mvn install issue: Attribute not supported in HTML5: summary

Hypothesis
The maven-javadoc-plugin has strict HTML doc linting which throws errors at compile time.
Description
> mvn -version
Apache Maven 3.6.2 (40f52333136460af0dc0d7232c0dc0bcf0d9e117; 2019-08-28T01:06:16+10:00)
Maven home: /usr/local/Cellar/maven/3.6.2/libexec
Java version: 11.0.5, vendor: AdoptOpenJDK, runtime: /Library/Java/JavaVirtualMachines/adoptopenjdk-11.jdk/Contents/Home
Default locale: en_AU, platform encoding: UTF-8
OS name: "mac os x", version: "10.14.4", arch: "x86_64", family: "mac"

> java -version
java version "1.8.0_202-ea"
Java(TM) SE Runtime Environment (build 1.8.0_202-ea-b03)
Java HotSpot(TM) 64-Bit Server VM (build 25.202-b03, mixed mode)

.
.
> mvn install
[ERROR] Failed to execute goal org.apache.maven.plugins:maven-javadoc-plugin:2.9.1:jar (attach-javadocs) on project client: MavenReportException: Error while creating archive:
[ERROR] Exit code: 1 - /Users/laib/dev/java-artefacts/client/src/main/java/au/org/consumerdatastandards/client/api/BankingAccountsAPI.java:51: error: attribute not supported in HTML5: summary
[ERROR]      <table summary="Response Details" border="1">

Available Options
I would suggest that the client/pom.xml be updated to turn off doc linting:
    <properties>
        <additionalparam>-Xdoclint:none</additionalparam>
    </properties>

@benjlai , as you can see from your mvn -version output, your Maven is using Java version: 11.0.5. Make sure that Maven picks up Java 8 and you won't have the error.


clevis: 20 -> 21

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://github.com/latchset/clevis/releases.
meta.description for clevis is: Automated Encryption Framework
meta.homepage for clevis is: https://github.com/latchset/clevis
meta.changelog for clevis is: https://github.com/latchset/clevis/releases/tag/v21
Updates performed

Version update

To inspect upstream changes
Impact
Checks done

built on NixOS

[!CAUTION]
A test defined in passthru.tests did not pass.

found 21 with grep in /nix/store/5fnfvm596yi5cy68qp20jszsacgi7iz7-clevis-21
found 21 in filename of file in /nix/store/5fnfvm596yi5cy68qp20jszsacgi7iz7-clevis-21

Rebuild report (if merged into master) (click to expand)

2 total rebuild path(s)

2 package rebuild(s)

First fifty rebuilds by attrpath

clevis

Instructions to test this update (click to expand)

Either download from Cachix:
nix-store -r /nix/store/5fnfvm596yi5cy68qp20jszsacgi7iz7-clevis-21 \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.
Or, build yourself:
nix-build -A clevis https://github.com/r-ryantm/nixpkgs/archive/452682ae9a6007c471c3c2c57e176ce220e9148d.tar.gz

Or:
nix build github:r-ryantm/nixpkgs/452682ae9a6007c471c3c2c57e176ce220e9148d#clevis

After you've downloaded or built it, look at the files and if there are any, run the binaries:
ls -la /nix/store/5fnfvm596yi5cy68qp20jszsacgi7iz7-clevis-21
ls -la /nix/store/5fnfvm596yi5cy68qp20jszsacgi7iz7-clevis-21/bin

Pre-merge build results
We have automatically built all packages that will get rebuilt due to
this change.
This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.
Result of nixpkgs-review run on x86_64-linux 1

2 packages built:

clevis
clevis.man

Maintainer pings
cc @AndersonTorres for testing.

[!TIP]
As a maintainer, if your package is located under pkgs/by-name/*, you can comment @NixOS/nixpkgs-merge-bot merge to automatically merge this update using the nixpkgs-merge-bot.

Add a :+1: reaction to pull requests you find important.

Closing because broken.


Investigate how to secure connections between databases

Saw this issue and was wondering whether that has any implications for us. Or would we simply wrap a server around the remote PouchDB instance? @nikonikoniko

The most likely case is that we would put any couchDb or pouchDB instance behind an nginx or apache proxy (which would supply the https), Or another kind of server if we have any form of authentication.

Yeah thought so, still wanted to note that it doesnt come with SSL out of the box


Migrate scala.util.parsing.json usage to Contraband

problem
While looking at https://github.com/sbt/sbt/pull/6675 I realized that there's scala.util.parsing.json.
expectation
Migrate that to use Contraband, if not Jawn and ScalaJSON.

what will give me not to publicly shame you for this on Twitter? ;-)

I think the sadness is that Scala still doesn't have the standard way parsing and representing JSON.

😭


create-project does not ask anything

Following the readme, using composer create-project muffin/skeleton CustomName should trigger the plugin's console postInstall script, but it doesn't.
Shouldn't I add something to my main composer.json file? Maybe overwrite the default postInstall hook? Or add another one?

We probably need to change "post-install-cmd" to "post-create-project-cmd".

huh.. this was working on earlier version of composer (1.0.0-alpha10).
I will look into it.

BTW, its the pre-install that handles all the questionnaire (look at first line of GIF in README). But for some unknown reason to me yet, it just stopped working. Needs digging.

The triggering of hooks has changed since composer 1.0. IIRC install hooks are only run if composer.lock exists.

Testing those things is tricky but I was lucky on the first shot: https://github.com/UseMuffin/Skeleton/commit/9ff68fb8ae06aa378499849c639a198ee1c4b553
I released a new tag. @elboletaire, please let me know if it works for you now.

It seems that you have not linked packagist with the github project. The latest available version on packagist is 1.0.0.
BTW, using dev-master as the version seems to work as expected :smiley:

Turns out there was a broken branch stopping packagist. Fixed.


Fix pass fpath not dir

 Thank you for your submission, we really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.2 out of 3 committers have signed the CLA.:white_check_mark: nlsdfnbch:white_check_mark: Dominik1999:x: DevOpsBotDevOpsBot seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.You have signed the CLA already but the status is still pending? Let us recheck it.


⚠ Bofrost.at has degraded performance

In 7a26175, Bofrost.at (https://www.bofrost.at) experienced degraded performance:

HTTP code: 200
Response time: 1313 ms

Resolved: Bofrost.at performance has improved in cc68adc after 7 minutes.


Support multiple export types

Closes #213
This PR implements multiple export types support.
The EunomiaObjectMeta now contains a bool flag named enable_multiple_export_types. If enabled, then each of the map meta info will contain a flag named export, which indicates that the map will be used to export something to userspace.
Map types which can be exported are:

RingBuf
PerfEvent
Hash

They're the same as the previous single-export implementation.
Differences
The Skeleton (with multiple export type support)

If enable_multiple_export_types in EunomiaObjectMeta is set to true, then multiple export types will be supported. Otherwise the behavior is compatible to the old version

The export_types field will be ignored if multiple export types is enabled.
There will be a field export_config under the MapMeta of each map, it can be either of the four variants:

String "no_export". indicating that this map is not used for exporting
String "default". Only applies to sample maps. indicating that this map is used for exporting, and the export struct type will be read from BTF and the map's btf_value_type_if
Object {"btf_type_id": <u32>}. Applies to all maps. Indicate that use this btf type as the map's export type. For ringbuf or perfevent, it will be used to interprete the data that kernel programs send. For sample maps, it will be used to interprete the value of maps
Object {"custom_members" : [{"name": <String>, "offset": <usize>, "btf_type_id": <u32>}]}. Applies to all maps. Indicates that the map will export a struct containing the described members. name is the name of the field. offset is its offset. btf_type_id is the type id of the field.

Exporters
You can specify invidual exporter for each different export maps. See function wait_and_poll_to_handler_with_multiple_exporter for details

Please fix the merge conflict.

Please fix the merge conflict.

Fixed


Runtime: Unconditionally realize superclass metadata in swift_updateClassMetadata()

Previously we were only doing this in assert builds, or if the
new Objective-C runtime metadata update hook mechanism was
available.
However, swift_checkMetadataState() gets called on the superclass
of a class, and it assumes that the metadata entry for the
superclass already exists in the singleton cache.
So even on an older runtime when there's no initialization work
to be done, we have to realize the superclass to populate the
singleton cache so that the check can succeed.
Fixes rdar://problem/45569020.

@DougGregor Note that the test case only fails in a no-asserts build with the patch reverted.

@swift-ci Please smoke test


Android CustomPin do not change IsDraggable status after render

Hi!
I developed a Xamarin Forms app with this plugin. I made a map with one Pin and when I change IsDraggable property after render, the change does not work.
Any idea what's happend?
Regards
Cristian.

That seems to be a bug. Thanks for reporting.

Thank you for your work :)


General: Provide overview over course lifetime in active students chart on course detail

Checklist
General

[ ] I tested all changes and their related features with all corresponding user types on a test server.
[x] Language: I followed the guidelines for inclusive, diversity-sensitive, and appreciative language.
[ ] I chose a title conforming to the naming conventions for pull requests.

Server

[x] I followed the coding and design guidelines.
[x] I added multiple integration tests (Spring) related to the features (with a high test coverage).
[x] I added @PreAuthorize and checked the course groups for all new REST Calls (security).
[x] I implemented the changes with a good performance and prevented too many database calls.
[x] I documented the Java code using JavaDoc style.

Client

[x] I followed the coding and design guidelines.
[x] I added multiple integration tests (Jest) related to the features (with a high test coverage), while following the test guidelines.
[x] I documented the TypeScript code using JSDoc style.
[x] I added multiple screenshots/screencasts of my UI changes.
[x] I translated all newly inserted strings into English and German.

Motivation and Context

The active students' chart on course detail currently provides an immutable scope size of 17 weeks. Given that the course as a start date defined, this PR implements a new scope: the course lifetime overview. This scope contains all weeks starting from the course start date up to the current date.
The current scope (17 weeks) is displayed per default for active courses. The user can switch between the two scopes if desired.
If the course is already finished, the lifetime overview is shown per default. Again, the scope can be switched by the user.
What else has been done:

I modified the date validation mechanism for courses. Currently, it was not possible to delete end dates or start dates once set and saved.
I removed the "CV"-prefix from the x-axis ticks of the chart as they are redundant. Instead, the chart now provides a meaningful x-axis label that is translation sensitive.

Description

I added the corresponding selection functionality via a switch in the UI.
To get the corresponding data, I created a new endpoint that sends this data to the client.
I implemented the client logic this way that the data for both initial scopes are fetched at most once. As the data should not change this often, this prevents too many server and database calls.
Steps for Testing

Prerequisites:

1 Instructor
1 Course with student activity and no start or end date

Log in to Artemis
Navigate to Course Administration
Enter the course detail page
Inspect the chart. It should look as usual.
Edit the course and set a course start date.
Return to the detail page. Now, a switch should be displayed. "Recent activity" should be selected per default.
Check the tooltips for the different parts of the switch. Also, check the german translation. In this context, confirm that the x-axis label instantly translates after changing the language settings.
Change the scope to "Lifetime overview". Inspect the chart and confirm that everything looks as expected
Edit the course again. Set a course end date in the past.
Return to the detail page. Now, "Lifetime overview" should be selected per default. Switch to the limited scope again and confirm that everything works.
Edit the page again and try to delete course start and end date. It should be possible to save this configuration now.

Review Progress

Code Review

[ ] Review 1
[ ] Review 2

Manual Tests

[ ] Test 1
[ ] Test 2

Test Coverage

Class/File
Branch
Line

course-detail-line-chart.component.ts
80%
95%

course-management.service.ts
81.48%
91.66%

CourseService.java
76%
90%

CourseResource.java
73%
93%

Screenshots

Active course with start date:

Lifetime overview scope:

Tested on ts2, works fine. Thanks! One comment: When I select a course end date, the system always adds 5 days. So instead of the course (and the chart) finishing on June 1st, it ends on June 6th.

Thanks for testing! I'm not completely sure if this is the reason, but:
We calculate the data per calendar week. This means if the course end date is set to e.g. 01.06.22, the server includes all days after this date into the calculation. In this case, data until 05.06. would be included in the last tick as well. Of course, this means we still display data after the end of the official end of the course, but as the step size of the graph is presented in calendar weeks, I think this is a reasonable implementation.

tested on ts1 I'm not pretty sure, if the chart for the lifetime overview is displayed correctly. I set the start date of the course to 15.3.21 and the end date is open. The chart for the recent activity looks as the following:
And the chart for the lifetime overview looks like this:
I think there is an error in the lifetime overview chart. For example, for calendar week 17 the diagram shows 100% and 0% at the same time. (If there are some active students in a week, there is always a straight line down from the percentage of active students to 0%. I think the chart should more look like the chart for the recent activity.)

Thanks for reporting the issue, this is actually quite interesting. You are right, the line is not displayed as a function anymore (as there seem to be 2 y-axis values mapped by one x-axis value). Additionally, the last x-axis tick does not represent the last calendar week displayed in the recent activity scope (compare both screenshots, image 1 ends with x-axis tick 22, image 2 with 10).
I locally reproduced the configuration you described and received the same (incorrect) appearance. The interesting part is, that the client still creates the correct and all objects. It seems to me like ngx-charts (the charting framework we use in Artemis), is not able to display more than 52 data points at once.
I already considered increasing the chart width if more than 52 data points have to be displayed as I assumed more space within the chart could fix the problem. But this does not seem to work. A course lifetime of more than 52 calendar weeks (which corresponds to more or less a year) should be quite an edge case. I will further investigate this, but I don't think we should delay this PR because of this edge case. Especially because if the charting framework is really the problematic part, there are hardly any possibilities to fix this by our side. What is your opinion on this?

tested on ts1 I'm not pretty sure, if the chart for the lifetime overview is displayed correctly. I set the start date of the course to 15.3.21 and the end date is open. The chart for the recent activity looks as the following:
And the chart for the lifetime overview looks like this:
I think there is an error in the lifetime overview chart. For example, for calendar week 17 the diagram shows 100% and 0% at the same time. (If there are some active students in a week, there is always a straight line down from the percentage of active students to 0%. I think the chart should more look like the chart for the recent activity.)

Thanks for reporting the issue, this is actually quite interesting. You are right, the line is not displayed as a function anymore (as there seem to be 2 y-axis values mapped by one x-axis value). Additionally, the last x-axis tick does not represent the last calendar week displayed in the recent activity scope (compare both screenshots, image 1 ends with x-axis tick 22, image 2 with 10). I locally reproduced the configuration you described and received the same (incorrect) appearance. The interesting part is, that the client still creates the correct and all objects. It seems to me like ngx-charts (the charting framework we use in Artemis), is not able to display more than 52 data points at once. I already considered increasing the chart width if more than 52 data points have to be displayed as I assumed more space within the chart could fix the problem. But this does not seem to work. A course lifetime of more than 52 calendar weeks (which corresponds to more or less a year) should be quite an edge case. I will further investigate this, but I don't think we should delay this PR because of this edge case. Especially because if the charting framework is really the problematic part, there are hardly any possibilities to fix this by our side. What is your opinion on this?

Yeah, you're right - that would be an edge case, since the lifetime of a course is usually less than one year. So I would confirm that this PR should not be delayed because of this issue.

tested on ts1 again. I think I've found another bug :( If I select 1.2.22 as start date and 8.5.22 as end date the charts are looking as the following:   I tried several start and end date combinations, and the above behavior appears always when the end date is a sunday.

Thanks for taking the time and testing exhaustively! Especially when it comes to dates, the implementation can become very error-prone as various edge cases can occur. 😅 I investigated the issue you reported and implemented a fix for this in b7a2b46. In context of the investigation, I also noticed an inconsistency in the presented data. The data containing the recent weeks changed after shifting the recent activity scope back in time once and reshifting it to the recent displayable weeks.
Could you please recheck that the issue you reported is fixed now? :)


[CRITICAL] Share package administration for long term Pothos stability

Thanks @hayes for this amazing library ! Today the reason we are not implementing it is because your are the only administrator of this library.

Problem: if you stop administration for any reason, we are all stuck. Do you plan to share / delegate part of this package administration / maintance ?
Thanks a lot for your help !

There has been a lack of interest in external contributions.  I'm not going to have off maintenance to a random person who hasn't been actively involved in contributing, so until there is more substantial external contribution, there won't be additional maintainers.
Unfortunately this isn't something that's easy to fix.  My perception is that many libraries will stop being maintained when their lead maintainer leaves the project.  Projects built/maintained by companies with many contributors are even more prone to this.
Pothos is MIT licensed, and can easily be forked if it ends up abandoned.  I have no plans to stop maintaining it, and would be happy to accept more outside contribution, but it's not something.that can be created artificially.
Pothos is also very stable at this point, and doesn't require much active maintenance to keep it working.  There are always more plugins to build, but the core library has been working very well for a long time with very few new features needed.

Pothos also does not have any runtime dependencies, so urgent releases to pick up security fixes from dependencies are not needed.
I am open to suggestions on how to improve the current situation, but realistically if you are not comfortable using a library with a single maintainer Pothos probably won't be a viable option in the short term. Unfortunately this is also true about most of the alternatives (most of which have less active maintenance/development).
Using a schema-first option with graphql-code-generator is the only option I know of with multiple funded maintainers (through the guild)

Thanks a lot hayes ! Maybe you can add a maintance mention inside your readme (open for more maintainers)
That will bring more confidence for people to implement it ;)

Just adding my 2 cents here :

Pothos is extremely well built and is by a significant margin the best way to build graphql servers in Typescript. It is criminally under-rated and under-used.
A significant amount of extremely popular library are maintained by one person. This is an unfortunate reality of FOSS.

When choosing a libray, I'd consider other things besides the number of active maintainers :

Number of Runtime dependencies (Pothos has none)
Extensibility (Plugin system)
Documentation (Great docs)
Examples (Dozens of examples)
Tests (Everything is well tested including plugins)
Stability (Easy upgrade path between major versions)

@Aarbel if you end up not choosing Pothos, I would be very curious to know what you endup choosing.


Remove pinned objects in Parse iOS SDK

Hi,
I was running into long pin time issue hence i decided to clear LDS by unpinning all pinned objects.
But it's not working, it does not clear data.
+(void)removeCachedforOrderandTransactionswithSkip:(int)skip withQuery:(PFQuery*)query withkey:(NSString *)key withBlock:(onSuccess)block{
[query setSkip:skip];
[query setLimit:MAXROWS];
[query fromLocalDatastore];
[query findObjectsInBackgroundWithBlock:^(NSArray *objects, NSError *error) {
if (!error) {
for (PFObject *obj in objects) {
[PFObject unpinAllObjectsInBackgroundWithName:[obj objectForKey:key]];
}
if(objects.count>=MAXROWS){
[self removeCachedforOrderandTransactionswithSkip:MAXROWS withQuery:query withkey:key withBlock:block];
}
else
block(nil,nil);
}
}];
}
Thanks
Aamir

Hey @PSIPhone.
The code above won't clear anything in Local Datastore (unless you have collisions between pin names and fields in your objects).
According to the documentation - unpinAllObjectsInBackgroundWithName: will asynchronously remove all objects with the specified pin name from Local Datastore.
pin name is the important piece here, where you can pin objects to multiple pins in Local Datastore, thus creating different relationships/references to the same object.
In order to remove objects from Local Datastore (unpin them), I recommend looking at the way you pin them in the first place.

If it's through pin or pinInBackground (basically anything that doens't have name parameter) - then you are looking for unpinAllObjectsInBackground which unpins the objects with the default pin name.
If you are using different pin names - the objects are going to be completely removed from Local Datastore if there are no pins referencing them.

I hope all of this makes sense and helps. Let me know if you have questions.

Okay i just changed it works fine, now i Just [object pinInBackground] rather pinWithName:
Just one favour which is the optimum method pinningwithlabel or pinInBackground. What you just for speed.

I would recommend using pinInBackgroundWithName and split data into multiple pins, depending on where you want to show the data, say split based on ViewController where you present it, or split based on how frequently you need the data.
There is a good chance that you don't need more than couple hundred (or even less) objects at any given time. This also confirms to lazy-loading pattern (we are still building for devices with limited amount of CPU/RAM), which means that you don't load more objects (from Local Datastore or over the network) than you need + a little bit more for caching.

How can i split pinning process can you please assist. When we go for saving data in persistent storage then we use it as follows.
        PFObject* object = [PFObject objectWithClassName:@"customer"];
        [object setObject:[NSDate date] forKey:@"date"];
        [object setObject:name forKey:@"name"];
        [object setObject:address forKey:@"address"];
        [object setObject:phone forKey:@"phone"];
        [object setObject:note forKey:@"note"];
        [object saveEventually];
        [object pinInBackgroundWithName:customerID];


i18n implementation?

https://github.com/wobsoriano/vue-clerk/issues/25#issuecomment-1950410106

import { clerkPlugin } from 'vue-clerk/plugin';
import { heIL } from '@clerk/localizations';
export default defineNuxtPlugin(({ vueApp }) => {
  vueApp.use(clerkPlugin, {
    publishableKey: useRuntimeConfig().public.clerkPublishableKey,
    localization: heIL,
  });
});

idk what im missing but im sure its not working that way, any thoughts ?

What's not working @aviorp? Can you update to latest version and try again?
I just tried it in the playground and it works as expected:

well it works ! forgot to refresh my lock file. thanks man !

btw how can i toggle the mode by user choice ?

@aviorp It's not documented but here's how you would do it:
import { frFR } from '@clerk/localizations'

const clerk = useClerk()

clerk.__unstable__updateProps({ options: { ...currentOptions, locale: frFR } })


Increased memory: 0.1 -> 0.25

Both signalfx and influx show that drone is using 100% of its available memory.
Alert: https://app.signalfx.com/#/alerts/CE_IsqUAcAE?sources[]=ServiceName:production-drone-Service-ITSJE121TONY&eventId=CrIqOETAgAA
Graph: https://metrics.int.clever.com/dashboard/script/scripted_services.js?env=production&app=drone

lgtm


sqlalchemy: doesn't like get_checked_permissions returning None

This seems to happen whenever oso cleans up.
  File "/usr/local/bin/flask", line 8, in <module>
    sys.exit(main())
  File "/usr/local/lib/python3.8/site-packages/flask/cli.py", line 967, in main
    cli.main(args=sys.argv[1:], prog_name="python -m flask" if as_module else None)
  File "/usr/local/lib/python3.8/site-packages/flask/cli.py", line 586, in main
    return super(FlaskGroup, self).main(*args, **kwargs)
  File "/usr/local/lib/python3.8/site-packages/click/core.py", line 782, in main
    rv = self.invoke(ctx)
  File "/usr/local/lib/python3.8/site-packages/click/core.py", line 1259, in invoke
    return _process_result(sub_ctx.command.invoke(sub_ctx))
  File "/usr/local/lib/python3.8/site-packages/click/core.py", line 1066, in invoke
    return ctx.invoke(self.callback, **ctx.params)
  File "/usr/local/lib/python3.8/site-packages/click/core.py", line 610, in invoke
    return callback(*args, **kwargs)
  File "/usr/local/lib/python3.8/site-packages/click/decorators.py", line 21, in new_func
    return f(get_current_context(), *args, **kwargs)
  File "/usr/local/lib/python3.8/site-packages/flask/cli.py", line 426, in decorator
    return __ctx.invoke(f, *args, **kwargs)
  File "/usr/local/lib/python3.8/site-packages/flask/ctx.py", line 249, in __exit__
    self.pop(exc_value)
  File "/usr/local/lib/python3.8/site-packages/flask/ctx.py", line 238, in pop
    self.app.do_teardown_appcontext(exc)
  File "/usr/local/lib/python3.8/site-packages/flask/app.py", line 2321, in do_teardown_appcontext
    func(exc)
  File "/usr/local/lib/python3.8/site-packages/flask_sqlalchemy/__init__.py", line 899, in shutdown_session
    self.session.remove()
  File "/usr/local/lib/python3.8/site-packages/sqlalchemy/orm/scoping.py", line 180, in remove
    if self.registry.has():
  File "/usr/local/lib/python3.8/site-packages/sqlalchemy/util/_collections.py", line 1015, in has
    return self.scopefunc() in self.registry
  File "/usr/local/lib/python3.8/site-packages/sqlalchemy_oso/session.py", line 179, in _scopefunc
    checked_permissions = frozenset(get_checked_permissions().items())
AttributeError: 'NoneType' object has no attribute 'items'

From the docs:

get_checked_permissions – Callable that returns an optional map of permissions (resource-action pairs) to authorize for the session. If the callable returns None, no authorization will be applied to the session.

also
Traceback (most recent call last):
  File "/usr/local/lib/python3.8/site-packages/flask/app.py", line 2464, in __call__
    return self.wsgi_app(environ, start_response)
  File "/usr/local/lib/python3.8/site-packages/flask/app.py", line 2458, in wsgi_app
    ctx.auto_pop(error)
  File "/usr/local/lib/python3.8/site-packages/flask/ctx.py", line 452, in auto_pop
    self.pop(exc)
  File "/usr/local/lib/python3.8/site-packages/flask/ctx.py", line 438, in pop
    app_ctx.pop(exc)
  File "/usr/local/lib/python3.8/site-packages/flask/ctx.py", line 238, in pop
    self.app.do_teardown_appcontext(exc)
  File "/usr/local/lib/python3.8/site-packages/flask/app.py", line 2321, in do_teardown_appcontext
    func(exc)
  File "/usr/local/lib/python3.8/site-packages/flask_sqlalchemy/__init__.py", line 899, in shutdown_session
    self.session.remove()
  File "/usr/local/lib/python3.8/site-packages/sqlalchemy/orm/scoping.py", line 180, in remove
    if self.registry.has():
  File "/usr/local/lib/python3.8/site-packages/sqlalchemy/util/_collections.py", line 1015, in has
    return self.scopefunc() in self.registry
  File "/usr/local/lib/python3.8/site-packages/sqlalchemy_oso/session.py", line 179, in _scopefunc
    checked_permissions = frozenset(get_checked_permissions().items())
AttributeError: 'NoneType' object has no attribute 'items'


Suggestion: Change isdragging opacity to animation

This is not really an issue but a suggestion.
Currently the opacity is changed on dragging of tabs to .95 on the tab dragged and .5 on the siblings.
This causes the tabs to "blink" when clicking on them to change tab.
To avoid this blinking effect, you can set the opacity as an animation instead with ie a duration of 0:0:.2 and begintime to 0:0:0.1.
This removes the blinkeffect and gives it a subtle opacityanimation.
Here's the code I use:
<Style.Resources>

</Style.Resources>
<Style.Triggers>

<Trigger.EnterActions>

</Trigger.EnterActions>
<Trigger.ExitActions>

</Trigger.ExitActions>

<Trigger.EnterActions>

</Trigger.EnterActions>
<Trigger.ExitActions>

</Trigger.ExitActions>

Stupid code inside github comments :(
I am unable to see your code that you use.  Could you put it in http://pastebin.com/ and then provide a link by chance?

Please, provide code. This blinking is really annoying.

Ok, I managed this using next code (please notice that I used Dragablz with MaterialDesignInXamlToolkit)
<dragablz:TabablzControl>
    <dragablz:TabablzControl.ItemContainerStyle>
        <Style TargetType="{x:Type dragablz:DragablzItem}"
                   BasedOn="{StaticResource MaterialDesignDragableTabItemVerticalStyle}">
            <Style.Triggers>
                <Trigger Property="IsDragging" Value="True">
                    <Setter Property="Opacity" Value=".87" />
                </Trigger>
                <Trigger Property="IsSiblingDragging" Value="True">
                    <Setter Property="Opacity" Value=".95" />
                </Trigger>
            </Style.Triggers>
        </Style>
    </dragablz:TabablzControl.ItemContainerStyle>
...
</dragablz:TabablzControl>

Sorty avout the code, I never got any indication that this thread was responded to.
I updated the post with the code made visible.
Hope it works this time :)


Why is strict-ssl false by default?

The README says that --strict-ssl is by default off. Why?
This seems like a security issue.
I noticed some other issues relating to SSL (#109 #128) that suggest it is actually on by default. However reading the code, it does seem like it is set to false by default. https://github.com/felixrieseberg/windows-build-tools/blob/master/src/download.ts#L50
Thanks

Quickly looking at the code it didn't either check the checksums for the downloaded files. Or am I missing something?


T1499:TA0040 Endpoint DoS Query + Detection

Background
Changes

PR includes a Scheduled Query + Scheduled Rule that are designed to work together with DynamoDB caching to track event counts over time and measure them against a given anomaly threshold value
The hope of this Rule is to handle MITRE T1499 Endpoint Denial of Service - GAP - [TA0040:Impact]

Testing

Unit Tests leverage mocks to override DynamoDB

I like the idea of this detection. Using just the mean over a rolling 30-minute may be too FP prone.
I might suggest a slightly different approach - With each run we save the count, hour of day (1-24), and day of week (1-7). We keep a ledger of 30 day period (5 minute blocks == 8640 ledger size). Then we can compare the mean within blocks of the same hour and day to account for differences in volume throughout the day/week.

An issue with the historical max is that it is an all-time max. If there were a massive dos attack that recorded a high max, subsequent attacks with a lower max count would not be detected. Local maximums would be better but I would still be concerned that a rolling mean would be FP prone due to natural periods of high/low activity and legitimate bursts. We would need a ledger of weeks at minimum to have better accuracy and not rely on purely mean but a deviation.

@calkim-panther  Your point about subsequent alerts did occur to me on the historical max values, and so the maximum counts are committed to alert_context() and then purged from DynamoDB after the alert is generated. The rolling ledger never gets purged (and can be expanded by the user if they want to using the global constant).
The new alert condition is:

num_logs > 10x the average (or whatever threshold is set in the global constant)
AND
a new maximum value occurs (max values purged after each new alert)

As a simple example, let's say:
count_ledger['rolling_ledger'] = [10, 20, 40, 20, 100, 20]
So the count_ledger average = 35
And:
count_ledger['highest_counts'] = {
    'XX-XX-XXXX timestamp': 10,
    'XX-XX-XXXX timestamp': 20,
    'XX-XX-XXXX timestamp': 40,
    'XX-XX-XXXX timestamp': 100
}

Then: num_logs = 1000
So 1000 is > 10x the average AND it is a new maximum value. This condition would raise an alert. After the alert,
count_ledger = {
'rolling_ledger': [10, 20, 40, 20, 100, 20, 1000],
'highest_counts': {}
}
The next run, num_logs = 1200
At that point, count_ledger['rolling_ledger'] = [10, 20, 40, 20, 100, 20, 1000]
The new count_ledger average = 172.86
1200/172 < 10, so no alert. But rolling_ledger will continue to roll, the average will change, and we will account for any new maximums.
Of course no DoS detection can be absolutely reliable. But I do not think this detection will result in as many FPs as it might seem on the surface. I would love to test this using some real data, since I believe the threshold values and rolling_ledger size can be tweaked for better results by default.

@calkim-panther I've disabled the detection. Should I also disable the scheduled query?


problems getting table data when there are hyphens in the data

table = SmartGrid()

then if there are hyphens in the data
table.get()

hangs.
edit: Have now also encountered this with drop down widgets. Workaround has still remained to replace the hyphens with some other character.

going to switch to using msgpack to resolve this instead of json


Remove deprecated token param from 307 response URL

Removing deprecated token param from /api/login/authorize response. We are currently using token_json only. It will help us to reduce the length of the URL
See https://github.com/almighty/almighty-core/issues/1177

Codecov Report

Merging #1178 into master will decrease coverage by <.01%.
The diff coverage is n/a.

@@            Coverage Diff            @@
##           master   #1178      +/-   ##
=========================================
- Coverage      60%     60%   -0.01%
=========================================
  Files         114     114
  Lines       10157   10156       -1
=========================================
- Hits         6095    6094       -1
  Misses       3422    3422
  Partials      640     640

Impacted Files
Coverage Δ

login/service.go
33.21% <ø> (-0.12%)
:arrow_down:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 3597d9c...e7280d2. Read the comment docs.

manual merge on request


Amplify Interaction issue : Input & Output Context options are not available in lex bot.

Before opening, please confirm:

[X] I have searched for duplicate or closed issues.
[X] I have read the guide for submitting bug reports.
[X] I have done my best to include a minimal, self-contained set of instructions for consistently reproducing the issue.

App Id
No response
Region
No response
Environment name
No response
Amplify CLI Version
4.52.0
If applicable, what version of Node.js are you using?
No response
What operating system are you using?
No response
Browser type?
No response
Describe the bug
When I create the bot from Amplify, I don't see the Input & Output context options available in the lex Bot. But If I create the bot directly in Lex, I can see the Context option..
Expected behavior
It should have the Context option.
Reproduction steps
Create the Interactions from Aplify.
Additional information
No response

Hey @rajubhusani :wave: thanks for raising this! Unfortunately this is not currently supported by the CLI, however I will mark it as a feature request 🙂


Need opinions on GUI

Description
SO, I have made this recently: https://github.com/nnyyxxxx/hyprgui it is a GUI for configuring Hyprland built entirely in Rust 🦀 I have made an issue before regarding this BUT that was before I decided to remake it.
The point of this issue to gather opinions on it from most notably @vaxerski and other people apart of HyprWM, as I have spent a great deal of time on it. I have linked a Preview below of what it currently looks like.
It's populated with most of the values from the documentation, includes tooltips explaining each feature (Uses descriptions provided in documentation), etc.
The GUI also includes it's own custom-made parser: https://github.com/nnyyxxxx/hyprparser
I know there is another GUI that exists (Hyprset, was informed by a member of HyprWM) but it seems outdated and incomplete.
The GUI uses gtk, btw.

The point of this issue to gather opinions on it from most notably @vaxerski and other people apart of HyprWM, as I have spent a great deal of time on it. I have linked a Preview below of what it currently looks like.

This should be done in a discussion, or on discord/matrix.
I don't know what you want me to say tbh.
We have some utils planned for the future (as you may have noticed recently the ecosystem is expanding) but they definitely won't be gtk.
Feel free to develop utilities for hyprland, everyone is welcome to make stuff for hl.

This should be done in a discussion, or on discord/matrix.

Thanks yeah ill do that


graphman: Check if its safe to rewind by comparing block to earliest block

In deployment::revert_block_ptr we could add a where block_ptr_to.num >= earliest_block + reorg_threshold clause to the update statement and return an error if the update returns 0 (separate, but if we get anything but 1 from that update statement, that should be an error)

Doing so broke the unit tests, since at many places we use the static var ENV_VAR to get the reorg threshold, This cannot be easily mocked without refactoring the code to take these env_vars as a field, Looking into it.


Add possibility to specify the region of the S3 bucket

This is a bit complicated to implement because it requires changing the creation of the S3 client based on the incoming parameters.


Analytics callback not working

I've wrote the following code
PdfViewer.enableAnalytics(Duration(days: 8));
    PdfViewer.analyticsCallback = (s, i, b) {
      print('analytics string: $s');
      print('analytics int: $i');
      print('analytics bool: $b');
    };

but I didn't see any logs from the callback
the output of flutter analyze:

Analyzing example...
No issues found! (ran in 45.6s)

the output of flutter doctor -v:

[✓] Flutter (Channel stable, v1.7.8+hotfix.4, on Linux, locale en_US.UTF-8)
• Flutter version 1.7.8+hotfix.4 at /opt/flutter
• Framework revision 20e59316b8 (3 weeks ago), 2019-07-18 20:04:33 -0700
• Engine revision fee001c93f
• Dart version 2.4.0

[✓] Android toolchain - develop for Android devices (Android SDK version 28.0.3)
• Android SDK at /home/ammar/Android/Sdk
• Android NDK at /home/ammar/Android/Sdk/ndk-bundle
• Platform android-28, build-tools 28.0.3
• Java binary at: /home/ammar/Portable/android-studio/jre/bin/java
• Java version OpenJDK Runtime Environment (build 1.8.0_152-release-1343-b16-5323222)
• All Android licenses accepted.

[!] Android Studio (version 3.4)
• Android Studio at /home/ammar/Portable/android-studio
✗ Flutter plugin not installed; this adds Flutter specific functionality.
✗ Dart plugin not installed; this adds Dart specific functionality.
• Java version OpenJDK Runtime Environment (build 1.8.0_152-release-1343-b16-5323222)

[!] IntelliJ IDEA Community Edition (version 2019.1)
• IntelliJ at /home/ammar/Portable/idea-IC-183.5429.30
✗ Flutter plugin not installed; this adds Flutter specific functionality.
✗ Dart plugin not installed; this adds Dart specific functionality.
• For information about installing plugins, see
https://flutter.dev/intellij-setup/#installing-the-plugins

[✓] VS Code (version 1.35.0)
• VS Code at /usr/share/code
• Flutter extension version 3.2.0

[✓] Connected device (1 available)
• Moto G 5 Plus • ZY2247QBNC • android-arm • Android 8.1.0 (API 27)

! Doctor found issues in 2 categories.

Hey, can you try decreasing the duration? Something like a second or so?

@devxpy made it 8 seconds but still, nothing is printed.

Okay, let me inspect.

Should be fixed in v0.6.1. Thanks to https://github.com/pycampers/flutter-plugin-scaffold/pull/1

Sidenote: You don't need to supply a duration if you're not using PdfViewer.analyticsEntries. I hope the docs make this clear.

@devxpy Thanks


Update scalafmt-core to 3.5.6

Updates org.scalameta:scalafmt-core from 3.1.2 to 3.5.6.
GitHub Release Notes - Version Diff
I'll automatically update this PR to resolve conflicts as long as you don't change it yourself.
If you'd like to skip this version, you can just close this PR. If you have any feedback, just mention me in the comments below.
Configure Scala Steward for your repository with a .scala-steward.conf file.
Have a fantastic day writing Scala!

Files still referring to the old version number
The following files still refer to the old version number (3.1.2).
You might want to review and update them manually.
doc/website/package-lock.json
modules/tests/shared/src/test/resources/resolutions/org.apache.spark/spark-core_2.10/2.1.1
package.json

Adjust future updates
Add this to your .scala-steward.conf file to ignore future updates of this dependency:
updates.ignore = [ { groupId = "org.scalameta", artifactId = "scalafmt-core" } ]

Or, add this to slow down future updates of this dependency:
dependencyOverrides = [{
  pullRequests = { frequency = "@monthly" },
  dependency = { groupId = "org.scalameta", artifactId = "scalafmt-core" }
}]

labels: library-update, early-semver-minor, semver-spec-minor, old-version-remains, commit-count:n:2

Superseded by #2466.


🐛 uplift x/net to 0.4.0

x/net has vulnerabilities GO-2022-1144, GO-2022-0969. Uplift x/net to 0.4.0.
edit: x/text 0.4.0 is not vulnerable, edited description. It will still be uplifted to 0.5.0 due x/net requirements.

/test-ubuntu-integration-main

/hold

/test-ubuntu-integration-main

/hold cancel

/test-ubuntu-integration-main


Improved testability of Terminus base class

Also moved Terminus#isTest() to Utils#isTest() 'cause it really ought to always have been there and removed the coverage log from the repo.

:+1:


Graph plotting

Can we make plots of graphs in Makie?

Should happen when we integrate the graph recipes!

That'd be great! I am working on some distributed system simulations, and Makie's animation+interactions are perfect for that. I just use scatter, but having arrows and a layout engine (and maybe custom markers, i.e. each marker a tiny subplot) would be awesome.

when we integrate the graph recipes

What does that entail? Is there developer documentation somewhere that would help?

click + drag on nodes would be amazing :+1:

Any update on this?

With https://github.com/JuliaGraphs/NetworkLayout.jl , scatter + text + linesegments, it shouldn't be hard to quickly wip something up.
It would be nice to have some basic functionalities like this live in a package.
I know that various people have written some adhoc code for this, maybe we can start colecting them in a package.
I  saw on discourse, that @elkaps created some code, maybe we can start from there?
There have been at least a handful of other people, but I don't remember their github handle :(

I think what Makie could provide is plotting a graph with labels, fancy edges where the location of the vertices is provided by the callee (using e.g. one of the network layouts.)

@SimonDanisch My solution is not perfect but it does the job for me. Here is the code :)
using NetworkLayout
using LightGraphs
using Makie
using LinearAlgebra

"""
    closest_point(p, positions)
Returns the index of the point in `positions` closest to `p`
"""
function closest_point(p, positions)
	norms = [norm(p - v) for v in positions]
	return findmin(norms)
end

function make_axis(f::Figure)
    ax = f[1, 1] = Axis(
        f,
        xticklabelsvisible=false,
        yticklabelsvisible=false,
        xticksvisible=false,
        yticksvisible=false,
        xgridvisible=false,
        ygridvisible=false,
        strokevisible=false,
        visible=false,
        xrectzoom=false,
        yrectzoom=false,
        leftspinevisible=false,
        rightspinevisible=false,
        topspinevisible=false,
        bottomspinevisible=false,
    )
end

function plot_graph(g::Graph)

    f = Figure(resolution=(800, 800))

    ax = make_axis(f)

    # create initial vertex positions
    A = adjacency_matrix(g)
    layout = [Point2(p[1], p[2]) for p in NetworkLayout.Spring.layout(A)]
    layout_node = Node(layout)

    # create inital edge lines
    edge_lines = [[layout[e.src], layout[e.dst]] for e in edges(g)]
    line_nodes = Node.(edge_lines)

    # initialize for drag & drop
	mouse_left_pressed = false
	selected_vertex = 1

	# handle mouse position
	on(ax.scene.events.mouseposition) do mp
		pos = to_world(ax.scene, Point(mp) - [30, 30]) # offset fixes https://github.com/JuliaPlots/Makie.jl/issues/457

		if ispressed(ax.scene, Mouse.left)

            # if Mouse.left was not pressed before, select vertex
			if !mouse_left_pressed

				d, selected_vertex = closest_point(pos, layout)

				if d > 0.2
					return
				end

				mouse_left_pressed = true
			end

            # update the position of the selected vertex
            layout[selected_vertex] = pos

			layout_node[] = layout

            for (line, e) in zip(line_nodes, edges(g))
				line[] = [layout[e.src], layout[e.dst]]
			end

        else
			mouse_left_pressed = false
        end

    end

    # plot edges
    for line_node in line_nodes
        lines!(ax, line_node)
    end

    # plot vertices
    scatter!(ax, layout_node; )

    f
end

I put some initial version into: https://github.com/JuliaPlots/GraphMakie.jl

@SimonDanisch How do I use GraphMakie though....

@VarLad You can do
using Makie, GraphMakie, LightGraphs
g = complete_graph(5)
plot_graph(g)

I'm not sure how to do the labels though. scatter! for strings seams to support one letter only and re-scales it.
With text! the size in pixels is not fixed.

With text! the size in pixels is not fixed.

If I understand you correctly, then you are probably on an older version and should try the recently added text function which leaves text constantly sized in pixels as long as space = :screen is set (which is the default).
Something like text!(text_array, position = positions_array) should do the trick

@jkrumbiegel Sorry for not being more precise. What I meant is that if you zoom in or out of the figure, the size of the scatter points in pixels will be constant while the size of the text changes.

But that's what I meant, with space = :screen in recent versions which is the default anyway, text should have constant size no matter the zoom level

Thank you @jkrumbiegel I had Makie installed the old way so it was keeping AbstractPlotting from updating. Then text! should be perfect for adding labels.

I forgot to push an update to add labels, which I have locally...
It's just not as usable yet without background rectangles, and a easy way to generate an offset in screen space


[Feature] Add Apache doris 2.0+ Database connector

Added support of Apache Doris database, tested chatdata chatdb functions on Doris 2.0, did not test 1.2.x, probably works :P.

and thanks a lot for PR #872, which provided tremendous assistance to this commit. I just modified a little bit, for the driver and some info retreival methods.
and I fixed the web UI of the doris db setup locally, but couldn't do as much as PR #889 , could reviewers help to fix the web ui as well?

Cool~ @Aries-ckt

Great, Doris is a very practical analytic data warehouse, thank you so much for your contribution. Have you joined our WeChat group?

Great, Doris is a very practical analytic data warehouse, thank you so much for your contribution. Have you joined our WeChat group? add Doris web icon please.@Hzh_97

yeap, I'm in the group 5 (which has very few conversiontion there...).
I forgot mention that installing pip package pydoris may have some problmen on Mac, I don't know which doc to put this.
https://stackoverflow.com/questions/76876823/cannot-install-mysqlclient-on-macos
# Assume you are activating Python 3 venv
$ brew install mysql-client pkg-config
$ export PKG_CONFIG_PATH="/opt/homebrew/opt/mysql-client/lib/pkgconfig"
$ pip install mysqlclient
$ pip install pydoirs


Get metadata in JSON

Ala fanficfare --meta-only --json-meta "$url" . It’d be good if the keys (JSON structure) are compatible with fanficfare, too.

Unfortunately, the fichub-cli wont be able to provide a fanficfare compatible metadata since the CLI was simply made to download from the Fichub API and  the API is not currently exposing all the metadata which will be needed to make a json compatible with fanficfare's and it might not be added for a long time.
If I may ask, why not use fanficfare for metadata scraping? Its quite fast for that purpose.

@arzkar I’m fine with a best-efforts basis, no need for full compatibility.
fanficfare has problems with ff.net’s Cloudflare policies.

Currently very little metadata is provided by the fichub API and I will need to clean the meta to make it consumable.
If you only want FanfictionNet's metadata, you can use one of my other projects called Fanfiction Finder API which can get metadata from both FFNet and AO3. It uses cloudscraper like fanficfare does but it seems to be able to get the metadata without any issue. There's a delay of 2s between each request which prevents it from getting rate-limited. Let me know if you find any bugs with that.

I have added a new --meta-json flag which can be used to get all the metadata that Fichub API currently provides. It will in v3.6 which will be released in a few minutes.


Simple fix and copy details button

Fixed an issue where # would not display in front of card number if loading from URL (dbc70dd)
Copy details button copies "#, " into your clipboard. Useful if you do commits based on Trello cards and you want to have your card number in your commit. Displays under "Copy" under more actions section. Unsure what the card icon should be, looks odd being the same as copy... (62a7546)
And other commit was just to update version number.

Updated to list Safari port of the extension.

Hey @ytn3rd, sorry it took so long to take a look at this.
I think it is good to merge in except I would prefer that the copy details thing would default to false, as a decent number of people want this and I don't want it to change their flow or add buttons that they don't want and realize it's part of this chrome extension.. Thoughts on that?
Once we solve that, I am good to merge.

@dewyze Good point, fixed :)

Will merge in tomorrow!


What do you not like about DefinitelyTyped as a user and contributor?

What do you not like about DefinitelyTyped as a user and contributor?
Hey folks, we, the TypeScript team at Microsoft, are interested in understanding pain points for people using and contributing to DefinitelyTyped.
About this time last year, we drastically changed the workflow for contributors to DefinitelyTyped (one of the most active repos on GitHub) to allow for self-serving Pull Requests. Since then, we've been refining that process and improving the automation to cover more cases and consolidated all of the DefinitelyTyped tooling into one monorepo and re-vamped the search. Now that these systems have matured, we're thinking about what the right things to look at next, and would love input from the folks who are writing definitions daily.
I've explicitly given an opening for users of @types to provide feedback here too, given that it's quite likely any requests as a user of DT will affect contributors too.
We've used a format for this before which worked well in https://github.com/microsoft/TypeScript/issues/31983 which is for people to reply to this issue with a single idea per comment.
We've got a meeting booked on the 20th to go through feedback and see what's we can do 👍🏻
Please do: reply with 1 comment per issue. Add tags if you'd like to help with search for others and ease-of classification. If you have a link to an existing issue, that would be super useful too.
If you see that someone has already pitched your idea, please use the emoji reactions to +1 it, we will be deleting duplicates and off-topic replies. If you want to add more to a topic, see if it has an attached issue and leave more feedback there. If there isn't, come chat in the DefinitelyTyped chatroom in the TypeScript Community Discord.
Please do not use this thread for discussions about the TypeScript language itself, and as with all issues please conform to the code of conduct. We all want to see improvements.
Template - feel free to copy & paste
### [title]

[message]

Tags: `[tags]`

For example
One of mine:

There is no REPL for Type Definitions
I would like to use the Playground to work with .d.ts files to be able to share problems with others
Tags: playground

Encourage contributors to send typedefs to main repo first
While plenty of library authors want little to do with TypeScript, even more simply don't know how to ship or maintain good TypeScript bindings. For the latter category, it would be much more useful if someone contributes a TS typedef to the core repo instead of to DefinitelyTyped. In a way, DefinitelyTyped is a bit of a cop-out, a plan B. A necessary plan B, but a plan B nevertheless. That seems a bit forgotten.
For example, I feel like it's weird that the How can I contribute guide appears to actively discourage communicating with the author of the open source package at hand. Or, well, not actively discourage, but it's simply not even presented as an option. Isn't that weird? Wouldn't the original repo be the best place for the typedefs to live?
I think it should be a goal of DefinitelyTyped to one day not be necessary anymore. Sure, it'll never happen, because TS will never have 100% penetration, but it should be the direction. But right now, it's more like DefinitelyTyped is poised to be an ever-expanding mountain of half-maintained typedefs that continuously run the risk of lagging behind their JS packages. It's better than no typedefs, but way worse than what it should be.
Therefore, I think the TS/DT teams could do more to help library authors and/or contributors ship types directly. Eg:

Write HOWTOs for various common scenarios (generate from JSDoc, hand-write, generate from actual typescript sources, etc etc)
Add/link these to the contributing guide.
Have the contributing guide actively encourage communicating with the library author instead of going behind their backs.
Come up with a simple, noob-proof mechanism that lets library authors pull an existing DT typedef into their main repo (and have the @types/somelib package somehow stay compatible - maybe an export ... from "somelib" oneliner? or just unpublish from npm? I'm not even sure, and I doubt a non-TS-expert library author will find this easier)

Tags: meta

Notifications on minor/major releases
It would be great if the DT bot would watch the npm index for minor/major releases of packages that have typings on DT and automatically notify the maintainers on updates.
I don't really have a good idea on how to notify the maintainers, an obvious choice would be to create issue tickets but that would pollute the issue backlog even more. Maybe such automatically created tickets should be then closed automatically after some time if no one contributes and they should definitely be closed automatically after someone updates the typings in question.
There should also be possibilities for typings packages maintainers to be able to close such tickets without making pull requests in cases the library updates don't introduce API changes (which happens quite often, major releases often are made when compatibility with older Node versions is broken, for example).
Tags: update, version, automation, repository

npm run test-all could be highlighted and better documented
test-all checks the packages I changed as well as the packages that depend on them. That's great! It's exactly what I want. I get confidence that my changes are correct without having to wait for the tools to check thousands of unrelated packages. But it's only mentioned in passing in the README, it's not part of the steps for preparing a PR, and I haven't found any documentation that explains that what you have to do to make it work correctly. (IIRC: have your fork's master branch and the current branch up to date with the main repo, and check everything in.) I bet more PRs would land cleanly the first time if this were better documented and recommended as part of the process for preparing a PR.
Tags: documentation

Composing prettier configuration
Completely overlooked this huuuge (3xu) PITA: the DT disallows composing .prettierrc, which forces organizations/individuals/teams, to swap one style into another style. It's like gold exchange standard, whcih never worked well.
This would allow to compose:

tab vs space (obvious one)
single vs double quote (less frequent, but happens, especially now when large projects are shipped via DT infrastructure
let people spend time away from keyboard

/cc @fedemp @pkuczynski
Tags: prettier, format, spaces vs tabs

Hey folks - we had the meeting and here's our general notes and the list of outcomes at the bottom for TLDRing. I'll keep this issue open for a week or so and then close and lock it out 👍🏻 - thanks for the feedback!
Improvements to DT Publishing

@dylang - Link homepage in package.json to the subfolder in DT

Orta shipped this today

@dylang - npm deprecate a deprecated package

Orta will look into feasibility

Improvements to DT Infra

@nirtamir2 - Update of @types packages with the corresponding library

It's hard to know when app changes should trigger .d.ts work
We can't think of a reasonable way to notify folks which won't be spammy
The people who want to know can subscribe to the releases for the packages on GitHub, we probably don't want to do this.

@Pokute - Be more vigilant on PR and issue titles, provide templates

Underlaying issue: GH search isn't great and it's hard to keep on top of any DT types you own

Can we remove issues completely?

Thinking about conceptual issue bankruptcy at least
We think most issues aren't very useful, people write them with the expectation others will fix their .d.ts issues but it rarely happens
We'd like to make DT issues be only about DT-level questions ( e.g. don't make DefinitelyTyped-tools be the source for those issues ) and discussions can be for DT module stuff.

Can the Bot can control PR titles more?

We think the super popular modules don't want that probably
As maintainers we don't really look at titles, mainly at the cards, so it's hard to say if we're good people to make this call

We should take a fresh look at the PR template regardless

@Maxim-Mazurok - Make it possible for me to ship Google's types

Maxim used to automate PRs, but started to ship lots of small PRs which were basically NOOPs (because it updated every hour) and we asked to move that off-DT
e.g https://github.com/DefinitelyTyped/DefinitelyTyped/pull/49226
Now deploys on own npm org, and the @types version depends on it: e.g. @types/gapi.client.sheets -> @maxim_mazurok/gapi.client.sheets
Request is: Can DT folks re-think about a process for people who are automatically publishing types?

We do this with a few clients (some in MS, like office, but they are still reviewed by other authors)
We think moving back to @types to a slower cadence could be ok, 1 automated PR per week
It's a reasonable cadence from our perspective, I'm sure there's value in being bleeding edge, but probably not for the vast majority
Today consuming @types/gapi.client.sheets has a potential security expectations mis-match

User expectations on DT are that they are more secure (e.g. for ATA we use "no scripts" etc but most consumers are TS folks who won't have that on)
Better to have in-house for us, but we'll see if cadence is an issue

@peterblazejewicz - Can we declare certain DT packages as being solo owned and have less process on them?

It's now much easier to merge whenever you are ready - we think some recent dt mergebot changes will amke that easier
We should give bless @peterblazejewicz collab access regardless - there are existing folks who aren't in the TS team

Can we make another tier on the bot? E.g. Low risk, anyone with collaborators - Orta to explore

We think the answer for this lays in the DT queuing responses below

@BendingBender  - DT module owners should be able to close issues relating to DT packages

If we're closing issues, this probably isn't a thing. Worth thinking about for discussions in the future, maybe anyone can close a discussion with the right keyword?

@peterblazejewicz - Support composing prettier settings

Orta wrote https://github.com/DefinitelyTyped/DefinitelyTyped/pull/52946#issuecomment-845120998
General agreement for banning changing the root configs, general agreement for saying "OK" to prettier configs in  subfolders as they only affect tooling. They would be considered DT infra, so PRs adding them would still be DT maintainer reviewed.

DT Admins

@eps1lon - Can we make a queue for DT PRs?

Since the bot alread has the computation of activity, and we checkedd that you can re-order from the API

We can make the dt-mergebot 6 hour run sort the activity date

We could also make views to easily see the things that are closer to nagging and timeout etc

How do we sort? How do we decide what to do

Used to be an easy bucket and a hard bucket for DT
Now both on each side are basically hard because easy ones are automated
How could 'solo and new' be sorted vs 'un-reviewed by others for a week' ?
Could there be a better columns ideas?

Critical packages are hard. We don't have a great answer. We're very conservative on both merging and saying 'this isn't going to happen'. E.g. a jest PR with a bunch of DT maintainers saying 'we won't make this call'

Can we be more upfront on how conservative we are as DT maintainers

e.g. we do this pretty well with lib.dom.d.ts ?

Can we find better ways to test breaky things

e.g. an actual real-world test suite for the big ones like react/jest etc
we can just make a set of RWC runner stuff
Can we make ad-hoc packages of existing PRs?
We have the DT Review Playground plugin shipping this week

@AlCalzone - OP had hoped that a comment on a TS issue from Daniel would mean he would support him through a DT PR to node which the node maintainers seemed mostly OKish on.

This fell through the gaps because it became a failed CI / merge conflicts quickly and never ended up on the DT admins TODO lists, node maintainers got pinged a few times but no-one committed. Hit the same issues as above ^
Better testing infra might have de-risked the PR and got more folks into their idea

Docs

@sgravrock  - Do a better job telling people npm run test is what you want to use

Agree (especially for react types)

@eteeselink - Encourage contributors to send typedefs to library repo first

Our general opinion is that you should only really ship .d.ts files from your package if they're generated from your codebase
we don't want to add a maintenance burden (and to put off people from eventually checking out TypeScript)
Almost everyone is bad at writing .d.ts files (including us, maybe not Nathan)
The people who have the least experience are the folks who suddenly got a .d.ts that they don't understand a dep
Lots of us have recent stories of interacting with npm modules which are JS focused and the .d.ts is out of date or hard for the maintainers to grok PRs for
We think the reasoning for 'dt first' then 'a .d.ts in your project' is still valid in 2021

@43081j - More guides on generating types for existing JS projects

Agree

Misc

@BendingBender - CLI tool to consume @types packages locally

We're probably not getting into the dependency management business
Yarn 2 has a plugin which does this
Someone could do the npm RFC, not Orta, he is cursed in the npm RFC system

@ExE-Boss - Turn on GH Discussions

We probably will

Action Items

Look at the npm deprecate infra
Figure a good way to move issues to discussions and re-frame what to expect from them
General docs improvements in the DT README and JavaScript section on the site
Get a list of all the critical DT packages, look into making a RWC testing suite for those packages
Look at generating PR DT releases
Explore sorting the DT maintainers columns
Look at changing the columns in the project to be simpler and logical from the outside
Write down somewhere about the DT maintainers being conservative and for critical packages it need enthusiastic support for DT module owners
Write down our opinions on the occasional formatting wars which breaks out so we can just refer to it when someone wants to make DT-level code formatting
Explore the idea of deputize some folks without giving the write access to the repo but giving them DT maintainer level access on the bot
Look at the PR template with fresh eyes
Make the bot say to not make changes to the root editor config files

Hello, @orta, thank you for your feedback regarding "Make it possible for me to ship Google's types".
There are ~200 packages/APIs right now, so it's potentially 200 PRs per week. And there's no guarantee that they'll be reviewed and merged within one week. Actually, there's a pretty solid chance that they'll be stuck there for months :)
One hour cadence was chosen because these types are used with the front-end JS APIs that are only available in CDN-style, without version binding. People add <script src="https://apis.google.com/js/api.js"/> to their page, which loads the latest API schema and generates functions from it on the fly. So, ideally types have to match the same cadence: be generated on the fly every time you, which is not feasible. I did tests and monitored APIs for changes, came to the conclusion that hourly updates are reasonable and would very much like to keep it that way.
Regarding security, I have branch protection rules in the repo, I have tests and linting set up as well. I have dependabot updating dependencies weekly (currently on pause because https://github.com/dependabot/dependabot-core/issues/3132). So, my typings are more secure.
Also, my users depend on https://apis.google.com/js/api.js, which can be a security issue if it gets hacked and the script is replaced with something malicious. One way they can mitigate this - is by manually copy-pasting content of this script to some local file, and doing review of the compiled JS code (something like this Maxim-Mazurok/gapi), which realistically no-one does and it's not recommended.
So, if they trust api.js, why would they not trust my typings?
In case if they don't want to take any chances - they can do the same thing as I've described for api.js - they can copy-paste types, review them and only update manually. Even more, they can use my generator repo to generate their own typings.
There's no magic and nothing is happening behind the curtains, all the sources are on GitHub, generation, tests and publishing to NPM is happening on GitHub Actions.
I was hoping that generated types will become first-class citizens.
Now I just hope that they won't loose their citizenship (again) 😢

Yeah, I know any dependency is a security risk but the point is that the potential contents of the npm package are different - someone cannot ship a preinstall script in an @types package, but one that just depends on another package can. It's not about your settings, process and dependabot etc - that doesn't really matter for the security of consumers for your package. A types package is just a few dts files, license and repo with nothing executable. Any other package can contain other stuff.
The point is that DT has a security model which allows people to trust arbitrary @types modules to do nothing, and this has the potential to undermine it. Every one of these is a gap in that security model.
Realistically, I think you'd be better off talking to google and getting these types auto-generated and deployed on their own npm
scope. Then have that be recommended officially with typesRoot to get picked up automatically. Or even better, re-use how VS Code extensions work and pull the latest as a preinstall hook on a module so that someone doesn't need to think about versioning.
Given your response, I don't think there's a reasonable answer here that doesn't hammer DT's infra again, or mean these changes are waiting on a DT reviewer every week for multiple package changes on a weekly cadence. I thought we were going to be looking at a much smaller amount of changes from those types, but I think what we have today is the best in the set of trade-offs which still allows for them to exist on @types but also be as up-to-date as you want. So, basically how it is now is probably how it will stay.

Yeah, I know any dependency is a security risk but the point is that the potential contents of the npm package are different - someone cannot ship a preinstall script in an @types package, but one that just depends on another package can. It's not about your settings, process and dependabot etc - that doesn't really matter for the security of consumers for your package. A types package is just a few dts files, license and repo with nothing executable. Any other package can contain other stuff.
The point is that DT has a security model which allows people to trust arbitrary @types modules to do nothing, and this has the potential to undermine it. Every one of these is a gap in that security model.

Yeah, I understand. Perhaps, we can create DT bot that would pull and re-publish another NPM package with stripped preinstall script? Or, this can be the responsibility of some enterprise NPM, such as ProGet.

Realistically, I think you'd be better off talking to google and getting these types auto-generated and deployed on their own npm scope. Then have that be recommended officially ...

Yes, that's definitely in the roadmap. I want to test it in the wild and add more tests before bothering folks at Google. By the way, if anyone knows someone at Google who might be interested - please, let them or me know (max@mazurok.com).

... with typesRoot to get picked up automatically. Or even better, re-use how VS Code extensions work and pull the latest as a preinstall hook on a module so that someone doesn't need to think about versioning (and can trivially update).

I don't know how VS Code extensions work, but one thing to keep in mind is that there's no NPM package to go with front-end Google APIs. It's not installed from NPM, so we can't ship types with the code. Code is shipped from CDN.

Given your response, I don't think there's a reasonable answer here that doesn't hammer DT's infra again, or mean these changes are waiting on a DT reviewer every week for multiple package changes on a weekly cadence. I thought we were going to be looking at a much smaller amount of changes from those types, but I think what we have today is the best in the set of trade-offs which still allows for them to exist on @types but also be as up-to-date as you want.

Yeah, all solutions that I can think of, require pretty big rework on the DT side, there's no easy fix here.
One more potential solution is to create some sort of API or environment to run generation scripts or consume their results.
For example, I publish my generation code into DT repo instead of typings. DT bot runs this code periodically and published typings. This potentially has a lot of security issues, if I can eval any code that I can download from the network, I probably can use DT bot to DDOS some website, etc.
Another option is to create a DT API endpoint, where I can send updated index.d.ts. I'll be still generating types on my side, and then send the result to DT API, which may or may not be automatically published to the repo, but definitely should be published to @types NPM.
That's probably too much work for DT to support just one package... But perhaps, if automatic generation will be easier - more people will do it? In any case, I'll be happy to help with this.

So, basically how it is now is probably how it will stay.

Otherwise, I'm ok with leaving it as it is for now.


Groups / Threads: Clicking a link in a "stale" threaded chat message does nothing

Describe the bug, optionally with screenshots
This appears to be related to a closed issue: https://github.com/tloncorp/landscape-apps/issues/1116
Call these types of threads "stale threads" for the purpose of this issue.
When I click a link in a stale thread like this one (in Tlon Public ~2022 Support / ~nibset-napwyn/support) :

Nothing happens.
If I open the thread freshly and click the link, it works. If I have a different thread open, then (without closing that one) click on a new thread, replacing it in the sidebar (as in above-linked issue #1116), the links don't open.
I can right-click to open in a new tab/window, etc. Those work fine.
To Reproduce
Steps to reproduce the behavior:

Have some links in Thread A
Have anything in Thread B
Have Thread B open.
Without explicitly closing Thread B, click on Thread A so that it is the currently-open thread
Click on one of the links in Thread A
Nothing happens.
(right-clicking on the links should still allow you to open them as usual for your browser)

Expected behavior
Clicking a link in a "stale thread" should work as usual.

Very sorry - I just did a hard refresh and it seems to be resolved. This ol' tab probably didn't have some recent front end fixes?


SCB-127 The consumer micro-service can discovery SC instances.

New features

Auto compact etcd data
The consumer micro-service can discovery SC instances.
Use the event driven design in dep-rules.

@little-cui please create a Jira in  https://issues.apache.org/jira/secure/RapidBoard.jspa?rapidView=223&projectKey=SCB  and use the Jira Id in the PR Title

Coverage increased (+0.9%) to 72.518% when pulling 6f23afebf58dce07831b53885b8fe5644a0d81d8 on little-cui:master into d634534939868aa93b85493183c13faada2033c1 on apache:master.

Codecov Report

Merging #224 into master will increase coverage by 0.85%.
The diff coverage is 64.7%.

@@            Coverage Diff             @@
##           master     #224      +/-   ##
==========================================
+ Coverage   67.99%   68.85%   +0.85%
==========================================
  Files          17       17
  Lines        3584     3554      -30
==========================================
+ Hits         2437     2447      +10
+ Misses        974      934      -40
  Partials      173      173

Impacted Files
Coverage Δ

server/service/microservices.go
73.42% <100%> (ø)
:arrow_up:

server/service/util/instance_util.go
49.71% <50%> (ø)
:arrow_up:

server/service/util/rule_util.go
68.66% <60%> (+0.85%)
:arrow_up:

server/service/util/dependency.go
53.79% <60.9%> (+3.66%)
:arrow_up:

server/service/service_dependency.go
75% <72%> (-1.53%)
:arrow_down:

server/service/instances.go
70.63% <75%> (-0.27%)
:arrow_down:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update d634534...6f23afe. Read the comment docs.


Auto-generated Swagger.json from the Backend does not work with API Management

The ASP.NET Core Backend is generating a Swagger.json file using Swashbuckle.AspNetCore.

When importing this Swagger File into Azure API Management, it is throwing errors! As a workaround, we currently have provided fixed JSON files as Assets, but it would be nice, if participants could just import that Swagger.json URL.

@robinmanuelthiel if you are happy with the approach in #9 I will clean up the documentation and remove the static files

Sounds good. I left some requests for clarification in the code review! Thanks for your contribution!


Song selection not working on latest LSDJ stable version (9.3.9)

(Platform: Linux/Fedora 38)
It seems that the application is unable to select the correct song when using the latest stable version 9.3.9 of LSDJ and plays just whatever is there when LSDJ starts.
Previous 9.2.L works fine.
I checked that the input combos for selecting the song should be the same, no idea what could've changed between the versions...

Hmm, weird. It could just be that something is a bit laggier in the newest version and the button presses are too fast to take effect. I've been meaning to revamp the joypad macro system anyways but it seems I have a good reason to now.

Should be fixed in v0.2.0, if it still isn't working you can reopen this issue.


Option to make whitelisting not recursive.

Another follow-up from #21. I'm using
.whitelisted_type("mbedtls_.*")
.whitelisted_function("mbedtls_.*")
.whitelisted_var("mbedtls_.*")
.whitelisted_var("MBEDTLS_.*")

but several libc types are included in the output anyway:
pub type __off_t;
pub type __off64_t;
pub type __time_t;
pub struct _IO_FILE;
pub use self::_IO_FILE as FILE;
pub type _IO_lock_t;
pub struct _IO_marker;
pub type Byte;
pub type uInt;
pub type uLong;
pub type Bytef;
pub type voidpf;
pub type alloc_func;
pub type free_func;
pub struct internal_state;
pub struct z_stream_s;
pub use self::z_stream_s as z_stream;
pub type time_t = __time_t;
pub struct __pthread_internal_list;
pub use self::__pthread_internal_list as __pthread_list_t;
pub union _bindgen_ty_14;
pub struct _bindgen_ty_14___pthread_mutex_s;
pub use self::_bindgen_ty_14 as pthread_mutex_t;

I want bindgen to only output definitions in my project's header files, as in 0.19's match_pat. I will depend on other -sys crates to provide the correct types for those defined outside my project's headers. This is obviously the way it has to be if you want to pass the types around to different -sys crates.

That means that those types are used transitively by the functions you've whitelisted. If you want to make some of those opaque, you can make so with opaque_type. If you want just to avoid generating definitions for those, you can use blacklist_type.
I believe what you want is something like opaque_type(".*").whitelisted_type("mbedtls_.*"). Does that work for you?

Unfortunately not. Then, the types I don't want are still included as u8-array definitions.
Also, there seems to be a bug. Without opaque_type I get:
pub struct _bindgen_ty_6 {
    pub s: ::types::raw_types::c_int,
    pub n: usize,
    pub p: *mut mbedtls_mpi_uint,
}
pub use self::_bindgen_ty_6 as mbedtls_mpi;
pub struct _bindgen_ty_7(pub u32);
pub use self::_bindgen_ty_7 as mbedtls_md_type_t;

With opaque_type as you suggested, I get:
pub type mbedtls_mpi = [u64; 3usize];
pub use self::u32 as mbedtls_md_type_t;

I tried whitelisting _bindgen_ty_.* as well, but that doesn't fix this bug.

yep, that last self::u32 thing is a bug.
In any case, yeah, I guess we can make whitelisting not recursive (i.e., do not whitelist everything recursively from a whitelisted type). But I think it's easy to understand why that's the default behavior.

Yes, I think whitelisting non-recursively would fix this.
I don't think your previous answer would be a good solution? I'm not sure if I understand exactly what you mean. I want my types to be defined in full, but outside types to come from outside.

Yes, the solution here is whitelisting non-recursively.

Or alternatively, adding a set of "externally defined types", but that sounds trickier if it can just be fixed this way.

Especially with the 'but outside types come from outside' bit, this overlaps the first bullet of #424 ("WIBNI I could tell bindgen where to get a type from).
I currently explicitly blacklist externally defined types, but also would be happy for non-recursive whitelisting to save me the trouble.

We emit bindings for the transitive closure of whitelisted items because otherwise we would emit bindings referring to types that do not exist and end up with errors when compiling the bindings.
If we can successfully avoid emitting bindings for an item in our computed whitelisting transitive closure set, then it is a bug in our computation of that set (ie it shouldn't be emitted because it is not whitelisted itself nor used by a whitelisted item).
But it doesn't make sense to "whitelist non-recursively", that leads to emitting bindings with references to types that aren't defined.

@fitzgen as far as I understand it, that's exactly the point, not defining some types so they can be imported manually :)

Emitting bindings with "non-existing types" is exactly the point. The types do exist. They're just defined in another crate.

Isn't blacklisting the specific types we want to leave out from the bindings the proper solution then?

No, a whitelisting approach makes more sense. There are a lot of types defined in libc.

Just as a data point - possibly not a terribly helpful one - I'm neutral on this.
When run bindgen in my project, I have exactly 6 types that I want bindgen to ignore, so that I can import them.  Few enough that it's no big deal; though the non-recursive whitelisting would also work just fine.
I see that in the opening comment in this trail @jethrogb reports having rather more such types to deal with, and I can quite understand that it would be desirable to be able to do that without listing each one explicitly.


pkgr: add the ability to set values in a telegraf config when importing

as a user
when i import a manifest containing an telegraf config
then i would like the ability to set values in the config such as urls, org names, bucket names, hostnames, etc.

@russorat can you describe this a little further. Do we not have the ability to put all that info into the telegraf config multi line string? Not sure I'm following the ask ehre

i'm thinking about this as someone creates a telegraf config that they want to share with many other people. They each have their own org and bucket in the influxdb_v2 output. Would the importer need to import the config, then manually go in and update those values? or is there a way the user can be prompted to fill in those values when they import the manifest?

whatever experience you're looking for, I can likely support it. If you want the ability to change those values, I'd just go in and change them personally 🤷♂. But if were importing a package to use wholesale, we're going to want some mechanism to set those imo. We can use a ref internal to the package, if its not there, then ask user for it. We're doing that for secrets already, so that mechanism already exists kind of.


Update in README documentation

Discovered that s.string() supports both min and max as minimum as maximum length of string. Updated README reflects this option.

also can we squash the commits, probably don't need 3 commits for a single line change

@nguyenchr Sure

Good catch! Maybe we can also update https://github.com/TabDigital/strummer/blob/master/MATCHERS.md?

Happy to add an example of using s.string({min, max}) to the MATCHERS.md as well.

@nguyenchr @rprieto commits are all squashed to one. Both MATCHERS.md and README.md updated.

Looks great thanks! :+1:


Need new manual for nginx

This doc request already was earlier but after update code-server i have ERR_TOO_MANY_REDIRECTS error again with my old configs. Whats change i must make to resolve this problem?

Show us your nginx config so we know what's broken, thanks!

Had the same issue, here is a config that worked. After I figured out a config that worked, I fixed too many redirects by clearing site's cookies, right config was not enough.
server {
listen 443 ssl;
server_name ide.*;

# ssl cert, in dockers linuxserver/letsencrypt format
include /config/nginx/ssl.conf;

client_max_body_size 0;

location / {
	proxy_set_header   Host $host;
	proxy_redirect http://$host/ /;
	proxy_http_version 1.1;
	proxy_set_header Upgrade $http_upgrade;
	proxy_set_header Connection "upgrade";
	proxy_pass http://<ip>:8080;
}

location ~* \.(?:jpg|jpeg|gif|bmp|ico|png|swf)$ {
	proxy_set_header   Host $host;
	proxy_pass http://<ip>:8080;
	access_log off;
}

}

Requesting further information. Failure to reply means it was fixed in your end and I'll close this automatically after 3 days.


Support for Ockam in a browser/front-end app

Current behavior
It's not possible to use Ockam in the browser as the only programming library that is currently available is in Rust.
Desired behavior
I'd love to build an example that is usable within a web browser. I think this probably requires javascript/typescript bindings though I don't want to assume too much about the final implementation has to look like.

Would a simple vite app fetching data from an axum backend via ockam fit the bill in this case?

@glenngillen should we close this one?


USelectMenu options not visible when parent element lacks height

Environment

Operating System: Linux
Node Version:     v20.9.0
Nuxt Version:     3.8.2
CLI Version:      3.10.0
Nitro Version:    2.8.1
Package Manager<EMAIL_ADDRESS>Builder:          -
User Config:      devtools, modules, runtimeConfig
Runtime Modules<EMAIL_ADDRESS>Build Modules:    -

Version
v2.11.0
Reproduction
https://stackblitz.com/edit/nuxt-ui-ylkftc
Description
I'm not sure if it's a bug, or expected behavior, but when the parent element lacks height, the values of the select group are not visible.
Additional context

Logs
No response

Duplicate #806. Answer here: https://github.com/nuxt/ui/issues/806#issuecomment-1757611901


cmd/go/internal/fsys: TestWalk_Symlink fails on Plan 9 (which doesn't have symlinks)

Subject says it all really. Failure introduced by CL 261537

cc @matloob


Look into processor usage during idle

On my system (mac os x), the fan comes on shortly after instantiating a virtual node, and the activity monitor shows the terminal using 120% of a processor.

serialInterface thread had a sleep line indented accidentally into an if statement, so wasn't sleeping as it should.


Add a test that we don't get a "Server" header

Normally, I'd put this test in a spec of its own,
but these tests take so long to set up that it
makes more sense to have multiple expectations in
a single spec.

depends on https://github.com/ministryofjustice/cloud-platform-infrastructure/pull/955, so I'll merge this after that is merged and applied


Does this have that thing so I can use Wii remotes or 3rd party ones

If not then when will you add it or what should I use to Use Wii remotes as controllers

That sounds like driver4vr


chore(website): Fix corrupted assets during build

The in-place plugin seems to tamper all the files, even
though it does not transform them >> Scoping this plugin to
only relevant extensions.
Also in this PR: we let the user publish the doc from any branch but we ask for confirmation if not on master.

lgtm, we should've seen that in the deploy preview last time though 😶

I was careless :) It's fixed now :D


toolchain 'nightly-x86_64-unknown-linux-gnu' does not contain component 'wasm32-unknown-unknown' for target 'x86_64-unknown-linux-gnu'

I have installed RustUp from scratch on OpenSUSE Leap 42 (using WSL) carrying out the following commands:

curl https://sh.rustup.rs -sSf | sh
Default installation options (triple x86_64-unknown-linux-gnu, toolchain stable)
source $HOME/.cargo/env
rustup update
rustup toolchain install nightly-x86_64-unknown-linux-gnu
rustup component add wasm32-unknown-unknown --toolchain nightly

It gives me toolchain 'nightly-x86_64-unknown-linux-gnu' does not contain component 'wasm32-unknown-unknown' for target 'x86_64-unknown-linux-gnu'.
I am not sure what I did wrong, but I can see I have both stable and nightly installed using rustup toolchain list:
stable-x86_64-unknown-linux-gnu (default)
nightly-x86_64-unknown-linux-gnu

What could be the problem here? I should also mention I did the same on Windows and it worked.

 This target was only just released, so it's quite possible you pre-empted it. I just ran rustup update locally and the target is there.

I ran rustup update again and it says this:
info: syncing channel updates for 'stable-x86_64-unknown-linux-gnu'
info: syncing channel updates for 'nightly-x86_64-unknown-linux-gnu'
info: checking for self-updates

   stable-x86_64-unknown-linux-gnu unchanged - rustc 1.22.1 (05e2e1c41 2017-11-22)
  nightly-x86_64-unknown-linux-gnu unchanged - rustc 1.23.0-nightly (827cb0d61 2017-11-26)

I ran rustc +nightly --target wasm32-unknown-unknown -O add.rs --crate-type=cdylib and it didn't work:
the wasm32-unknown-unknown target may not be installed

Ah, the command is rustup target add wasm32-unknown-unknown, not rustup component add wasm32-unknown-unknown --toolchain nightly.

I am using this article, will ping the author afterwards.
I did rustup target add wasm32-unknown-unknown and it says toolchain 'stable-x86_64-unknown-linux-gnu' does not contain component 'rust-std' for target 'wasm32-unknown-unknown'. I would install the component manually but something tells me I am not supposed to install the components by hand and the target installation should take care of that?

You'll need to add --toolchain nightly if nightly is not currently active.


⚠ gorzdrav.org has degraded performance

In 9903c98, gorzdrav.org (https://gorzdrav.org) experienced degraded performance:

HTTP code: 200
Response time: 7326 ms

Resolved: gorzdrav.org performance has improved in 444ad54.


[BUILD] nanovdb/util/cuda in NanoVDB 11 installs to invalid folder

Environment
Operating System: Windows 10
Version nanoVDB 11 / Commit SHA: 77f28d16114949dfbe2937aa2dae1379f6d2b653
CMake Version: 3.27.7
Compiler:MSVC 2022
Describe the problem
The release notes state that the CUDA-related headers for NanoVDB have been added to nanovdb/util/cuda, but due to an incorrect CMake script, they are actually installed under nanovdb/util.
This causes projects that use NanoVDB as a library to fail to build when including header files under nanovdb/util/cuda, which destroys the relative reference to nanovdb/util.
To Reproduce
Steps to reproduce the behavior:

Checkout repo 'master'
Run CMake and Build

cmake -S . -B .\build -DCMAKE_INSTALL_PREFIX=D:\openvdb\build\Release -DOPENVDB_BUILD_BINARIES=OFF -DUSE_AX=OFF -DUSE_NANOVDB=ON -DOPENVDB_BUILD_NANOVDB=ON -DNANOVDB_BUILD_TOOLS=OFF -DNANOVDB_USE_CUDA=ON -DCMAKE_TOOLCHAIN_FILE='C:\Program Files\Microsoft Visual Studio\2022\Community\VC\vcpkg\scripts\buildsystems\vcpkg.cmake' -DVCPKG_TARGET_TRIPLET=x64-windows -A x64`
cmake --build .\build --parallel 8 --config Release --target install

Goto .\build\Release\include\nanovdb\util and check directory structure

I sent a pull request (#1770 ) to fix this issue


Add a solution to problem 111

The idea is to find the minimum depth through a breadth first search or depth first search.

The problem can also be solved using a recursive approach that makes use of the minimum depth relationship between the root and its two child nodes.


The reindexer doesn't always start correctly

The reindexer should be started by a CloudWatch Alarm, but when it's not running that alarm moves into the "Insufficient data" state:

And for some reason, it doesn't move back into "In alarm" when you send messages to the queue – I have to poke the queue to get it to notice the stats change, trigger the CloudWatch Alarm, trigger scaling, etc.
I've seen this on my last two reindexes; we should understand why this is happening and fix it.

I think this was because SQS queue metrics can be delayed by up to 15 minutes if the queue is in an "inactive" state.
I ended up tracking this down elsewhere; see https://alexwlchan.net/2022/02/no-cause-for-alarm/ for more explanation.


BOLT07: temporary channel disable

channelが一時的に使用できない場合に channel_update を送信するしくみを追加しても良い。

MAY create and send a channel_update with the disable bit set to 1, to signal a channel's temporary unavailability (e.g. due to a loss of connectivity) OR permanent unavailability (e.g. prior to an on-chain settlement).

MAY sent a subsequent channel_update with the disable bit set to 0 to re-enable the channel.

イメージ
https://github.com/nayutaco/ptarmigan/blob/1dd3872ffe236cefbb8a487b8d95bae92f1e7636/ptarm/ln.c#L999-L1007


Make possible to switch to using Kramdown or other processors

Purpose:
I'd like to have target=_blank for all external links.
It seems like an easy solution for this would be if it was using Kramdown: http://stackoverflow.com/a/4705645/397649
Is there a simple way to use Kramdown, or some other easy solution for target=_blank on all external links automatically (without going and manually editing hundreds of links to be html links instead of markdown links)?

@arikroc Can you please go to the forums at https://discuss.gohugo.io for all support-related questions? I think you will easily find the answer to your questions there....
As an aside, BlackFriday, Hugo's parser, is pretty badass, IMHO...and it's written in Golang...like Hugo 😉


Cuda Error under self.alpha,p.data - q.data

Hi, I have tried wrapping both torch.optim.Adam (and also RAdam) optimiser, however I get an error when I run this on the gpu:
File "../optimizer.py", line 35, in step     q.data.add_(self.alpha,p.data - q.data) RuntimeError: expected device cuda:0 and dtype Float but got device cpu and dtype Float
Using
base_optimizer = RAdam(model.parameters(), lr = 0.001)
#base_optimizer = torch.optim.Adam(model.parameters(), lr=0.001)
#optimizer = Lookahead(base_optimizer, k=5, alpha=0.5)

Do I have to alter the way I load model and data to gpu? Using standard method of .to(device)

I managed to get this to work by changing self.slow_weights to:
        self.slow_weights = [[p.clone().detach().to('cuda:0') for p in group['params']]
                                for group in self.param_groups]

Seems the behaviour of .detach() has changed for the latest pytorch?

@ilkarman  hi, I add Radam and Ralamb in optimizer.py , I can run on cpu and gpu, if you use cpu ,may be set device device = torch.device("cpu") and use gpu:0 device = torch.device("cuda:0")

@lonePatient Sorry it was my stupid fault for casting model to gpu after defining optimiser by accident: https://github.com/lessw2020/Ranger-Deep-Learning-Optimizer/issues/1#issuecomment-524644719
Doing it with proper order I don't need to ast slow_weight params to cuda(0)


/setspawn /spawn yaw point to south

When do /setspawn  and then /spawn  yaw set to south, looks like not saved what I want using /setspawn.
Also pitch looks like not saved.

Send me your spawn.conf via PasteBin

http://pastebin.com/GDYhs3tr

another http://pastebin.com/dcixKJ7w
version 7.8b, spongeforge 1193

I have been testing this out locally, can you confirm this is still an issue?

version 7.8c, spongeforge 1195, issue still persist

7.8d, spongeforge 1207, issue still persist

I added some debug code to Utils.java getSpawn() and looks like problem is here: https://github.com/hsyyid/EssentialCmds/blob/master/src/main/java/io/github/hsyyid/essentialcmds/utils/Utils.java#L1142
Its wrongly detect if transform is in the config.
My config:
Contains spawn data.
spawn {
X=219.17156534324903
Y=69.0
Z=308.7449598535267
transform {
pitch=54.900028228759766
roll=0.0
yaw=-122.39973449707031
}
world=world
}
http://pastebin.com/aXtY0xLv
Instead of "SPAWN PITCH" in the console I see "SPAWN"

I think found problem - typo - instead of warpsConfig muste be spawnConfig on this line:
https://github.com/hsyyid/EssentialCmds/blob/master/src/main/java/io/github/hsyyid/essentialcmds/utils/Utils.java#L1142

patch: http://pastebin.com/MwsqJYtb
Tested and fixed this issue.

@hunter688 thanks! I'll push a fix today

not fixed in 7.9 :(


Please Add a License

I know this project is meant to be use as part of Lem, but it is a separate project. Just to clear things up, please add a license file and a :license field in the system definition.
If I understand correctly, the absence of a license implies all rights reserved which is not desirable for open source and free software. As the author copyright holder (@Sasanidas), you can choose to do what you want with it, including using it in Lem. Since Lem has multiple authors though, things could become legally ambiguous.
I suggest using a copyleft license like the GPL 3 or AGPL 3 as these licenses provide the most freedoms to the end user and keep your software free. This would require Lem to also switch to a compatible copyleft license in a future version, so I understand if you do not want to go this route.

Thanks for pointing out the license problem, I changed to license to MIT mostly because of the compatibility with the Lem project.
I'm a supported of Copyleft licenses, but I'm not the one who deiced the license for the Lem project so compatibility it's more important for this project :+1: