Fix 1.4.0 breaking native require

Took me a while to find, but I believe this will fix following errors in react native that occurred after updating to 1.4.0
Cannot read property 'indexOf' of undefined
Module AppRegistry is not a registered callable module (calling runApplication)

Note: it seems like with every new release something breaks in react-naive, is it not tested well compared to styled components for react?

Issue still persists after this, I was confused as lib folder wasn't present in master, but it seems to be fine in node modules,


FileNotFoundError: human_to_mouse.csv

Hi, I used pip install mousipy to install and have tried to use translate on an anndata object that has mouse gene symbols. I'm getting a FileNotFoundError:
FileNotFoundError: [Errno 2] No such file or directory: '/Users/...python3.11/site-packages/mousipy/./hcop/human_to_mouse.csv'

Hi, the recent version seemed to contain a bug. I will try to fix it soon. For now you can use an old version instead using:
pip install -U mousipy==0.1.3

Fixed with v0.1.5. Simply upgrade using pip install -U mousipy


Can't pickle local object 'monta_cardapio_por_secao..'

When call the endpoint that use cache_page, throw this error. When call others enpoints that too use cache_page, not throw this error, only this endpoint.
I'm using pymemcached 4.0.0, but used 3.4.4, 3.5.0, 3.5.1 and 3.5.2  error persist.
Traceback (most recent call last):
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/django/core/handlers/exception.py", line 47, in inner
response = get_response(request)
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/django/core/handlers/base.py", line 204, in _get_response
response = response.render()
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/django/template/response.py", line 107, in render
newretval = post_callback(retval)
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/django/utils/decorators.py", line 144, in callback
return middleware.process_response(request, response)
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/django/middleware/cache.py", line 111, in process_response
response.add_post_render_callback(
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/django/template/response.py", line 92, in add_post_render_callback
callback(self)
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/django/middleware/cache.py", line 112, in
lambda r: self.cache.set(cache_key, r, timeout)
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/django/core/cache/backends/memcached.py", line 82, in set
if not self._cache.set(key, value, self.get_backend_timeout(timeout)):
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/pymemcache/client/hash.py", line 344, in set
return self._run_cmd("set", key, False, *args, **kwargs)
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/pymemcache/client/hash.py", line 322, in _run_cmd
return self._safely_run_func(client, func, default_val, *args, **kwargs)
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/pymemcache/client/hash.py", line 211, in _safely_run_func
result = func(*args, **kwargs)
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/pymemcache/client/base.py", line 475, in set
return self._store_cmd(b"set", {key: value}, expire, noreply, flags=flags)[key]
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/pymemcache/client/base.py", line 1196, in _store_cmd
data, data_flags = self.serde.serialize(key, data)
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/pymemcache/serde.py", line 119, in serialize
return self._serialize_func(key, value)
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/pymemcache/serde.py", line 58, in _python_memcache_serializer
pickler.dump(value)
AttributeError: Can't pickle local object 'monta_cardapio_por_secao..'

Problem with function lambda, only rewrite function without 'lambda'

See footnote 2 https://docs.python.org/3/library/pickle.html#what-can-be-pickled-and-unpickled

This is why lambda functions cannot be pickled: all lambda functions share the same name: .


'Module not found' error

yarn was run, but this error still pops... any idea why?

Can you let me know which version of next you’re using? I think this could be related to the latest next upgrade, I have an outstanding todo to look at the changes made to next/link, previous next releases included babel interop code that resulted in the default export being default.default under ESM.

using next 12.2.0 here, latest release...
if i can help you with it, you can just tell me

@erickriva I've released v0.0.12 with the fix, LMK if you run into any issues.

It worked well! 🎉


If the current application does not have permission to access the camera ，android 5.1 always success callback

Expected Behaviour
If the current application does not have permission to access the camera ，  the error callback should be executed
Actual Behaviour
The camera will be turned on, indicating a problem with the camera ， the success callback is always executed with data result as:
Object {cancelled: true, text: "", format: ""}
Platform and Version (eg. Android 5.0 or iOS 9.2.1)
Android 5.1
(Android) What device vendor (e.g. Samsung, HTC, Sony...)
MI meizu
Cordova CLI version and cordova platform version
cordova 7.0.1
Plugin version
6.0.8
Sample Code that illustrates the problem
  window.cordova.plugins.barcodeScanner.scan((result)=>{
      if(!result.cancelled){
        callback(result.text);
      }else{
        alert(JSON.stringify(result))
      }
    },(error)=>{
       alert("Scanning failed: " + error);
    },
    {
        ...
    }
  );

Object {cancelled: true, text: "", format: ""}
But in android 7.0 ,  the error callback will be executed , the error data is "Illegal access"

can not work by cordova-android-firebase-gradle-release version


Feature request? How to avoid duplicates

I'm not sure if this is a feature request or merely me asking for inputs how to handle my use case.
What I'm doing
I usually make a note with a geolocation for a place I want to check out. I tag it accordingly. That way, I can query for it and get a map with places I still want to check out. Whenever I checked out one of this places, I change the tags (remove #tocheck). Additionally (and quite often), I save places that I have not saved before as to check out. For example: I am visiting London and have several places to check out, but while wandering through the city, I stumble upon a nice cafe and decide to add it to my vault.
The problem
After several weeks/months/years of using Obsidian, I might not remember that I saved a place as to check out and just add it, thus resulting in a duplicate entry. How would you go about preventing that? I could obviously check some preset maps before adding, but that's a pain if I'm on the go and just want to add a quick note.

Just realised that I didn't answer to this. Thanks for outlining your flow. I'm sort of doing the same as your 1. I have a WhatsApp-group with only myself for quick notes. I usually add infos about visited place in there. This does need some effort to get them in the map view afterwards, but it acts as a double check which is quite useful (I might find a place worthy of getting into my map that evening but don't add if after sober ;) reconsideration another day).

I have the same question as ruben-sg. Is it possible to give an ID to a location, so it could referenced similarly to how block links work?
For testing purposes, I made a note called Airports. Then I made a note about Trip A. It would be nice to reference Airport A and Airport B in this note. Then in another note for Trip B, I would use Airport A and Airport C.

@mariavd you can just use regular block links or heading links. Map View started to support them in queries in version 5.0.0.


Real time map page not use search params(in the URL)

The page simply ignore them.

@NoamGaash @aviv1620 @ShayAdler is this related to frontend or backend?

@ArkadiK94 FE

@aviv1620 why do you consider it as issue?
what's the expected behavior?

@aviv1620 please elaborate
what parameters do you expect to see in the URL, what's the use case, and why is it beneficial

I just think about make it same like other pages,
If it makes sense that only this page does not have search params(and "gaps_patterns" that do not exist when I open the issue).
we can close the issue.


Is this project still alive?

Hi,
I've seen hundreds of bugs reported in this really nice library SEMANTIC UI but it's been a while since any release was published. Is this project still alive or should I come back to bootstrap which has a much faster code fixes and releases?
I really hope this project is not dead but if it already is, please tell me cause I will move back to bootstrap cause there are too many bugs in the current version of semantic ui that is taking too long to have a fix.

A single person is running this project. Some days ago he just closed a bunch of issues

Im sorry you're dissatisfied, you can see recent activity by monitoring commit history on next.
https://github.com/Semantic-Org/Semantic-UI/commits/next
There is code changing every week. This is open source so it takes some time to trickle back into formal releases. It takes a while to test and write documentation.

One single person takes care of this project? That's really unsecure: what if this person gets ill? Dies? Will every website that trusted into this library get busted?
Anyway, I really like this library, it's very beatiful and easy to use but you should maybe gather more people, I would be glad to help!


Cannot find module "tns-core-modules/application"

From @Kamieniu on July 13, 2018 18:23
MacOS HighSierra 10.13.3
Node 9.6.1
NPM 6.1.0
Tell us about the problem
I try to run npm run ios on my Angular + NativeScript project. Project is CLEAN!
I used ng new app and ng add @nativescript/schematics
Which platform(s) does your issue occur on?
iOS
Please provide the following version numbers that your issue occurs with:

CLI: (run tns --version to fetch it) 4.1.2

Cross-platform modules: (check the 'version' attribute in the
node_modules/tns-core-modules/package.json file in your project) 4.1.0

Runtime(s): (look for the "tns-android" and "tns-ios" properties in the
package.json file of your project) tns-ios 4.1.1

Plugin(s): (look for the version number in the package.json file of your
project) 0.0.0

Please tell us how to recreate the issue in as much detail as possible.
The best approach would be to get your code running in the NativeScript Playground and share the link with us, along with any additional details or steps to reproduce needed for examining the issue there.
ng new angular-app
cd angular-app
ng add @nativescript/schematics
npm run ios
Is there code involved? If so, please share the minimal amount of code needed to recreate the problem.
There are plenty of errors.
This one occured at the end.
JavaScript error: file:///app/vendor.js:55195:167: JS ERROR Error: Cannot find module "tns-core-modules/application"
.. but this kind of error occured multiple times with defferent 'Can't resolve' file.
ERROR in ../node_modules/tns-core-modules/bundle-entry-points.js Module not found: Error: Can't resolve 'ui/segmented-bar' in '/Users/franciszekstodulski/Develop/native-app/node_modules/tns-core-modules'  @ ../node_modules/tns-core-modules/bundle-entry-points.js 29:67-94  @ ./main.ns.ts
Copied from original issue: NativeScript/NativeScript#6068

From @erkanarslan on July 15, 2018 21:34
How do you try to import application package?

HI @erkanarslan,
Can you try whether you will have the same issue while using @angular/cli version  6.1.0-beta.0 ?

Hi @sebawita, I am also getting same exception when trying to setup a Hello World angular app with Nativescript capability.
Followed same below steps -
. ng new angular-app
. cd angular-app
. ng add @nativescript/schematics
. npm run ios
npm version - 6.1.0
node - v8.10.0
tns version - 4.1.2
Got the same error file:///app/vendor.js:55195:167: JS ERROR Error: Cannot find module "tns-core-modules/application"
Afterward added<EMAIL_ADDRESS>, still getting same above error.
Really appreciate if you can share some sample boiler plate working project with angular 6.x

I found that running the schematics when you create the app stopped this error
tns run ios --bundle```

@neerajjsr we've just updated the schematics to 0.2.1. Can you check if it works with the latest?
also, please make sure to use<EMAIL_ADDRESS>in your Angular project, before you call ng add


Serialization: Preserve identity of opened generic environments [5.7]

Serialization did not record the generic environment of an opened archetype at all.
If a SIL function referenced two opened archetypes @opened(123, P) Self and @ opened(123, P) Self.A from the same generic environment, we would deserialize them into two different generic environments, like @opened(123, P) Self and @opened(321, P) Self.A, so the root archetype of @opened(321, P) Self.A would be @opened(321, P) Self and not @opened(123, P) Self as expected. This would trigger an assertion when collecting type-dependent operands, because this bogus root archetype was not produced by any instruction in the function.
Cherry-picks a single commit from https://github.com/apple/swift/pull/60523, fixing https://github.com/apple/swift/issues/60347.

@swift-ci Please test

@swift-ci Please test


FEAT: change to angular commit preset

:tada: This PR is included in version 1.3.0 :tada:
The release is available on GitHub release
Your semantic-release bot :package::rocket:


There are two sign in prompts when using vscode.dev

The first prompt comes from the GitHub Repositories extension.
The second prompt comes from GitHub Pull Requests and Issues extension.
We should only show one prompt.

Thanks for taking a look! I figured it would be the scopes. It looks like the read:user and user:email scopes may not be needed for GHPRI as I only see that we need the username. I'll do some testing and see if they can be removed. Does RemoteHub definitely need workflow?

Tested, and GHPRI needs all the scopes ['read:user', 'user:email', 'repo'].
@TylerLeonhardt is there anything we can do here to avoid the 2 login prompts?

We definitely need workflow due to https://github.com/microsoft/vscode-remote-repositories-github/issues/32
It's probably not a good idea for RemoteHub to ask for scopes it doesn't need. Also the authentication api will not hand out tokens which are authorized for more scopes than the extension needs in order to abide by principle of least privilege.

Also the authentication api will not hand out tokens which are authorized for more scopes than the extension needs in order to abide by principle of least privilege.

Yep, this is the expected and correct behavior. I was hoping that @TylerLeonhardt might have something like token down-scoping support in the works.

@alexr00
Sadly no. There is nothing on the GitHub side that can help us here. There are plans to introduce the ability to do "token down scoping" which would let us mint a token for just [X] silently if we have a token for [X and Y], but that won't really help us here because the scopes are not a subset of each other...
If we really want to get rid of the second prompt, we can have the two extensions request the same scopes... but I don't particularly like the idea of giving these extensions a token that is more powerful than they need.

Thanks for the details!

This should be done... though I don't know where the other issue for this went.


[Bug] When at least one of the values in the tags is blank, the blog page cannot be opened

valaxy-theme-hairy: v1.2.4
When at least one of the values in the tags is blank, the blog page cannot be opened.
For example, in front matter, delete "111" or "222" or both, blog page can not be opened.

title: test
date: 2024-08-26
updated: 2024-08-26
categories: Tim
tags:

111
222

I used the following configuration and did not encounter the issue you mentioned.
---
title: test
date: 2024-08-26
updated: 2024-08-26
categories: Tim
tags:
-
- 222
---


Update OAuth1.0a QML example code. JB#56569

Some minor tweaks are needed to get the example working.

I pushed a change just so that the two RedirectListeners use different ports.

One question, but LGTM


SaslAuthenticationException after installation on ICP 3.1.1

Hi,
I just installed the IBM Event Streams Community Edition-2018.3.1 into a fresh installation of ICP 3.1.1 (CE) and get a org.apache.kafka.common.errors.SaslAuthenticationException: Authentication failed, invalid credentials when I'm trying to access the UI.
Checking the logs (as noted in https://github.com/IBM/event-streams/issues/10) lead me to the fact, that the log of the eventstreams-ibm-es-access-controller is full of errors like this
{"error":"Post https://xxx.yyy.zzz:8443/iam-token/oidc/token: x509: certificate signed by unknown authority","message":"failed to obtain token from IAM","message_template":"failed to obtain token from IAM","mh_file":"renewer.go","mh_line":104,"mh_ts":"Feb  6 07:53:09.287","transaction_id":"a8411f35-bde7-4524-9cf3-73972746908c"}

The installation seems to be correct, since there are no failed jobs or other obvious strange pods.
I installed the ICP with having a valid singed certificate and a custom domain name (not only published with an IP address). I also installed the eventstreams with a provided certificate/ private key (section Kafka external access configuration in the values.yaml).
Is there any chance to import the certificate of the iam service to a keystore, so it is considered as a valid certificate?
Any help is highly appreciated.

Hi Johannes,
The error that you have supplied suggests that the certificate presented by the web server serving https://xxx.yyy.zzz:8443/iam-token/oidc/token is not providing a certificate chain that eventstreams-ibm-es-access-controller can verify.
Would you be able to provide the public certificate that you supplied when installing ICP, and the public certificate you supplied when installing Event Streams?
Additionally, could you provide the output from kubectl -n kube-system get secret cluster-ca-cert -o=jsonpath='{.data.tls\.crt}' | base64 --decode | openssl x509 -text.
Additionally, when you installed ICP, how was the certificate signed? Was it through a known CA, self signed, or signed by your own CA?

Hi Nic,
I have installed the ICP with a icp-router.crt containing the complete certificate chain (according to https://www.ibm.com/support/knowledgecenter/en/SSBS6K_3.1.1/installing/create_ca_cert.html#existing). The certificate is a wildcard certificate for our domain (*.yyy.zzz) that was signed by an known CA (thawte). The management console does seamlessly work with this certificate.
For installation of eventstreams I used the following settings in ´values.yaml`
proxy:
  # external IP address for access that the proxy should use
  externalEndpoint: "xxx.yyy.zzz"
# Secure connection settings for the proxy
tls:
  type: "provided"
  key: "<key for my certificate | base 64>"
  cert: "<my wildcard certificate without the chain | base 64>"
  cacert: "<the chain parts of my wildcard certificate | base 64>"

Nevertheless the output of the cluster-ca-cert points to a self signed certificate. Please find it here
kube-system.crt.txt .
Thanks in advance

Hi Johannes,
Thank you for the update, it is very useful to see that the cluster-ca-cert is self signed.
Please could you post the output of the following command: curl -v https://xxx.yyy.zzz:8443/iam-token/oidc/token - this will show the details of the certificate being served by that endpoint.
I am digging further to understand why the cluster-ca-cert is pointing to a self signed certificate.

Hi Nic,
please find attached the masked output of the curl. I replaced the values in a consistent way. Hope this helps.
curl.txt
Maybe we will end up in a general ICP installation/configuration issue for the cluster-ca-cert...

Hi Johannes,
That is showing that the server itself is responding with the expected certificate, and not the selfsigned as seen in cluster-ca-cert. I will now start investigating why the certificates are not matching, and why access-controller is not verifying that signed certificate.
Also, please could you provide the output of so that I can confirm whether the signed certificate is visible to access-controller:

kubectl -n <event-streams-namespace> get secret <event-streams-release>-ibm-es-proxy-secret -o jsonpath={'.data.tls\.cert'} | base64 --decode | openssl x509 -text
kubectl -n <event-streams-namespace> get secret <event-streams-release>-ibm-es-proxy-secret -o jsonpath={'.data.tls\.cacert'} | base64 --decode | openssl x509 -text
kubectl -n <event-streams-namespace> get secret <event-streams-release>-ibm-es-proxy-secret -o jsonpath={'.data.tls\.cluster'} | base64 --decode | openssl x509 -text

In addition could you please provide the public certificate you supplied to ICP on install, so that I can verify the certificate chain.

To put the output in a nutshell
tls.cert --> *.yyy.zzz wildcard certificate
tls.cacert --> Thawte TLS RSA CA G1 certificate, but not the complete chain - this would consist of two certificates
tls.cluster --> IBM Cloud Private certificate

I will provide the files later on (tomorrow in Germany). Perhaps there is a more private way of sharing the certificates - knowing that sharing a public certificate should be no security issue at all.

Please find attached the additional required files
certificate used for the installation: install.crt.txt
output of tls.cacert tls.cacert.txt
output of tls.cluster tls.cluster.txt
(partially masked) output of tls.crt tls.crt.txt
Thanks!

Hi Johannes,
Thank you for that output - one more thing I request, could you please send the output of kubectl -n kube-system  get secret router-certs -o jsonpath='{.data.tls\.crt}' | base64 --decode (assuming nothing you deem sensitive). I am trying to identify whether the full certificate chain you supplied on install of ICP is available to access-controller.

Hi Nic,
the access-controller seems to have the full certificate chain. Please double-check it with the provided output
router-certs.tls.txt

Hi Johannes,
Given that router-certs contains the expected certificate, please could you try the following:

kubectl -n <event-streams-namespace> get secret <event-streams-release>-ibm-es-proxy-secret --export -o yaml > proxySecret.backup.yaml
Copy proxySecret.backup.yaml to proxySecret.yaml
Edit proxySecret.yaml and replace the value stored in tls.cacert with the output of kubectl -n kube-system get secret router-certs -o jsonpath='{.data.tls\.crt}'
Apply the updated secret - kubectl -n <eventStreamsNamespace> apply -f proxySecret.yaml
Scale down and up the access controller deploy: kubectl -n <eventStreamsNamespace>  scale deploy <eventStreamsRelease>-ibm-es-access-controller-deploy --replicas=0 and then kubectl -n <eventStreamsNamespace>  scale deploy <eventStreamsRelease>-ibm-es-access-controller-deploy --replicas=2 to restart the access controllers.

This should then allow the connection between access controller and the https://xxx.yyy.zzz:8443/iam-token/oidc/token endpoint to succeed.

I have opened https://github.com/IBM/event-streams/issues/19 to track this issue through to a published fix.
Please continue to use this thread to confirm whether your Event Streams is functional.

Hi Nic,
I folllowed the suggested steps to replace the cacert part of the secret - but unfortunately it did not help at all. I'm still facing the problem that the call to https://xxx.yyy.zzz:8443/iam-token/oidc/tokenis rejected.
The resolving of the URL to the correct public IP works inside the access-controller-container. Unfortunately there is only wget available and no curl to validate the certificate in the container directly.
Any other ideas?
Thanks in advance and kind regards

Hi Johannes,
Could you please provide the output of the following command to confirm that access controller has now picked up the correct cert:
kubectl get pods -n <eventStreamsNamespace> | grep access-controller - copy the pod name of the first line returned
Then execute
kubectl exec -n <eventStreamsNamespace> <accessControllerPod> -c access-controller -- cat /etc/ssl/certs/ca-certificates.crt | openssl x509 -text
If this certificate is not the correct certificate, the next step is to let the container verify the certificate using its default public CA list. Please could you edit the -ibm-es-access-controller-deploy deployment to remove the volumeMount entry inside the access-controller container for ca-certs-volume. The path to that value in the deployment is spec.template.spec.containers[name=access-controller].volumeMounts
You can either edit the deployment in place via kubectl edit <releaseName>-ibm-es-access-controller-deploy, or use kubectl get deploy <releaseName>-ibm-es-access-controller-deploy -o yaml --export > access-deploy.yaml (and backup file), edit it locally with a text editor, then add back to ICP via kubectl apply -f access-deploy.yaml

Hi Johannes, I'm afraid I mistyped in my comment above : https://github.com/IBM/event-streams/issues/18#issuecomment-461439392
When editing proxySecret.yaml the replaces value should have been tls.cluster not tls.cacert.
Please could you perform the following steps:

Copy proxySecret.backup.yaml to proxySecret.yaml
Edit proxySecret.yaml and replace the value stored in tls.cluster with the output of kubectl -n kube-system get secret router-certs -o jsonpath='{.data.tls\.crt}'
Apply the updated secret - kubectl -n <eventStreamsNamespace> apply -f proxySecret.yaml
Scale down and up the access controller deploy: kubectl -n <eventStreamsNamespace>  scale deploy <eventStreamsRelease>-ibm-es-access-controller-deploy --replicas=0 and then kubectl -n <eventStreamsNamespace>  scale deploy <eventStreamsRelease>-ibm-es-access-controller-deploy --replicas=2 to restart the access controllers.

Hi Nic,
that was the trick... Replacing the tls.cluster certificate helped. Now I'm able to use the UI without the SaslAuthenticationException. Also the log states, that getting the iam token was successful "successfully obtained token from IAM"
Thank you very much!
I will open another issue tomorrow because the UI is only available via IP Address, since there is an extra certificate used in the section https.cert of the <event-streams-release>-ibm-es-proxy-secret


python312Packages.lmtpd: disable on Python 3.12

smtpd will be removed in Python 3.12
Description of changes
ZHF: #309482

Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

Result of nixpkgs-review pr 313467 run on x86_64-linux 1

4 packages built:

python311Packages.lmtpd
python311Packages.lmtpd.dist
python311Packages.salmon-mail
python311Packages.salmon-mail.dist


[BUG] TPC-DS-Like q10, q35, and q69 - slow or hanging at leftSemiJoin

This PR (https://github.com/NVIDIA/spark-rapids/pull/1391) removed some filtering in the plugin to work around slowness in cudf while building/probing the hash table used in cudf (https://github.com/rapidsai/cudf/issues/6052). It looks like leftSemiJoin is following a different path and needs to be addressed separately. As of now branch-0.4 regressed from branch-0.3 since we removed the filter logic and leftSemiJoin appears to still need it.
The symptom is a CPU thread stuck at:
Executor task launch worker for task 12689	RUNNABLE	Lock(java.util.concurrent.ThreadPoolExecutor$Worker@2076710178})
ai.rapids.cudf.Table.leftSemiJoin(Native Method)
ai.rapids.cudf.Table.access$3700(Table.java:45)
ai.rapids.cudf.Table$TableOperation.leftSemiJoin(Table.java:2401)
org.apache.spark.sql.rapids.execution.GpuHashJoin.doJoinLeftRight(GpuHashJoin.scala:274)

This ticket is to track the branch-0.4 fix. We can either (hopefully) fix it in cudf-0.18, or add the workaround again just for leftSemiJoin. Need to figure out if other joins are also affected.
@hyperbolic2346 FYI

If I partially revert https://github.com/NVIDIA/spark-rapids/pull/1391 I can get around that. We'll put this in, and take care of the underlying issue in cudf 0.19.

Note that: https://github.com/rapidsai/cudf/issues/7300 will handle this for us soon, so this PR (https://github.com/NVIDIA/spark-rapids/pull/1664) should be reverted when it goes in.


[$500] [HOLD for payment 2023-10-31] [HOLD for payment 2023-10-30] Web - Drag and drop feature works on Scan and Distance request money

If you haven’t already, check out our contributing guidelines for onboarding and email<EMAIL_ADDRESS>to request to join our Slack channel!

Version Number: <IP_ADDRESS>
Reproducible in staging?: y
Reproducible in production?: n
If this was caught during regression testing, add the test name, ID and link from TestRail:
Email or phone of affected tester (no customers):
Logs: https://stackoverflow.com/c/expensify/questions/4856
Expensify/Expensify Issue URL:
Issue reported by: Applause - Internal Team
Slack conversation:
Action Performed:

Start the request money flow and select "Scan"
Drag and drop a receipt on the scan modal
Select Distance option
Drag and drop a receipt on the distance modal

Expected Result:
Drag and drop feature works on Scan and Distance request money
Actual Result:
Drag and drop feature works on Scan and Distance request money
Workaround:
Unknown
Platforms:

Which of our officially supported platforms is this issue occurring on?

[ ] Android: Native
[ ] Android: mWeb Chrome
[ ] iOS: Native
[ ] iOS: mWeb Safari
[x] MacOS: Chrome / Safari
[ ] MacOS: Desktop

Screenshots/Videos

Android: Native

Android: mWeb Chrome

iOS: Native

iOS: mWeb Safari

MacOS: Chrome / Safari

https://github.com/Expensify/App/assets/93399543/55fd69e7-a40a-4c75-b9f2-22898e2e4034
https://github.com/Expensify/App/assets/93399543/f97e30f2-33ed-4781-882f-0ec74e3fddd2

MacOS: Desktop

View all open jobs on GitHub
Upwork Automation - Do Not Edit

Upwork Job URL: https://www.upwork.com/jobs/~011ae828d7f55c050d
Upwork Job ID:<PHONE_NUMBER>894443520
Last Price Increase: 2023-10-30

:wave: Friendly reminder that deploy blockers are time-sensitive ⏱ issues! Check out the open StagingDeployCash deploy checklist to see the list of PRs included in this release, then work quickly to do one of the following:

Identify the pull request that introduced this issue and revert it.
Find someone who can quickly fix the issue.
Fix the issue yourself.

Proposal
Please re-state the problem that we are trying to solve in this issue.
Drag and drop available for distance request as well
What is the root cause of that problem?
We are subscribing to incorrect key here
    withOnyx({
        selectedTab: {
            key: `${ONYXKEYS.SELECTED_TAB}_${CONST.TAB.RECEIPT_TAB_ID}`,
        },
    }),

What changes do you think we should make in order to solve the problem?
We should subscribe to
selectedTab: {
        key: `${ONYXKEYS.COLLECTION.SELECTED_TAB}${CONST.TAB.RECEIPT_TAB_ID}`,
    },

What alternative solutions did you explore? (Optional)

@dukenv0307 are you able to raise quick PR?
SELECTED_TAB is moved to collections in #26932 but your PR didn't reflect that.

We merged a fix already

Gonna have to pay 25% to @c3024 so $125 for their help! Thanks @alexpensify

It seems there was a regression here: https://github.com/Expensify/App/issues/30148

(Oops, posted in wrong issue, sorry)

Gonna have to pay 25% to @c3024 so $125 for their help! Thanks @alexpensify

Cool, the payment date is 10-31! I'll prepare for that date.

@narefyev91 - disregard this one. I needed to create an Upwork job.

@c3024 - to prepare for the payment date, can you please apply to this Upwork job:
https://www.upwork.com/jobs/~011ae828d7f55c050d
Thanks!

Applied. Thanks @alexpensify

@c3024 - thanks, I sent an offer in Upwork.

Accepted.

Done! I've finished the payment process in Upwork.


Suggestion: Use Android SupportAnnotation like "@StringRes"

see here: https://sites.google.com/a/android.com/tools/tech-docs/support-annotations

+1 for this suggestion. I will work on that !

I added @IntDef for the View modes (Progress, content, error, empty). The correct reference is here : d7e93091c376e60957167aae640ffe9652617c5f

I thought even when setting texts like emptytext.

yes you're right, some methods to set custom text, color, layout programmatically needs am annotation. I will add it.

Thanks.


Turn off CircleCI and Codeship

I think we need someone with admin access to do this.

They're no longer necessary now that we're running the container infrastructure on travis and we're uploading logs so we can see what the test failures are.

it's done, tested in #744


Re-apply "AST: Fix excessive deserialization in GenericSignatureBuilder"

This got reverted because it made our non-deterministic deserialization
crasher come up more often. Re-applying this patch to test the theory
that @jrose-apple's fix addressed the issue.

@swift-ci Please test


External symbol definition sidelining Arduino.h include conflicts with inlining work in ESP8266

I am speeding up optimistic_yield() in ESP8266 master from idle 80 cycles to 32 cyles by inlining the usually constexpr parameter conversion from µs to cycles.
Writing directly inlined code in Arduino.h, This conflicts with src/inner.h line 2598:
extern void optimistic_yield(uint32_t);

requiring an external symbol.
In PR https://github.com/esp8266/Arduino/pull/6804 I'm working around this by using the preprocessor. Cleaning this up would be better for typesafety etc.
@earlephilhower Grep'ing for use of optimistic_yield in bearssl, I would believe that the PR speeds up bearssl noticeably? Both the idle cycle reduction, and the corrected behavior of not yielding on every optimistic_yield after 10000us in the same loop iteration, but only each 10000µs between yields, should make a difference. Could you please review and comment in the PR log, maybe providing rationale from your POV there, what the expected behavior of optimistic_yield was anyway? Thank you.

@dok-net what would your suggestion for fixing the problem?  I'm not sure I can repro it, as I tried checking out Arduino/6804 and running the simple validation example.  The results weren't very stable, but I didn't see a great deviation vs. w/o the (corrected) optimistic_yield.  Maybe 100ms shorted in the shortest reported handshake time (but total connect time about 1300ms so it's not that dramatic).
The reason, I believe, is because in most cases the optimistic_yield is a no-op when I call it.  The SSL protocol is 1-way until the handshake is done, so while I'm doing EC work no new packets will be arriving from the website.  W/o wifi servicing, the ROM doesn't really have much to do other than some beacons and stuff.  I'm also doing a lot of work in the EC math calls, so the small overhead of the call/return aren't really noticeable.


Add Link to CardImage

I added a link to wrap CardImage. To make it a bit easier to read the logic, I made it into it's own stateless function #36

Awesome, thank you @DennyScott !


Modify the naming of the contants to comply with goling

This patch modifies the naming of IPv6 extension headers constants to
comply with golint validations.
closes #45.

Output of golint utility for openflow/ofp.v13 package.
$ golint -min_confidence=1.0 ./ofp.v13/ | grep -v comment


Add cam and mic entitlements and Info.plist keys

See https://github.com/livebook-dev/livebook/discussions/2170 for details

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.

Thank you! We should have a nightly (https://livebook.dev/releases/nightly/LivebookInstall-nightly-macos-universal.dmg) in 20min or so.


All files incorrectly showing pending VC changes with MS git provider

I checked out a project from GitHub using latest Git For Windows (64bit) and then added it as existing code to a new nodejstools project.
Now almost all files show pending changes in solution explorer, even though there are none according to command line "git status" or VS diffs (from right click on file).
I wondered if was core.autocrlf which his on by default (install option) but setting it to false in .git\config makes no difference. I can find no docs for the git provider since it moved to VS core.
I am using fully updated VS community 2015, lates dev release of nodejstools, microsoft git provider (not logged into TFS at all), GitHub extensions also installed. Windows 10 64 bit
I raised this on the VS General forum as it might not be NTVS related.

in #534  @mousetraps pointed out the Options->Projects and Solutions->ExternalWebTools and there is a local git setting there.
I'm wonder if this is used by MS git provider rather than system installed git (as there can be several) and it's autoCRLF settings are different, causing the false pending updates?
Will investigate when I have more time.

Not able to repro this behavior, and sounds like this is not something Node Tools specific.
Closing, if you're still seeing this, please open an issue on the Visual Studio Developer Community.


SVG export colors wrong

When exporting syntax to SVG the color for the numbers and guide lines were incorrect. In the terminal they are a mid grey, but in the export they are closer to pure white. If I was to guess I would say that the dim attribute isn't respected here.

It seems markup is interpreted as well when exporting to SVG. Example: http://localhost:8000/markdown-exec/gallery/#build-an-svg-image-from-code-snippets-with-rich
While the output in the terminal is correct:

Should be fixed by https://github.com/Textualize/rich/pull/2242


Update github action versions

Upload artifact, at least, is behind.

lmk a bit more and mybe i can take this up

lmk a bit more and mybe i can take this up

Thanks! For each GitHub action used, we have to go to its repo, find the latest release tag, and use that tag in the workflow YAMLs.


Running a complete pipeline for training gnns with real data without errors

Code I'm using:
python
import torch.nn as nn
import h5py
import torch
from deeprank_gnn.DataSet import HDF5DataSet
from deeprank_gnn.NeuralNet import NeuralNet
import numpy as np
from deeprank_gnn.ginet import GINet

database = '/Users/giuliacrocioni/remote_snellius/data/pMHCI/gnn_hdf5/rd.hdf5'
node_features = ["bsa", "depth", "hb_acceptors", "hb_donors", "hse", "ic", "pssm", "polarity", "sasa", "size", "type"]
edge_features = ["coulomb", "covalent", "dist", "vanderwaals"]

if __name__ == '__main__':

    # creating HDF5DataSet object and selecting molecules, node/edge features, target, and clustering method:
    dataset = HDF5DataSet(
        root = "./",
        database = database,
        node_feature = node_features,
        edge_feature = edge_features,
        target = "binary",
        clustering_method = None
    )

    device = torch.device('cuda' if torch.cuda.is_available() else 'cpu')

    nn = NeuralNet(
        dataset,
        GINet,
        task = "class",
        batch_size = 16,
        percent = [0.8, 0.2]
    )

    nn.train(nepoch = 5, validate = True)

Error that I get:
Traceback (most recent call last):
  File "/Users/giuliacrocioni/miniforge3/envs/3d_vac/lib/python3.10/site-packages/torch_geometric/data/storage.py", line 50, in __getattr__
    return self[key]
  File "/Users/giuliacrocioni/miniforge3/envs/3d_vac/lib/python3.10/site-packages/torch_geometric/data/storage.py", line 70, in __getitem__
    return self._mapping[key]
KeyError: 'cluster0'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/Users/giuliacrocioni/Desktop/eScience/projects_2022/3D-vac/3D-Vac/src/models/gnn_training.py", line 93, in <module>
    nn.train(nepoch = 5, validate = True)
  File "/Users/giuliacrocioni/Desktop/eScience/projects_2022/3D-vac/deeprank-gnn-2/deeprank_gnn/NeuralNet.py", line 301, in train
    self.eval(self.train_loader, 0, "training")
  File "/Users/giuliacrocioni/Desktop/eScience/projects_2022/3D-vac/deeprank-gnn-2/deeprank_gnn/NeuralNet.py", line 412, in eval
    pred = self.model(data_batch)
  File "/Users/giuliacrocioni/miniforge3/envs/3d_vac/lib/python3.10/site-packages/torch/nn/modules/module.py", line 1110, in _call_impl
    return forward_call(*input, **kwargs)
  File "/Users/giuliacrocioni/Desktop/eScience/projects_2022/3D-vac/deeprank-gnn-2/deeprank_gnn/ginet.py", line 91, in forward
    cluster = get_preloaded_cluster(data.cluster0, data.batch)
  File "/Users/giuliacrocioni/miniforge3/envs/3d_vac/lib/python3.10/site-packages/torch_geometric/data/data.py", line 362, in __getattr__
    return getattr(self._store, key)
  File "/Users/giuliacrocioni/miniforge3/envs/3d_vac/lib/python3.10/site-packages/torch_geometric/data/storage.py", line 52, in __getattr__
    raise AttributeError(
AttributeError: 'GlobalStorage' object has no attribute 'cluster0'

@cbaakman any idea about it?

Looks like you're using the ScatterPlotExporter in combination with binary classification. (output: n x 2, target: n x 1)
The ScatterPlotExporter was designed for regression. (output: n x 1, target: n x 1)
Such a mistake is detectable before running NeuralNet.train. Shall we throw an error message if that happens?


Want a nvim version of this theme

@themysteryboy nvim port already exist.
https://github.com/ellisonleao/gruvbox.nvim


Create RishabhKumar.md

Yes i have added please approve the PR

@crishabhkumar here : https://github.com/Binary-Cumates/Hacktoberfest-21-Open-First-PR/pull/105/commits/9fc07102a3b22beee252756da16e518d5e42cc56#diff-e77e6e504a7b3b0f98c223cd6af12753f9442915fc758dc1fafb2d61996f56dd only shows your markdown file, not the profile image. Use this to help: #2 . thanks


Kubernetes python client unable to refresh access token

I'm running a script that calls into kubernetes via the python client. However, it appears unable to get the correct credentials. I /can/ use the kubectl command-line interface, which I've noticed populates my .kube/config file with an access-token and an expiry whenever I make a command (e.g., kubectl get pods). As long as that token has not expired, my python script runs fine. However, once that token expires it doesn't seem to be able to refresh it, instead failing and telling me to set GOOGLE_APPLICATION_CREDENTIALS.
Of course, when I created a service-account with a keyfile and pointed GOOGLE_APPLICATION_CREDENTIALS to that keyfile, it gave me the following error:
RefreshError: ('invalid_scope: Empty or missing scope not allowed.', u'{\n  "error" : "invalid_scope",\n  "error_description" : "Empty or missing scope not allowed."\n}')

Although from the code it seems like you can provide scopes to credentials, I am trying to create a Kubernetes client via kubernetes.config.kube_config.new_client_from_config, which seems to create credentials without scopes.
Is there something wrong with my understanding of this client? Appreciate any help with this!
I am using the 3.0.0 release of the kubernetes python library. In case it is helpful, here is my .kube/config:
apiVersion: v1
clusters:
- cluster:
    certificate-authority-data: <CERTIFICATE_DATA>
    server: <IP_ADDRESS>
  name: <cluster_name>
contexts:
- context:
    cluster: <cluster_name>
    user: <cluster_name>
    name:  <cluster_name>
users:
- name: <cluster_name>
  user:
    auth-provider:
      config:
        access-token: <SOME_ACCESS_TOKEN>
        cmd-args: config config-helper --format=json
        cmd-path: /usr/lib/google-cloud-sdk/bin/gcloud
        expiry: 2017-11-10T03:20:19Z
        expiry-key: '{.credential.token_expiry}'
        token-key: '{.credential.access_token}'
      name: gcp

looks like the issue in https://github.com/kubernetes-incubator/client-python/issues/233. Are you using latest client? e.g. 4.0.0b1?

I was using 3.0.0, but the issue still occurs after upgrading to 4.0.0b1.


New organization user form input container margin

There has been no activity on this issue for more several months. We are closing it. If you think this still needs to be addressed please open a new issue.


[6.1] Wrap various convert subtasks in signpost intervals

This cherry pick contains two commits:

Explanation: This adds no-op shims for signposting and logging, making it easier for us to add low-overhead logging or performance metrics in the code. The main reason for cherry-picking this is that it could reduce future risk if another cherry-pick does any logging. The alternative would be to cherry-pick this later or to modify later cherry-picks to remove any logging of signposting in them.
Scope: Other cherry-picks that utilize signposting or logging will fail to build on the 6.1 branch. Higher chance of merge conflicts when cherry-picking from "main" to "release/6.1".
Issue: rdar://141210010
Risk: Low.
Testing: Existing automated tests pass. Manually tested signpost output using log stream --predicate 'subsystem=="org.swift.docc"' --signpost
Reviewer: @patshaughnessy
Original PR: #1112

and:

Explanation: This fixes a regression caused by rdar://141210010 where the DocC benchmark tools failed to build.
Scope: DocC's benchmark tools fail to build
Issue: rdar://141185270
Risk: Low. Separate tool only used for benchmarking.
Testing: Existing automated tests pass. Manually tested running the DocC benchmark tools.
Reviewer: @franklinsch
Original PR: #1124

@swift-ci please test


npm audit fix --force instalss nuxt 1.4.5

Environment
I'm not a pro at all with nmp and dependencies, buther's what happened.
I modified the package.json file to update nuxt and other dependencies to their latest versions :
"dependencies": {
    "@directus/sdk": "^17.0.1",
    "@vueuse/core": "^11.0.3",
    "@vueuse/nuxt": "^10.0.3",
    "nuxt": "^3.13.1",
    "vue": "^3.5.4",
    "vue-router": "^4.4.4"
  },

after deleting the node_modules folder and running npm install, i got this message in the console:
5 moderate severity vulnerabilities
To address all issues (including breaking changes), run:
  npm audit fix --force

when running this command, it installed nuxt 1.4.5 and updated the package.json file:
"nuxt": "^1.4.5",

Is that normal ?
Just thought I would let you know in case it's not.
Reproduction
update dependencies in package.json
run the command  npm audit fix --force
Describe the bug
After updating to nuxt 3.13.1, audit fix installs nuxt 1.4.5
Additional context
No response
Logs
No response

Thanks for alerting.
This is caused by nitropack relying on serve-static, which has an open vulnerability. However, this is only used in dev-mode and we do have plans to migrate away from it. You can safely ignore this report for now.
cc: @pi0

ok, cool  !  Thanks for you response !


fix(getOrientationString): Add additional logic to handle equal vector component edge case

Please check if the PR fulfills these requirements

[ * ] The commit message follows our guidelines
[ * ] Tests for the changes have been added (for bug fixes / features)
[ * ] Docs have been added / updated (for bug fixes / features)

What kind of change does this PR introduce? (Bug fix, feature, docs update, ...)
Bug Fix

What is the current behavior? (You can also link to an open issue here)
If two of the vector components are the largest, but equal, nothing is returned in the getOrientationString function

What is the new behavior (if this is a feature change)?
Now returns the expected values, taking the order priority of X,Y,Z
example: input vector [0.5, -.777, -.777] will be AFL

Does this PR introduce a breaking change? (What changes might users need to make in their application due to this PR?)
No

Other information:

:tada: This PR is included in version 4.6.1 :tada:
The release is available on:

npm package (@latest dist-tag)
GitHub release

Your semantic-release bot :package::rocket:


Script error after UdonUtils imported

I've imported UdonUtils package as a dependency for UdonAudioUtils,
but as soon as it's imported I get an error referring to undefined params inside the Stopwatch class.
[<color=#FF00FF>UdonSharp] Packages/tlp.udonutils/Runtime/Sync/NetworkTime.cs(131,50): error CS1061: 'Stopwatch' does not contain a definition for 'Elapsed' and no accessible extension method 'Elapsed' accepting a first argument of type 'Stopwatch' could be found (are you missing a using directive or an assembly reference?)
also
[<color=#FF00FF>UdonSharp] Packages/tlp.udonutils/Runtime/Sync/NetworkTime.cs(52,23): error CS1061: 'Stopwatch' does not contain a definition for 'Start' and no accessible extension method 'Start' accepting a first argument of type 'Stopwatch' could be found (are you missing a using directive or an assembly reference?)

Using Unity 2022.3.6f1 with VRChat world

I just fixed the underlying issue, I made a small mistake that allowed you to update to not-yet supported versions of UdonUtils. Please downgrade UdonUtils to 2.0.0 and install the latest version of UVU: 1.0.0-rc.2.

Including the latest pre-release (1.0.0-rc.4) it should not produce any errors anymore and is compatible with the latest versions of the other dependencies. Please confirm so that this can be closed :)


ECR - Repository CR tags not reflecting

Describe the bug
Updating tags on Repository CR is not reflecting, at least in the console.
In the debug logs i do see reconcile happen but resource metadata is not getting updated.
Steps to reproduce

Create a Repository without tags.
Update a Repository by adding tags.

Expected outcome
If CR is updated, tags should also be reflected.
Environment

Kubernetes version 1.20
Using EKS (yes/no), if so version? Yes 1.20
AWS service targeted (S3, RDS, etc.) ECR

Thanks for reporting this issue @svmundada , indeed ecr is missing the update code path for repositories. Sending a fix soon.

@svmundada we just release a new ecr-controller version fixing this issue: https://github.com/aws-controllers-k8s/ecr-controller/releases/tag/v0.0.16

@A-Hilaly Can we please reopen this? We are using v0.0.17 and after updating the tags on Repository we are seeing random 503 errors. Also tags are not getting updated in ECR on console.

Any help would be much appreciated ?

@svmundada i'm investigating this issue RN

Hey @svmundada i am not able to reproduce the issue with ecr-controller v0.0.17 - can you please provide the manifests of the ECR repositories you're creating and/or the controller logs your observing?

ServerException: An internal server error has occured

This looks like an error from ECR side and nothing wrong with how controller is trying to reconcile. This should resolve as ECR service recovers from this issue on their side.
@svmundada , please verify again and reopen if the issue does not resolve.

@vijtrip2 Makes sense on the ECR part side. Btw did you try to update tags on the already existing ECR repo? because that's what failed for us ( 2 times ).

Btw did you try to update tags on the already existing ECR repo?

Yes the ecr e2e tests creates a repository with no tags and then starts adding/updating tags: https://github.com/aws-controllers-k8s/ecr-controller/blob/main/test/e2e/tests/test_repository.py#L218-L244


Problem with building sample rabbitmq code in gradle

After launching rabbitmq-server and then ran the sample code in gradle, but sure why cannot build :
https://bitbucket.org/niceseb/myrabbitmq
Caused by: org.gradle.process.internal.ExecException: Process 'command '/Library/Java/JavaVirtualMachines/jdk1.8.0_66.jdk/Contents/Home/bin/java'' finished with non-zero exit value 1
        at org.gradle.process.internal.DefaultExecHandle$ExecResultImpl.assertNormalExitValue(DefaultExecHandle.java:367)
        at org.gradle.process.internal.DefaultJavaExecAction.execute(DefaultJavaExecAction.java:31)
        at org.gradle.api.tasks.JavaExec.exec(JavaExec.java:75)
        at org.springframework.boot.gradle.run.BootRunTask.exec(BootRunTask.java:63)
        at org.gradle.internal.reflect.JavaMethod.invoke(JavaMethod.java:75)
        at org.gradle.api.internal.project.taskfactory.AnnotationProcessingTaskFactory$StandardTaskAction.doExecute(AnnotationProcessingTaskFactory.java:227)
        at org.gradle.api.internal.project.taskfactory.AnnotationProcessingTaskFactory$StandardTaskAction.execute(AnnotationProcessingTaskFactory.java:220)
        at org.gradle.api.internal.project.taskfactory.AnnotationProcessingTaskFactory$StandardTaskAction.execute(AnnotationProcessingTaskFactory.java:209)
        at org.gradle.api.internal.AbstractTask$TaskActionWrapper.execute(AbstractTask.java:585)
        at org.gradle.api.internal.AbstractTask$TaskActionWrapper.execute(AbstractTask.java:568)
        at org.gradle.api.internal.tasks.execution.ExecuteActionsTaskExecuter.executeAction(ExecuteActionsTaskExecuter.java:80)
        at org.gradle.api.internal.tasks.execution.ExecuteActionsTaskExecuter.executeActions(ExecuteActionsTaskExecuter.java:61)
        ... 14 more

BUILD FAILED

Sorry for delay and misunderstanding your issue, but it fully isn't clear what you're doing wrong.
My logs looks like:
:clean
:compileJava
:processResources
:classes
:findMainClass
:bootRun

  .   ____          _            __ _ _
 /\\ / ___'_ __ _ _(_)_ __  __ _ \ \ \ \
( ( )\___ | '_ | '_| | '_ \/ _` | \ \ \ \
 \\/  ___)| |_)| | | | | || (_| |  ) ) ) )
  '  |____| .__|_| |_|_| |_\__, | / / / /
 =========|_|==============|___/=/_/_/_/
 :: Spring Boot ::        (v1.3.1.RELEASE)

2015-12-28 15:28:52.115  INFO 5172 --- [           main] hello.Application                        : Starting Application on HOME with PID 5172 (D:\SpringIO\gs-messaging-rabbitmq\complete\build\classes\main started by abilan in D:\SpringIO\gs-messaging-rabbitmq\complete)
2015-12-28 15:28:52.117  INFO 5172 --- [           main] hello.Application                        : No active profile set, falling back to default profiles: default
2015-12-28 15:28:52.150  INFO 5172 --- [           main] s.c.a.AnnotationConfigApplicationContext : Refreshing org.springframework.context.annotation.AnnotationConfigApplicationContext@64485a47: startup date [Mon Dec 28 15:28:52 EST 2015]; root of context hierarchy
2015-12-28 15:28:52.645  INFO 5172 --- [           main] trationDelegate$BeanPostProcessorChecker : Bean 'org.springframework.amqp.rabbit.annotation.RabbitBootstrapConfiguration' of type [class org.springframework.amqp.rabbit.annotation.RabbitBootstrapConfiguration$$EnhancerBySpringCGLIB$$f56c92e7] is not eligible for getting processed by all BeanPostProcessors (for example: not eligible for auto-proxying)
2015-12-28 15:28:53.040  INFO 5172 --- [           main] o.s.j.e.a.AnnotationMBeanExporter        : Registering beans for JMX exposure on startup
2015-12-28 15:28:53.044  INFO 5172 --- [           main] o.s.c.support.DefaultLifecycleProcessor  : Starting beans in phase<PHONE_NUMBER>
2015-12-28 15:28:53.087  INFO 5172 --- [cTaskExecutor-1] o.s.a.r.c.CachingConnectionFactory       : Created new connection: SimpleConnection@5e1b6448 [delegate=amqp://guest@<IP_ADDRESS>:5672/]
2015-12-28 15:28:53.088  INFO 5172 --- [cTaskExecutor-1] o.s.amqp.rabbit.core.RabbitAdmin         : Auto-declaring a non-durable, auto-delete, or exclusive Queue (spring-boot) durable:false, auto-delete:false, exclusive:false. It will be redeclared if the broker stops and is restarted while the connection factory is alive, but all messages will be lost.
Waiting five seconds...
Sending message...
Received <Hello from RabbitMQ!>
2015-12-28 15:28:58.122  INFO 5172 --- [           main] s.c.a.AnnotationConfigApplicationContext : Closing org.springframework.context.annotation.AnnotationConfigApplicationContext@64485a47: startup date [Mon Dec 28 15:28:52 EST 2015]; root of context hierarchy
2015-12-28 15:28:58.124  INFO 5172 --- [           main] o.s.c.support.DefaultLifecycleProcessor  : Stopping beans in phase<PHONE_NUMBER>
2015-12-28 15:28:58.128  INFO 5172 --- [           main] o.s.a.r.l.SimpleMessageListenerContainer : Waiting for workers to finish.
2015-12-28 15:28:59.125  INFO 5172 --- [           main] o.s.a.r.l.SimpleMessageListenerContainer : Successfully waited for workers to finish.
2015-12-28 15:28:59.126  INFO 5172 --- [           main] o.s.j.e.a.AnnotationMBeanExporter        : Unregistering JMX-exposed beans on shutdown
2015-12-28 15:28:59.129  INFO 5172 --- [           main] hello.Application                        : Started Application in 7.198 seconds (JVM running for 7.439)

BUILD SUCCESSFUL

Total time: 12.623 secs

and this is after running gradlew clean bootRun from the gs-messaging-rabbitmq\complete directory.
I'm not sure how your own project is related to this Guide, but check your project with the same Gradle version, not 2.9: https://bitbucket.org/niceseb/myrabbitmq/src/c77a8eff3b596918b89f86c34b038962f40b86fa/build.gradle?at=master&fileviewer=file-view-default#build.gradle-53

Can you include what you typed with the output?

Seeing no follow up I'm closing this issue.


Data serialization is broken if you are using full URL to API on your hostname

Describe the bug
My API is on the same hostname but in sub path "/api". My fetch do things like fetch('https://my.site/api/get_user') .
The URL from this fetch is testing on the server side is here https://github.com/sveltejs/kit/blob/master/packages/kit/src/runtime/server/page/load_data.js#L190 and removing the hostname from the URL because the origin is the same, but the client trying to search the full path by selector because we use fetch URL as is here https://github.com/sveltejs/kit/blob/master/packages/kit/src/runtime/client/client.js#L603 .
It raises the second request to API, from CSR.
Reproduction
In the load function, you should make a fetch with the full path to the same hostname.
Logs
No response
System Info
System:
    OS: Linux 5.4 Ubuntu 20.04.5 LTS (Focal Fossa)
    CPU: (12) x64 AMD Ryzen 5 3600 6-Core Processor
    Memory: 37.92 GB / 62.81 GB
    Container: Yes
    Shell: 5.0.17 - /bin/bash
  Binaries:
    Node: 18.12.1 - /usr/bin/node
    npm: 8.19.2 - /usr/bin/npm
  npmPackages:
    @sveltejs/adapter-node: 1.1.4 => 1.1.4
    @sveltejs/kit: 1.3.9 => 1.3.9
    @sveltejs/svelte-virtual-list: github:sveltejs/svelte-virtual-list => 3.0.1
    svelte: 3.55.1 => 3.55.1
    vite: ^4.0.4 => 4.0.4

Severity
serious, but I can work around it
Additional Information
No response

My API is on the same hostname but in sub path "/api". My fetch do things like fetch('https://my.site/api/get_user') .

Can you confirm if your issue is similar to https://github.com/sveltejs/kit/issues/8851 where using the SvelteKit provided fetch is unable to find APIs outside the framework on the same host?
If it is similar, it should be fixed by https://github.com/sveltejs/kit/pull/8869

@s3812497 seems like I have no similar issue because I am using handleFetch, anyway I have no crash, in my case, just serialization is broken. I suppose is a different issue but on the same theme.

@s3812497 seems like I have no similar issue because I am using handleFetch, anyway I have no crash, in my case, just serialization is broken. I suppose is a different issue but on the same theme.

Do you mind uploading an example project that reproduces this issue and the actual / expected behaviour?

I will try. Also, it seems like #8851 it's about server.js, but my issue is about fetch in load function of +page.js.
But again, you can look into my link and it will be clear - SSR uses only path for a tag with data but the client trying to find by full URL with the hostname.
I am not sure how to fix it... basically, we can't remove the origin if it's not a part of SvelteKit routes.

@s3812497 @dummdidumm thanks!

@stalkerg thanks for filing the issue :)


Preferred single node setup

This may not actually be a bug as it is a question more for guidance.
We are running a single node EGX "cluster". It seems that by default, in this configuration, the single node will only have the "master" label and not the "worker" label.
When only running single node, is the suggested solution to simply add the worker label to the node manually?

Agree but we tainted the the master node to run the workloads. so we can change until unless workloads are expected to run based on node role but we for EGX stack we didn't see that scenario. If you need that label for master can add that too.

@rmkraus hope that answer your question


⚠ Bofrost.fr has degraded performance

In 001e600, Bofrost.fr (https://www.bofrost.fr) experienced degraded performance:

HTTP code: 200
Response time: 1345 ms

Resolved: Bofrost.fr performance has improved in 15716e0 after 25 minutes.


How to use micromatch in chokidar v3

Hey 👋
Chokidar v2 used micromatch inside, but switched to picomatch in v3. I've got a PR to use chokidar as a watcher, but I use globby package inside which uses micromatch. So some of glob features will be missing in this case.
Is it somehow possible to use micromatch in chokidar v3?

So which features exactly are missing from micromatch? Micromatch uses picomatch inside.

@paulirish I wish I knew man, trying to figure out differences from pico/micro/mini/any/etc match.
I saw micromatch uses picomatch inside and from comparison table seems like only Brace expansion is missing from picomatch.

We are using braces.

@paulmillr that's great, thank you


Border around Container Component

Issue Description

Looking to add a border around the container component to help differentiate multiple containers on a page.
Issue Type

[ ] New Feature
[X] Enhancement
[ ] Bug
[ ] Other

Expected Behavior

Border - border: 1px center * #BCBFC0 100%opacity: 100%radius: 0px
Current Behavior

Currently there is no border around the container component, so it's essentially floating content.

Met with Laura, the Kiosk project designer needing the initial enhancement request and it is no longer needed. Closing Issue.

Our main use case for visually contained content would be solved by fixed table headers, see https://github.com/cerner/terra-core/issues/1101


METRON-1885: Remove version from bro plugin btest

Contributor Comments
This changes the show-plugin btest so that it should be future proofed against a version change that we expect to be a part of bro 2.7.  It is related to #8.
Testing
An easy way to test this is to use bro-pkg to install the plugin (which runs all of the tests by default), or you can go on a properly configured box (wrt btest) and run cd metron-bro-plugin-kafka/tests/ && btest -d.
Pull Request Checklist
Thank you for submitting a contribution to Apache Metron's Bro kafka writer plugin.
In order to streamline the review of the contribution we ask you follow these guidelines and ask you to double check the following:
For all changes:

[X] Is there a JIRA ticket associated with this PR? If not one needs to be created at Metron Jira.
[X] Does your PR title start with METRON-XXXX where XXXX is the JIRA number you are trying to resolve? Pay particular attention to the hyphen "-" character.
[X] Has your PR been rebased against the latest commit within the target branch (typically master)?

For code changes:

[X] Have you included steps to reproduce the behavior or problem that is being changed or addressed?
[X] Have you included steps or a guide to how the change may be verified and tested manually?
[X] Have you ensured that the full suite of tests and checks have been executed via:bro-pkg test $GITHUB_USERNAME/metron-bro-plugin-kafka --version $BRANCH

[X] Have you written or updated unit tests and or integration tests to verify your changes?
[ ] If adding new dependencies to the code, are these dependencies licensed in a way that is compatible for inclusion under ASF 2.0?
[ ] Have you verified the basic functionality of the build by building and running locally with Apache Metron's Vagrant full-dev environment or the equivalent?

I am looking at this one now.  Just trying to get a Dockerfile put together that I can use to test changes like this.  I have manually built up a test environment one too many times now. :)

+1 Looks good. Thanks
FYI - Tested with this Dockerfile.
docker build . --tag=bro-testing
docker run -it bro-testing /bin/bash

[root@0998ab0f716a ~]# bro-pkg install http://github.com/JonZeolla/metron-bro-plugin-kafka --version METRON-1885
The following packages will be INSTALLED:
  http://github.com/JonZeolla/metron-bro-plugin-kafka (METRON-1885)

Verify the following REQUIRED external dependencies:
(Ensure their installation on all relevant systems before proceeding):
  from http://github.com/JonZeolla/metron-bro-plugin-kafka (METRON-1885):
    librdkafka ~0.11.5

Proceed? [Y/n] Y
http://github.com/JonZeolla/metron-bro-plugin-kafka asks for LIBRDKAFKA_ROOT (Path to librdkafka installation tree) ? [/usr/local/lib]
Saved answers to config file: /root/.bro-pkg/config
Running unit tests for "http://github.com/JonZeolla/metron-bro-plugin-kafka"
all 10 tests successful
Installing "http://github.com/JonZeolla/metron-bro-plugin-kafka"........
Installed "http://github.com/JonZeolla/metron-bro-plugin-kafka" (METRON-1885)
Loaded "http://github.com/JonZeolla/metron-bro-plugin-kafka"

[root@0998ab0f716a ~]# bro -N Apache::Kafka
Apache::Kafka - Writes logs to Kafka (dynamic, version 0.3)


brush tool's passiveCallback throws when changing image if globalToolSyncEnabled is true

Prerequisites

[x] Are you running the latest version?
[x] Are you reporting to the correct repository?
[x] Did you perform a cursory search?

Description
Crashing Bug: using the Brush tool with globalToolSyncEnabled can cause the application to crash when a new element is enabled.
Steps to Reproduce

initialize csTools with { globalToolSyncEnabled: true }
enable an element and load an image
set the brush tool mode to "active"
set the brush tool mode to "passive"
enable a second element.

Expected behavior: [What you expected to happen]
The 2nd element should be enabled
Actual behavior: [What actually happened]
The application crashes with the following error.
Uncaught Error: updateImage: image has not been loaded yet
    at Module.<anonymous> (cornerstone.js:7603)
    at BrushTool.passiveCallback (cornerstoneTools.js:24482)
    at setToolModeForElement (cornerstoneTools.js:11614)
    at cornerstoneTools.js:11694
    at Array.forEach (<anonymous>)
    at _resolveInputConflicts (cornerstoneTools.js:11684)
    at setToolActiveForElement (cornerstoneTools.js:11430)
    at cornerstoneTools.js:10756
    at Array.forEach (<anonymous>)
    at _repeatGlobalToolHistory (cornerstoneTools.js:10753)

{ globalToolSyncEnabled: true } and I thought I was the only one using that setting ^_^
I'll take a look at your PR. Thanks for the report!

:tada: This issue has been resolved in version 3.7.3 :tada:
The release is available on:

npm package (@latest dist-tag)
GitHub release

Your semantic-release bot :package::rocket:


Compatibility with web-based SAME system

I don't have a RTL-SDR I can dedicate to this, so is there a way it could get data from a web based system? Like IPAWS?
https://www.fema.gov/emergency-managers/practitioners/integrated-public-alert-warning-system/technology-developers

The aim of this project is to provide alerting without using wifi


using await/await using/async using

In the January, 2023 TC39 plenary session there was a debate on what the final syntax for the asynchronous using declaration should be, given that there are conflicting developer intuitions regarding each potential syntax form.
The three forms currently under consideration are:

using await x = y (currently proposed)
async using x = y
await using x = y

We opted to postpone advancement until the March, 2023 plenary to give some delegates the opportunity to conduct informal surveys to determine which of these options more clearly represented the semantics of the proposal. If there is no clear choice, the proposal will advance to Stage 3 at the March, 2023 plenary using the proposed syntax.
There are pros and cons to each syntax option, which I will summarize below.
using await x = y
The current proposal syntax was chosen prior to the January, 2023 plenary for a number of reasons. The use of the await keyword very clearly indicates an asynchronous interleaving point, much like AwaitExpression and the for-await-of statement. In addition, the using await keyword order was chosen to avoid ambiguity with an await using expression, given that using on its own remains a valid identifier, and that await as a modifier currently only occurs to the right of the statement it modifies (i.e., for await).
However, there is the potential for confusion for code readers due to the non-local nature of the using declaration. The actual await occurs as control flow exits the block scope, rather than immediately at the site of the declaration. This may lead some to incorrectly assume that using await x = y would await the value of x/y. In the case of a for await (const x of y) statement, the for await operation doesn't await the value of y, though it does await the result of each next() operation on its iterator, which in turn means that it does await the value that becomes x. This potential conflation of meanings can lead to confusion if attempting to intuit the meaning of using await given for await as context.
async using x = y
The async using syntax form was initially suggested as a means to pair with a specially annotated await using { ... } block, so as to resolve #1. However, we were able to resolve #1 without the introduction of a new block syntax, which is why we did not choose prior to the January, 2023 plenary.
The advantage of the async using syntax is that it indicates an asynchronous operation without conveying a meaning that the operation might occur immediately. However, async using breaks with existing uses of async in the language today. Currently, async is only used to indicate functions that have different runtime semantics than a normal function, permitting the use of await expressions and the for-await-of statement in the function body. Yet this use doesn't indicate an interleaving point will occur, which breaks from the intended semantics of this proposal. This meaning of async is further reinforced by proposals like async do {}, which would still require an explicit await somewhere to observe the result.
Also, while a minor concern, async using will likely need a cover grammar to disambiguate between an async using declaration and an async using => declaration.
await using x = y
A third option we've discussed outside of plenary would be to use an await using ordering instead. This matches the C# syntax that is the equivalent of this behavior, and has the benefit of continuing to use await to indicate an async interleaving point. This also has a slight advantage over using await, given that the keyword order may lean more towards an interpretation of "await the using of x". It is unclear, however, if this distinction is enough to guide developer intuition.
As with async using, there is a minor concern regarding the need for a potential cover grammar to disambiguate await using as a declaration from await using (or await using.x) as an expression.
Not considered: using async x = y
We are not currently considering a using async keyword order at this time. We feel it is important to align the sync and async versions of the proposal, and are concerned that the ambiguity between:
using async x = y; // async 'using' of 'x' identifier
using async = y; // sync 'using' of 'async' identifier

would lead to further confusion. We could ban async as an identifier in using, as we've currently done for await (and for the same reason), however there is a distinction between await and async as identifiers. Currently, await is a reserved word, making it a syntax error to use it as an identifier in strict-mode code. It is also a syntax error to use it as an identifier in an async function, leaving it as only legal in non-async, non-strict code. async, on the other hand, is not reserved in any mode, nor is it reserved in async functions, so we are concerned that banning async for this purpose would get in the way of potential refactors in existing code, such as:
// source
const async = ...;
try {
  ...
}
finally {
  async.dispose();
}

// refactored
using async_1 = ...;
...

Due to the existing restrictions the language imposes on the use of await as an Identifier, we're far less concerned about using await being a refactoring hazard.

cc: @syg

also cc: @mhofman, @erights, @bakkot

Note that async doesn't just involve await, it ensures that the function (or do expression) will produce a Promise and can't ever produce anything else, including a thrown exception. (this statement is not an argument for or against any of the three syntax choices above)

@rbuckton  We discussed syntax options on last week JSCIG meeting, here is the poll result: https://github.com/JSCIG/es-discuss/blob/master/feedback/202303-async-using.md .
We had 8 respondents, only 1 choose using await, all others choose either async using or await using. Most people feel await/async keyword should be put before using.

Per the March plenary, the consensus was to use await using.
Fixed by #15


Documentation error

This wont work on linux (has to be lower case)
To test locally, in the folder for your app, type "manifoldJS run Android"

see https://github.com/manifoldjs/ManifoldJS/commit/a67cc9ebc5aced49b64df4ee11f38cd546dfc323.


Error: TTV Fits with More than One Planet

Hi Nestor,
There is an error when trying to use juliet to fit transit times of more than one planet. The issue is in line 568 of fit.py. This line needs to be run per planet, but it is not in a for loop.
Thanks,
Amy

Fixed in new juliet version!


how to setup domain in route

Hi,
I want to setup domain based routing for module, but it is not working. how can i set up a module to work with m.abc.com
and another module that can work with www.abc.com for example. when trying to configure with domain route config in routes.php it is giving error, without modules setting domain based routing works well.
please suggest how to proceed

Hi,
You can do this like you would in a normal laravel application.

Sub-Domain Routing
Route groups may also be used to handle sub-domain routing. Sub-domains may be assigned route parameters just like route URIs, allowing you to capture a portion of the sub-domain for usage in your route or controller. The sub-domain may be specified by calling the domain method before defining the group:
Route::domain('{account}.myapp.com')->group(function () {
    Route::get('user/{id}', function ($account, $id) {
        //
    });
});

Source: https://laravel.com/docs/5.6/routing

i guess this can be closed now :) Think module as a package so nothing is going to be changed :)

hi,
thanks all,
its working fine.
can close this now.


A mistake

// disable if you absolutely need a CPU boost
r_ambientboost 0

Already disabled (and should be)

Fixed in https://github.com/mastercoms/tf2cfg/commit/583920911916602dc7f72d26bbf174f20f124a46


Generate AsyncAPI Schema

Is your feature request related to a problem? Please describe.
Automatically providing a schema for an API makes it much easier for others to programmatically access it. drf-spectacular does this very well for DRF and OpenAPI 3. Doing this for websockets using AsyncAPI would allow this concept to move into the websocket portions of DRF applications.
Describe the solution you'd like
Like drf-spectacular, traverse the websocket URL endpoints and associated Serializers to dynamically build up an AsyncAPI schema for a DCRF application.
With this schema, users can then use the provided AsyncAPI generators to generate client code automatically that maps to the endpoints and types used in the websocket API.

I was not aware of https://www.asyncapi.com thank you for brining this to my attention.  I agree this would be a very useful feature to be able to generate AsyncAPI endpoint I think hand in hand with this would be having a debug ui (like the one DRF provides) so you can navigate and play with the API directly from your browser and discover move about AsycnAPI.

I think hand in hand with this would be having a debug ui (like the one DRF provides) so you can navigate and play with the API directly from your browser and discover move about AsycnAPI.

It looks like the AsyncAPI folks provide a Swagger UI-like web component for this:

https://github.com/asyncapi/spec/issues/478#issuecomment-761252571
https://github.com/asyncapi/asyncapi-react/

So if the generated AsyncAPI schema is hosted, it should be possible to bundle their web component and point it at the schema. drf-spectacular does this by generating an OpenAPI schema dynamically, and then also hosting the static Swagger UI pages and pointing them at the generated schema. drf-spectacular-sidecar is the page bundle Swagger UI for offline hosting.

It looks like the AsyncAPI project also has a generator that can be used to generate documentation and clients from the schema.

https://github.com/asyncapi/generator


[Bugfix][TIR] compute-at/fuse/split dtype mismatch

The schedule primitives, including compute-at, fuse and split usually
generate loop variables with dtype=int32 as default. However, in some
models, there are usecases where int64 are part of tensor shapes, which
leads to unexpected behavior in scheduling. This PR brings the fix to
existing known issues.

CC: @spectrometerHBH would you like to review this PR?


[Draft] High resolution UI textures

Closes #523

UI texture sources grouped together in a single SVG vector file, this should help us maintain same colour palette and same style throughout our textured buttons.
Removed crown and v11 from the main button, only our branded Traffic Light by @FireController1847
Removed discolored "normal" textures from main menu tools, and only using full colored.
Exported texture resolutions bumped to 128px (looks great on 200% UI scale), main menu tools and main button now have these new textures.

Checklist

[ ] Hook rebuild main menu on theme change
[ ] Replace v11 with small yellow "update notification dot" - !TMPELifecycle.Instance.WhatsNew.Shown
[ ] Priority Sign - take from current theme's Yield sign
[ ] Parking - take from current theme's Parking-Allow
[ ] Junction - take from current theme Crossing-Allow [note: Add Crossing sign to Fallback first]
[ ] VR sign - take from current theme's PersonalCar-Restrict
[ ] Lane Arrows - rethink theming or shrink vertically/redo?
[ ] Clear Traffic - rethink
https://thenounproject.com/icon/remove-873403/
https://thenounproject.com/icon/remove-873413/
https://thenounproject.com/icon/remove-car-621411/
[ ] Toggle Despawn - rethink
Prevent despawning: https://thenounproject.com/icon/traffic-135499/
Enable despawning: https://thenounproject.com/icon/car-135487/
[ ] Write down origins of icons to https://github.com/CitiesSkylinesMods/TMPE/wiki/Credits

Removed crown and v11 from the main button, only our branded Traffic Light by @FireController1847

Regarding the traffic light icon, details can be found in https://github.com/CitiesSkylinesMods/TMPE/issues/71
I think icon for priority signs could be simplified to just the Yield icon as it's most globally recognised (even US has Yield signs).
Could some of the tools take their icon from the currently selected signage theme?

Prority signs: the Yield icon
Parking: Parking allowed icon
Junction restrictions: Pedestrian crossing icon

Would be great to have JR icons themeable - particularly the ped crossing sign which varies quite a bit

Vehicle restrictions: Car ban icon - would be great to get country specific theme for this icon as most countries do have a sign for "no cars allowed"

The lane arrows icon always struck me as being too abstract. Could we maybe have a themeable icon for that (as it varies from country to country)? As the lane arrows IRL are stretched to make them work from driver perspective, we'd need to un-stretch them to fit icon better.
For clear traffic & toggle despawn, is it worth taking this opportunity to rethink how we present those to users (particularly new users)?
Possible icons for clear traffic (would need color inverting, and border adding):

https://thenounproject.com/icon/remove-873403/
https://thenounproject.com/icon/remove-873413/
https://thenounproject.com/icon/remove-car-621411/

As for toggle despawn, from user perpsective it's more about control over size of traffic jams. An exclamation mark doesn't really convey anything about traffic jams. Maybe we could use something like:

Prevent despawning: https://thenounproject.com/icon/traffic-135499/
Enable despawning: https://thenounproject.com/icon/car-135487/

Additionally, any icons we use should be detailed on the credits page in wiki: https://github.com/CitiesSkylinesMods/TMPE/wiki/Credits

Let's split your huge comment into things which are in the scope, and things which require extra programming and big brain (note: i have no big brain most of the time)
Updating the pull request text with checklist...

For button hovered background, what about just a blue circle (will be visibly brighter than green default circle, and will create better distinction between hovered vs. active button).

Confused IKEA man if we draw our own similar man, with a driving wheel in his hands, could that be related to despawning?

Confused IKEA man if we draw our own similar man, with a driving wheel in his hands, could that be related to despawning?

Not sure. IMO it would be too much to fit in to an icon and still quite confusing. What about the 'allow despawn' icon being the three cars icon I posted earlier, but with two cars at back greyed out or just outlines?
BTW, I think this #1525 largely completes #523 so could possibly mark it as fixing #523 in OP?

I don't have much to add but I was mentioned and decided to take a glance, this is looking really good! Once this is merged might just convince me to come back to C:S for a bit haha. Looking forward to HQ icons. Finally can use them with my ultrawide 1440p with no blur! 😄

Idea for despawning button
Despawning disabled: queue of 🚘🚘🚘 in a circle ⚪
Despawning enabled: an empty silhouette of one car 🚘 and disappearing effect

No despawning (traffic queue):
Despawning (poof! magic) also with blue underlay, so maybe the car is too translucent:

Definitely much better than the old button! It still looks a bit brash though...
What about something like: https://thenounproject.com/icon/traffic-135499/
And then in allow despawn mode remove the back two cars, put smaller "pop" sparks in place of them and keep the foreground car non-transparent = depict that the 'stuck' traffic behind it has gone...?

For clear traffic button, what about something like this - depicting more than one type of vehicle: https://thenounproject.com/icon/traffic-jam-1361986/ (could probably remove car at the back on the right to make the icon a bit cleaner)

The previous variant looked noisy because of dashed outline and semitransparency + it was filmed at 150% scale which probably distorted the dashed outline to the point of it being bad.

Nice! Fine tuning...
Disable despawn button:

Background: Do we need the blue bg now that state icons are very distinct?
Sparklines: Move inwards, just a bit, towards their middle point, make a tiny bit dimmer

Clear traffic button:

Add transparent outline around the car to split it from the bus (similar to how cars in disable despawn button have outline around them)?
Maybe move the ❌ up a little?

Both buttons:

Shrink the content a bit so there's more of a gap between the vehicles and green button outline.
Maybe dim the vehicles just a tiny bit?

Those look amazing! BTW, would it be worth tying the button background with just tht thin green outline (no fill on normal state) - it looks super clean.

Those look amazing! BTW, would it be worth tying the button background with just tht thin green outline (no fill on normal state) - it looks super clean.

I'd like buttons to be distinct from the panel. We're not doing minimalist flat "material design" which is criticised by many people for how hard is to find buttons in it.


Allow Selection Buffers to be Previewed In the Client

Seems as if its necessary to try and preview what the users is actually selecting.

Close term scope: Buffer drawn polygons.
Long term scope: Buffer the drawn shape and somehow select shapes from the layer.

This branch probably warrants moving into master but I wanted @klassenjs  to review it first.

TODO:
Try this except with Turf instead of JSTS.  Why? Because JSTS is LGPL and sorta heavy versus Turf which is MIT and more modular.

The deliverable size of Turf is comparable to JSTS, only the licensing seems to be substantially different from the perspective of inclusion.

After much discussion, we're sticking with JSTS.
New enhancement to the extension: Add buffers to drawn sketches.

This is a part of the ClientBuffer extension.


Update ci.yml

Issue #, if available:
Description of changes:
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Codecov Report
All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 16.49%.  Consider uploading reports for the commit 92fc81f to get more accurate results

Additional details and impacted files
@@           Coverage Diff            @@
##           develop    #1146   +/-   ##
========================================
  Coverage    16.49%   16.49%
========================================
  Files           50       50
  Lines         7014     7014
========================================
  Hits          1157     1157
  Misses        5857     5857

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.


Enhancement: Allow a reroute to specify more than one authentication scheme

New Feature
Allow a reroute to specify more than one authentication scheme for a reroute.  Specification could either be JSON array or comma separated.
Motivation for New Feature
Sometimes more than one authentication scheme may be allowed for an API (e.g. JWT + Client Certificates). This feature would allow more than one scheme to be use on a single reroute eithout requiring a custom override of the authentication pipeline..

@TomPallister we use 3 authentications: AddCookie, AddOpenIdConnect, AddJwtBearer
and some code so that they are applied automatically with [Authorisation] attribute
    //https://stackoverflow.com/questions/49668735/asp-core-azure-ad-auth-custom-jwt-custom-identity-store
            services.AddMvc(options =>
            {
                var policy = new AuthorizationPolicyBuilder()
                    .RequireAuthenticatedUser()
                    .AddAuthenticationSchemes(CookieAuthenticationDefaults.AuthenticationScheme,
                        JwtBearerDefaults.AuthenticationScheme, OpenIdConnectDefaults.AuthenticationScheme)
                    .Build();
                options.Filters.Add(new AuthorizeFilter(policy));
            });

If I try to register all of them with the same scheme name in AddCookie(...), AddXXX(...), I get an error: InvalidOperationException: Scheme already exists. So I don't know if it's possible for ocelot to forward requests with multiple authorisation types unless this feature is supported?

Hi Everyone.
We are using authentication schemes. Could you please tell if you have any info how to specify all of them for one Route.
Thank you a lot.

The method that I use in ASP.NET to accept multiple authentication schemes is to add them all to the same authorization policy. The ASP.NET Authorize attribute names the authorization policy, not the authentication scheme. If Ocelot let me specify the name of an authorization policy instead of an authentication scheme, then I could achieve this result.
Is that something that can be reasonably added?

@TomPallister  Tom,
When Phil says specify more than one authentication scheme it looks like very abstract. But he had proposed to consider "Client Certificates" authentication scheme. Could it be concrete here? Truly speaking I don't understand what the "Client Certificates"authentication standard is? How is it implemented and supported by .NET ecosystem?
Can we accept current description?
I believe Phil needs to provide more details on "Client Certificates" in .NET.
@philproctor Hi Phil!
Do you have some preliminary solutions?
The people provides some info for CookieAuthenticationDefaults and OpenIdConnectDefaults authentication schemes.
And Ocelot has JwtBearerDefaults authentication scheme already being implemented.
Could you share more details on "Client Certificates" in .NET please? I am not familiar with that auth-scheme at all?
Is this supported in .NET world at all?
A sooner feedback is better! And we can accept this feature request.
Keep in mind that any PR with ready solution will make the issue accepted automatically.

@michaellperry commented on Jan 24, 2023:

Hi Michael !
Could you share an example code with authorization policy approach please?

@samuelcoutu commented on Oct 12, 2022

The same cannot be supported by Ocelot, because Ocelot has no controllers at all except very system ones.
Is seems you are mixing responsibilities of entire ASP.NET pipeline and concrete controller class.
So, whole Auth feature should be useful for all app pipeline.
And Yes, a controller cab support multiple auth schemes but based on those schemes which were described for the ASP.NET pipeline. Otherwise it doesn't work.

@feugen24 commented on Jul 22, 2019:

So I don't know if it's possible for Ocelot to forward requests with multiple authorization types unless this feature is supported?

Not auth types, but auth artifacts: URL query string parameters, request headers, and form properties.
As a far as you may know, auth token body can be sent as query param, header value and form data property.
Ocelot routes query params and headers for sure. Unfortunately Ocelot doesn't forward HttpRequest form data. This is a major design flaw that we will soon fix in a few releases.

Could you share an example code with authorization policy approach please which you like to use?

Here's an example configuration that configures JWT and cookie-based authentication, and then defines an authorization policy that accepts either.
// Add authentication using JWT bearer tokens
builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
    .AddJwtBearer(options =>
    {
        options.TokenValidationParameters = new TokenValidationParameters
        {
            ValidateIssuer = true,
            ValidateAudience = true,
            ValidateLifetime = true,
            ValidateIssuerSigningKey = true,
            ValidIssuer = context.Configuration["Jwt:Issuer"],
            ValidAudience = context.Configuration["Jwt:Audience"],
            IssuerSigningKey = new SymmetricSecurityKey(Encoding.UTF8.GetBytes(context.Configuration["Jwt:Key"]))
        };
    });
// Add another using cookies
builder.Services.AddAuthentication(CookieAuthenticationDefaults.AuthenticationScheme)
    .AddCookie(options =>
    {
        options.Cookie.Name = "MyCookie";
        options.Cookie.SameSite = SameSiteMode.Strict;
        options.Cookie.SecurePolicy = CookieSecurePolicy.Always;
        options.Cookie.HttpOnly = true;
        options.Cookie.IsEssential = true;
        options.Cookie.MaxAge = TimeSpan.FromMinutes(30);
        options.LoginPath = "/Login";
        options.LogoutPath = "/Logout";
        options.AccessDeniedPath = "/AccessDenied";
        options.ReturnUrlParameter = "returnUrl";
        options.SlidingExpiration = true;
        options.ExpireTimeSpan = TimeSpan.FromMinutes(30);
    });
// Define an authorization policy named "Either" that accepts either JWT or cookie authentication
builder.Services.AddAuthorization(options =>
{
    var policy = new AuthorizationPolicyBuilder(new []
        {
            JwtBearerDefaults.AuthenticationScheme,
            CookieAuthenticationDefaults.AuthenticationScheme
        })
        .RequireAuthenticatedUser()
        .Build();
    options.AddPolicy("Either", policy);
});

After setting up this policy, I might configure my route like this:
{
    "Routes": [
        {
            "DownstreamPathTemplate": "/api/service1",
            "DownstreamScheme": "https",
            "DownstreamHostAndPorts": [
                {
                    "Host": "localhost",
                    "Port": 5001
                }
            ],
            "UpstreamPathTemplate": "/service1",
            "UpstreamHttpMethod": [ "Get" ],
            "AuthorizationPolicy": "Either"
        }
    ],
    "GlobalConfiguration": {
        "BaseUrl": "https://localhost:5000"
    }
}

That would be equivalent to placing an attribute on my controller action [Authorize(Policy = "Either")]

@michaellperry Thank you for the sample!

After setting up this policy, I might configure my route like this:
{
    "Routes": [
        {
            "AuthorizationPolicy": "Either"
        }
    ],
}

That would be equivalent to placing an attribute on my controller action [Authorize(Policy = "Either")]

Hmm... I'm very sorry, but Ocelot has no the AuthorizationPolicy property in it's specs and docs!
We have open issue #1159 but it is not in development now...
Did you develop custom AuthorizationMiddleware and inject it to Ocelot pipeline?

Hmm... I'm very sorry, but Ocelot has no the AuthorizationPolicy property in it's specs and docs! We have open issue #1159 but it is not in development now... Did you develop custom AuthorizationMiddleware and inject it to Ocelot pipeline?

I must have misunderstood your request for example code. My intent was to show you what code I would like to be able to write using the authorization policy approach. This would be one way to add a feature to support multiple authentication schemes. It would also have the benefit of providing additional flexibility by taking advantage of a feature already built into the ASP.NET authorization pipeline.
Thanks for pointing me to the feature. That would certainly resolve this issue. If I were to work on a PR for that, would you be able to bump the priority?

@michaellperry Michael,
In general, I understand your idea, but it will be new feature request. And sure this new feature is out of the scope of current #1580 and this #740 feature requests.
So, as a team, we are sure that Ocelot should not be responsible for any kind of authentication artifacts creation: tokens, headers, etc.

Ocelot should not sign any tokens
Ocelot should not sign any cookies

So, Ocelot is able to route anonymous HTTP traffic down to the target service and downstream services can sign a cookie.
So, there will be 2 routes always, if downstream is responsible for token/cookie creation, and it has an endpoint to create token/cookie.

Thanks for pointing me to the feature. That would certainly resolve this issue. If I were to work on a PR for that, would you be able to bump the priority?

Yes, we would! We welcome any contributions.
Sorry, what issue would you like to work on?
@ggnaegi  FYI

Yes, we would! We welcome any contributions. Sorry, what issue would you like to work on?

That would be #1159, Add a list of AuthorizationPolicies to ReRoutes. It looks like that stalled after the initial suggestion. And it looks like it would resolve this issue. I'll take a deeper look and send you a proposal.


Small errors in setting descriptions

Hi,
I have a customer who is very upset about small errors in setting descriptions after UI update on the Portal. Description for "Allow traffic to remote virtual network" lacks the information where the traffic is originating for example. "Use current virtual network gateway or route server" description has the old setting name in one sentence - using the word "this" instead of "current". Some descriptions also don't match with the information that you can see in portal next to the configuration setting. Please review the article and add necessary corrections.

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: 4e439c62-035c-47f0-a03d-c70e66f2887b
Version Independent ID: d745a499-f6bf-ca46-f378-c64535df626f
Content: Create, change, or delete an Azure virtual network peering
Content Source: articles/virtual-network/virtual-network-manage-peering.md
Service: virtual-network
GitHub Login: @asudbring
Microsoft Alias: allensu

@HubertKiryluk , thanks for the feedback. We have assigned this to the content owner/author for review.
@asudbring , for your review.

Hello @HubertKiryluk !
Thanks for the feedback!  We just recently updated that article for the changes in the portal and might have missed some of the old names in the descriptions.  The descriptions though haven't changed from what is in that article previously.
For the description of "Allow traffic to remote virtual network" in the "This Virtual Network" section says in the first sentence where the traffic originates from:  "Select Allow traffic to remote virtual network if you want traffic to flow to the peered virtual network."  It's saying here that the traffic is orginating from "This Virtual Network" and you are allowing traffic to flow to the peer in the remote network.
I've put a work item in to elaborate and clarify that first sentence and will go through and look for the old names we might have missed.
Thanks!
#please-close


Cannot send + in the request

Hi,
I just updated to 3.3.5 yesterday and cannot send a '+' in the url.  I see that this is because of #58.
I try to urlEncode the variable first, but with luck. The Url I'm trying to send up is base64 encoded variable so its going to have more than one + in it.
I understand why we need to swap + with a space, but could we set that up with some kind of configuration?

Yeah sure, can you give me an example URL or better yet a failing test to work from?

@roly445 I should have time to look at this over the weekend if you can give me an example URL or failing test to work from - also open to a PR with a proposed fix if you'd like to tackle it yourself?

Any updates @roly445?

Sorry @TrevorPilley I have been away from my computer from the last few weeks.
I'll put something together now

#79