ryantm/nixpkgs/archive/8fe64d2d587b1e5e33e72a02a289fce391550916.tar.gz -p xdgmenumaker
ls -la /nix/store/f5p9b2pblis25rs858n9173wa2pvyxcv-xdgmenumaker-1.5

cc @romildo for testing.

Success on aarch64-linux (full log)
Attempted: xdgmenumaker
Partial log (click to expand)
chmod 755 //nix/store/hjgkv61xmvdz1xh2f4vs6qx8y2949s5r-xdgmenumaker-1.5/bin/xdgmenumaker
wrapping `/nix/store/hjgkv61xmvdz1xh2f4vs6qx8y2949s5r-xdgmenumaker-1.5/bin/.xdgmenumaker-wrapped'...
post-installation fixup
shrinking RPATHs of ELF executables and libraries in /nix/store/hjgkv61xmvdz1xh2f4vs6qx8y2949s5r-xdgmenumaker-1.5
gzipping man pages under /nix/store/hjgkv61xmvdz1xh2f4vs6qx8y2949s5r-xdgmenumaker-1.5/share/man/
strip is /nix/store/428gs2z4b8f9byvghzlpbjwjb3a7jwxx-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/hjgkv61xmvdz1xh2f4vs6qx8y2949s5r-xdgmenumaker-1.5/bin
patching script interpreter paths in /nix/store/hjgkv61xmvdz1xh2f4vs6qx8y2949s5r-xdgmenumaker-1.5
checking for references to /build in /nix/store/hjgkv61xmvdz1xh2f4vs6qx8y2949s5r-xdgmenumaker-1.5...
/nix/store/hjgkv61xmvdz1xh2f4vs6qx8y2949s5r-xdgmenumaker-1.5

No attempt on x86_64-darwin (full log)
The following builds were skipped because they don't evaluate on x86_64-darwin: xdgmenumaker
Partial log (click to expand)

a) For `nixos-rebuild` you can set
  { nixpkgs.config.allowUnsupportedSystem = true; }
in configuration.nix to override this.

b) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
  { allowUnsupportedSystem = true; }
to ~/.config/nixpkgs/config.nix.

Success on x86_64-linux (full log)
Attempted: xdgmenumaker
Partial log (click to expand)
chmod 755 //nix/store/f5p9b2pblis25rs858n9173wa2pvyxcv-xdgmenumaker-1.5/bin/xdgmenumaker
wrapping `/nix/store/f5p9b2pblis25rs858n9173wa2pvyxcv-xdgmenumaker-1.5/bin/.xdgmenumaker-wrapped'...
post-installation fixup
shrinking RPATHs of ELF executables and libraries in /nix/store/f5p9b2pblis25rs858n9173wa2pvyxcv-xdgmenumaker-1.5
gzipping man pages under /nix/store/f5p9b2pblis25rs858n9173wa2pvyxcv-xdgmenumaker-1.5/share/man/
strip is /nix/store/dxf1m7dhc4qb655bdljc1fsd74v1nag3-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/f5p9b2pblis25rs858n9173wa2pvyxcv-xdgmenumaker-1.5/bin
patching script interpreter paths in /nix/store/f5p9b2pblis25rs858n9173wa2pvyxcv-xdgmenumaker-1.5
checking for references to /build in /nix/store/f5p9b2pblis25rs858n9173wa2pvyxcv-xdgmenumaker-1.5...
/nix/store/f5p9b2pblis25rs858n9173wa2pvyxcv-xdgmenumaker-1.5


Sometime two taps are required to close notifications modal

When clicking outside of the notifications modal to close it, two clicks are sometimes required, other times behaviour is normal with the modal closing after one tap outside of it

After alot of testing issue is with the react-ios-switch library, if the user taps on the toggle but NOT the circle part of it then the modal closes as normal when user taps outside of it, however if the user taps on the circular part of the toggle then on most occasions the modal won't close with the usual one tap outside of the modal, a second tap is required, this is a very minor bug that users won't come across often at all, may change the toggle library in the future to try and fix this but for now its being left as it is.


Getting "Template directory must be inside of the repository directory." error when not specifying template_dir option.

Bug Report
Description
Running "semantic-release --noop version --print" to try and verify my configuration and see the next version number.
I have no template_dir in my pyproject.toml, so using the default template.
Expected behavior
Would not expect this error message since I'm using the default templates and don't have a template directory specified.
Actual behavior
The following error:
🛡  You are running in no-operation mode, because the '--noop' flag was supplied
[18:51:22] WARNING  [semantic_release.cli.config] WARNING config.from_raw_config: Token value is missing!                                                              config.py:558
Template directory must be inside of the repository directory.

Environment
Windows 11
Python 3.9
Semantic-Release 9.8.6
Poetry 1.8.2
Configuration

Semantic Release Configuration
...
[tool.semantic_release]
version_variables = [
  "src/project/__init__.py:__version__"
]
version_toml = ["pyproject.toml:tool.poetry.version"]
changelog_file = "CHANGELOG.md"
build_command = "poetry build"
dist_path = "dist/"
upload_to_vcs_release = false
upload_to_pypi = false
remove_dist = false
patch_without_tag = true
major_on_zero = true

[tool.semantic_release.commit_parser_options]
allowed_tags = ["build", "chore", "ci", "docs", "feat", "fix", "perf", "style", "refactor", "test"]
minor_tags = ["feat"]
patch_tags = ["fix", "perf"]

[tool.semantic_release.branches.main]
match = "develop"
prerelease = false

[tool.semantic_release.branches.others]
match = "^(?!develop$)"
prerelease = true
prerelease_token = "alpha"

Execution Log

semantic-release -vv command
[18:52:55] DEBUG    [semantic_release.cli.commands.main] DEBUG main.main: logging level set to: DEBUG                                                                    main.py:123
🛡  You are running in no-operation mode, because the '--noop' flag was supplied
           DEBUG    [semantic_release.cli.commands.main] DEBUG main.main: global cli options: GlobalCommandLineOptions(noop=True, verbosity=2,                           main.py:135
                    config_file='pyproject.toml', strict=False)
           INFO     [semantic_release.cli.util] INFO util.load_raw_config_file: Loading configuration from pyproject.toml                                                 util.py:79
           DEBUG    [semantic_release.cli.util] DEBUG util.load_raw_config_file: Trying to parse configuration pyproject.toml in TOML format                              util.py:82
           DEBUG    [semantic_release.cli.config] DEBUG config.select_branch_options: Rejecting group 'main' as 'develop' doesn't match 'fix/deploy2'                  config.py:421
           INFO     [semantic_release.cli.config] INFO config.select_branch_options: Using group 'others' options, as '^(?!develop$)' matches 'fix/deploy2'            config.py:414
           DEBUG    [semantic_release.cli.config] DEBUG config.from_raw_config: hvcs token is not set                                                                  config.py:555
           WARNING  [semantic_release.cli.config] WARNING config.from_raw_config: Token value is missing!                                                              config.py:558
Template directory must be inside of the repository directory.

Additional context
The following check in cli/config.py:582 triggers the error:
if raw.repo_dir not in template_dir.parents:

I added some debug outputs and observe that raw.repo_dir is giving a full path, e.g. "C:\Code\project" whereas the default template_dir is "templates"- not an absolute path.  template_dir.parents then comes out to ['.'].  I believe the lack of resolving the path to an absolute path might be to blame here.  repo_dir gets resolved to an absolute path by the field_validator in RawConfig, here.

I believe this is all because of the path resolution of windows. See #978. I believe this is a more investigated duplicate.

@codejedi365 Yes, just before the "Prevent path traversal attack" check is done on template_dir, the same pattern is applied to changelog on config.py:574:
        # Prevent path traversal attacks
        if raw.repo_dir not in changelog_file.parents:

I'm not sure why my changelog_file and changelog_file.parents resolve to absolute paths (they do, I added a print) and template_dir.parents resolves to ['.'], but a simple fix would be to change both of these checks to something like:
        if raw.repo_dir not in [parent.absolute() for parent in changelog_file.parents]:

and
        if raw.repo_dir not in [parent.absolute() for parent in template_dir.parents]:

I tested this on my system and it clears up the error.

Alternatively, adding absolute() when first setting up the changelog_file and template_dir resolves it for me as well:
        changelog_file = Path(raw.changelog.changelog_file).expanduser().resolve().absolute()

and
        template_dir = Path(raw.changelog.template_dir).expanduser().resolve().absolute()

It seems like Windows will find and resolve the absolute path if the file and folder exist.  So my changelog_file is not triggering the error because the file exists.
To anyone looking for a workaround for this issue: add the following section to your pyproject.toml:
[tool.semantic_release.changelog]
changelog_file = "CHANGELOG.md"
template_dir = "templates"

And then make sure that the CHANGELOG.md file exists and the "templates" directory exists in your repo, even if it is empty.

@Wiley-Black, thank you for all the work you did to isolate this issue for me while I was unavailable and on windows that I don't have ready access to. I will try to get your fix in today

:tada: This resolution has been included in version 9.8.8 :tada:
The release is available on:

PyPi package
GitHub release

@Wiley-Black, thank you for your work in troubleshooting this completely. You made it super easy to make the change. I also paired it with new testing that ensures windows compatibility is checked automatically before release to hopefully not have another issue like this pop up.


Tsi

Initial server side stub files generated from the Open API  specification.

Registry office server stub for recent changes that includes a new Basic service to inquire oam request approval with AA application


How to swap the steps above the content?

This is from issue 149 but now one is answering it correctly and it was closed.
https://github.com/mgonto/angular-wizard/issues/149

I think this is same as this one.
https://github.com/mgonto/angular-wizard/issues/128

ok. #128 was what i was looking for


ttp:contentProfiles missing from IMSC1.1 Text Profile output option

Hello,
The TTCONV documentation references IMSC1.1 Text Profile as one of the three supported output formats (the others being SRT and WebVTT).
However, when using --otype: TTML there is no declaration written into the <tt>  element to signal the appropriate, corresponding profile. Can ttp:contentProfiles="http://www.w3.org/ns/ttml/profile/imsc1.1/text be added to the <tt> element when --otype: TTML is specified?
This is causing some processing issues since we are reliant upon the presence of this attribute/value.
Thanks!
-Justin

There are several distinct issues:

the presence of ttp:contentProfiles would make the document incompatible with EBU-TT-D, which is perhaps undesirable for some applications. This can be addressed by putting the signaling behind a config parameter
the TTML writer does not currently guarantee that the resulting document is an IMSC 1.1 document, although it is when using an SCC or EBU STL input. It is a larger undertaking to ensure that the output is always IMSC 1.1.

Thank you, @palemieux. Understood regarding the points above.
Having the ability to specify the profile using a config parameter would be great!

Maybe the TTML could writer emit a warning or even fail if IMSC1.1 is requested but not possible?

Yes, in IMSC 1.1 mode, the TTML writer should both convert to IMSC 1.1 when possible, e.g. when c units are used, and fail when that conversion is not possible.


simulateTransaction incorrectly throws TooManyAccountLocks for <64 writeable accounts

Problem
simulateTransaction fails with TooManyAccountLocksfor the following transaction:
link to explorer decoder
Base64 encoded transaction

```
AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAQAGFNYX0rw+7O0dTMB/aa1fmDOpALmL4/9w50HSETI9shDjAiI/7Y56lOk7JTFV6nP0jkTGNnq5kbZUzx7EbfJD45MKBSRBoVhOV4xwBfanvh4FdBl3V3APJBkA8l9K/YoZzjIUEyiDHFNT5T4auHCEgG6EsBQkp7plq7elRGqA+a7sUD+C+4aCaehYkQ8baPbLQLInHbwSrVJAf0UZerdMZlhd+Fpi3a/C7y3gYqbv5eFboXM2psPs5aLjqdyOevltB7NM8WMzAdVUi9nR3dMANk+KC3MhCV1uhJHgjlOVjulSyr1KkSkX9GpSrKiU7fJOCsu2DYLt4vagt9DLYnj6n67PS4DyA1jYP5gzyG1IrvS3nm9mbOy/KxZ0Vc4O5ogr2tjsOykpX5AcEiQItwQ7tjphi4hmQL46YZlajNSbRzVm4vh36D2uxoiPQ6u1rnsxG7eMNJYIl/zlp7gsFuIP8ZfjF/hRzvPoAY8HlWu/mzxAqS+DIGpD4FGL1EbR08x3E+YqX+8UUh76h8HsflPRPRAiCqHs9Gw4V+zFylYGa2xz/oy6HaKO3uGQxwVCyV4Prhb6HjCGoEtsNkv1ChySOKQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMGRm/lIRcy/+ytunLDm+e8jOW7xfcSayxDmzpAAAAABHnVW/IxwG7udMVuzmgVB/2xst6j9I5RArHNola8E48G3fbh12Whk9nL4UbO63msHLSF7V9bN5E6jPWFfv8AqYyXJY9OJInxuz0QKRSODYMLWhOZ2v8QhASOe9jb6fhZtD/6J/XX9kp0wJsfKVh53ksJqzbfyd1RSzIap7OM5ejRzRl/OXbKgMBDUTS3/N18Ov6J3oJUd2K4TEvEP/wHqAUPAAUCwFwVAA8ACQMEFwEAAAAAABIGAAEAMA4RAQEQWxEKAAkMAgEoMAUQExA9ChoIDCgrEREpLCo8PiMvQDs/EDQKCAsaIAQ1JB04AzYHMjEOLyMfNyEeMhExDhAKCwYlJy8ZHDo5JiIbMjMRMRAtEQoYAhYGFA0XFS42wSCbM0HWnIEAAwAAAC0FDgAAAGQAASmTTz/OZAECEQBkAgOhvK4YAAAAALwEux0AAAAAyABkEQMBAAABCQNREEsOBGMgQ6HsjokUUSu2bH+vi+a2j78nxGN7N1Yw2wVSVlhVUAJRVLjeLC+t65HwGFikMB4IWyg7TP0aNKGwbkc+O6aSiGfvDxqcpB4KpykwrSshECSsogwFuRILNwIDFaANn6m2boVb8pPLR4H70c4jd1LpwBMhb7xo5R9F4QlutoGx/gVIGDG7BwZDxtV1WA4=
```

The error is thrown by validate_account_locks. Accounts should only locked if they are marked writeable (right?). It will incorrectly throw TooManyAccountLocks for a transaction with  <64 writeable accounts but > 64 accounts in the LUT.
https://github.com/anza-xyz/agave/blob/ea768aa06881984e24110bdef6c533508377522e/sdk/src/transaction/sanitized.rs#L277-L289
Where does the tx_account_lock_limit value come from? In prepare_unlocked_batch_from_single_tx we call validate_account_locks with a value computed by get_transaction_account_lock_limit.
https://github.com/anza-xyz/agave/blob/ea768aa06881984e24110bdef6c533508377522e/runtime/src/bank.rs#L3293-L3298
get_transaction_account_lock_limit limits the account locks to 64 (at the moment).
https://github.com/anza-xyz/agave/blob/ea768aa06881984e24110bdef6c533508377522e/runtime/src/bank.rs#L3221-L3233
Proposed Solution
Change validate_account_locks to check if the accounts are marked writeable when comparing with lock limit?

@jstarry I see you've been pretty active in the code w.r.t account locks so I'm wondering if you could chime in here 🙇

Sorry but the account lock limit is for the total number of read and write locks. Not just for writes. So this behavior looks correct, right?

@kewde can you remember where you might have gotten the wrong impression about the account lock limit from?

Ahah! If that's the case, then the behavior is indeed correct and it is the transaction that is incorrectly constructed 👍

can you remember where you might have gotten the wrong impression about the account lock limit from?

Yes! There was this post on the forums which put me under the impression that only writeable accounts get locked. Now based on a second look, that username "ZenLlama" does seem to indicate it was an AI generated post 😅

Version 1.14.17 increases the transaction account lock limit from 64 to 128. When a transaction on Solana is composed, it must specify all the writable accounts it wishes to access. These writable accounts require locks to prevent race conditions where multiple parties are trying to read and write to the same accounts which can result in incorrect state being returned to the caller. As such, writable accounts are locked.

https://forum.solana.com/t/feature-increased-tx-account-lock-limits-1-14-17/189
A second factor are the blatant gaps in my knowledge about the purpose of address LUTs. I assumed that every address in the table was either a read or write, but they are merely a reference table and it seems like they don't really have anything to do with accounts locks?

A second factor are the blatant gaps in my knowledge about the purpose of address LUTs. I assumed that every address in the table was either a read or write, but they are merely a reference table and it seems like they don't really have anything to do with accounts locks?

Yeah so LUT's onchain are just a list of addresses. It's the transaction that specifies which addresses in a LUT should be locked as writable or readonly. Hope this helps!


Fix #238

This fix also depends on fixing serde, force simplify is incorrect:  forced_full_simplifiers = {VirtualWorker: [19, _force_full_simplify]}

@mari-linhares I approved it but will let you merge since you said external changes needed to be made


Falling tree sound bug

When tree falls and the player is further away, the sound still play without any changes - it sounds like the tree has fallen next to the player. The tnt show as example in the video can be a creeper and you can be 50 blocks away, it will still sound like it was next to you. The same thing happens when a tree is on fire.
https://github.com/user-attachments/assets/c1e9a429-3000-4691-9231-71db3a5bc7b8

Fixed on 1.3.5


Enhanced documentation on commands & usage

As the extension has grown, the new capabilities have not been updated in the examples section. While GIFs are nice (and I still want to record GIFs for the new features), it might be nice to add a documentation site with some notes on each command, uses and limitations. Docusaurus might be a good option!

First pass of documentation on all commands, settings and some basic troubleshooting has been completed. Site is deployed with GitHub Pages at https://brandongregoryscott.github.io/kazoo/


Podfile generation doesn't reproduce dependency tree

I have two Java modules in my project that I'm running through the Gradle J2ObjC translation task. One is my SharedCode module that I want to be translated and made available to both the RetailSDK and RetailSDKTests targets in my iOS workspace.  The other is a TestContracts module that I want to be translated and made available to the RetailSDKTests target in my iOS workspace only. Additionally, the TestContracts module has a dependency on the SharedCode module.
In order to achieve the above, the build.gradle file of my SharedCode module is as follows:
plugins {
    id 'java'
    id 'com.github.j2objccontrib.j2objcgradle' version '0.6.0-alpha'
}

dependencies {
    compile 'com.google.guava:guava:18.0'
    testCompile 'junit:junit:4.12'
    testCompile 'org.hamcrest:hamcrest-core:1.3'
}

j2objcConfig {
    autoConfigureDeps true
    minVersionIos '8.4'
    supportedArchs += ['ios_i386']
    translateArgs '--no-package-directories'
    translateArgs '--prefixes', 'prefixes.properties'
    xcodeProjectDir '../iOS'
    xcodeTargetsIos 'RetailSDK', 'RetailSDKTests'
    finalConfigure()
}

And the build.gradle file of my TestContracts module is as follows:
plugins {
    id 'java'
    id 'com.github.j2objccontrib.j2objcgradle' version '0.6.0-alpha'
}

dependencies {
    compile project(':SharedCode')
    compile 'junit:junit:4.12' // this is compile scope deliberately
    compile 'org.hamcrest:hamcrest-core:1.3' // this is compile scope deliberately
}

j2objcConfig {
    autoConfigureDeps true
    minVersionIos '8.4'
    supportedArchs += ['ios_i386']
    translateArgs '--no-package-directories'
    translateArgs '--prefixes', 'prefixes.properties'
    xcodeProjectDir '../iOS'
    xcodeTargetsIos 'RetailSDKTests'
    finalConfigure()
}

Based on the above, on building my project I would expect the contents of my Podfile to be the following:
target 'RetailSDK' do
    platform :ios, '8.4'
    j2objc_SharedCode
    import_other_pods
end

target 'RetailSDKTests' do
    platform :ios, '8.4'
    j2objc_TestContracts
    j2objc_SharedCode
    import_other_pods
end

However, what I see is this:
target 'RetailSDK' do
    import_other_pods
end

target 'RetailSDKTests' do
    platform :ios, '8.4'
    j2objc_TestContracts
    j2objc_SharedCode
    import_other_pods
end

Can anyone see what I'm doing wrong in my build.gradle files which makes the output of the J2ObjC translation not be added to the RetailSDK target?

This could well be a bug in the Podfile output. I don't have time to look at it right now, though I'll happily review a proposed change. As a temporary workaround, you can take manual control of the Podfile:
https://github.com/j2objc-contrib/j2objc-gradle/blob/master/FAQ.md#how-do-i-manually-configure-the-cocoapods-podfile

@brunobowden... thanks for the response and the link. So the way I've specified the project dependency (i.e. TestContract dependency on SharedCode) and the xcodeTargetsIos values in the build.gradle files is in principle correct and the way the J2ObjC Gradle plugin expects?

The challenge is having the J2ObjC Gradle Plugin take the entire dependency from Java and recreate it within the Xcode build. That's incredibly difficult to do. There will likely be limitations in that area for some time to come.


downgrade to go1.22 until there's a fix for timer

Proposing to downgrade the version of go used to produce the binary to give implementing a solution for https://github.com/open-telemetry/opentelemetry-collector/issues/11332 more time without impacting end users of the binary.

This appears is no longer necessary as the next release will be built with 1.23.2 which includes a fix for the timer issue


NDEBUG missing from Release configuration?

Hi,
Shouldn't NDEBUG be set for Release builds?
https://github.com/Microsoft/glTF-Toolkit/blob/ee37a890c2cdcc20656d2ff3517332a815279965/glTF-Toolkit/glTF-Toolkit.vcxproj#L123
We're getting artifacts in our output when running in software mode otherwise (there seem to be some issues using a WARP device)

Yep, looks like a mistake when the project was consolidated (FYI @benbuzbee). Feel free to submit a PR if you have the bandwidth. Thanks!


Adding an option to edges_connecting regardless of direction of the edge

Is your feature request related to a problem? Please describe.
Sometimes, it is not known to the user which one was the source and the target in the edge that connects them.
Describe the solution you'd like
It would nice to add an option to edges_connecting that is direction = True or False for whether the direction matters or not for retrieving the edge IDs.
Code Example (if applicable)
No response
Additional context
No response

Now included in issue #101


How to test LightGlue on HPatches Dataset?

I would appreciate if you could provide the test code, on Hpatches Dataset.  Btw, I cannot fine any test code on Public dataset.

thanks
发自我的iPhone
------------------ Original ------------------
From: Paul-Edouard Sarlin @.>
Date: Tue,Oct 10,2023 2:57 PM
To: cvg/LightGlue @.>
Cc: HongminMu @.>, Author @.>
Subject: Re: [cvg/LightGlue] How to test LightGlue on HPatches Dataset? (Issue#71)
Check out Glue Factory for training and evaluation, including on HPatches: https://github.com/cvg/glue-factory
—
Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you authored the thread.Message ID: @.***>