UDP sockets don't bind to the right interface

The freedom UDP socket API allows the caller to bind to a particular interface, identified by its IP address.  Unfortunately, the Firefox implementation ignores this and effectively just binds to <IP_ADDRESS>.

Some more info...
Here's the call to bind the socket:
https://github.com/freedomjs/freedom-for-firefox/blob/master/providers/core.udpsocket.js#L13
We should be able to use initWithAddress to specify a particular interface, although I wasn't able to quickly figure out how to pass a NetAddr argument:

https://dxr.mozilla.org/mozilla-central/source/netwerk/base/nsIUDPSocket.idl#61
https://dxr.mozilla.org/mozilla-central/source/netwerk/base/nsUDPSocket.cpp#762

Unfortunately, initWithAddress is marked [noscript], so we can't use it from JS.  The best option I could see for now is to set the aLoopbackOnly argument to true if the user asks to bind to localhost.
I filed a mozilla bug to complain about this: https://bugzilla.mozilla.org/show_bug.cgi?id=1178427

That's unfortunate but thanks for following up on this!
Does this affect our ability to run holographic ICE on Firefox?

I suspect this will prevent us from doing IPv6 in Firefox.  That's the only major issue I foresee.


Livetests don't go through test-proxy by default

When running livetests, we shouldn't be going through the proxy. The ML livetests are passing through the proxy before actually running. We can entirely eliminate this by setting the default in live.tests.yml.
Furthermore, we can then disable test-proxy for ml livetests entirely because we don't actually need it to run during livetests if no traffic goes through it. This should have the knock-on effect of solving the certificate trust issue visible in this failing livetest.

/azp run python - ml - tests

/check-enforcer override


Can I Use Azure Front Door Inside a VNET?

I was looking at the Azure Front Door Docs and couldn't find a way to have FD route to an IP inside of a VNET?
Specifically, I want to have FD route to the IP of an internal load balancer in my VNET. I am trying to route to my AKS cluster
If it is possible, can you tell me where to find it in the documentation?
Thank you very much! 😄

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: dbadca96-7341-36d0-8a38-1c6a5c96b22d
Version Independent ID: 2fad91dc-25f8-0c7a-c21d-93986ec51145
Content: Azure Front Door Service
Content Source: articles/frontdoor/front-door-overview.md
Service: frontdoor
GitHub Login: @sharad4u
Microsoft Alias: sharadag

@arschles Thanks for the feedback! I have assigned the issue to the content author to investigate further and update the document as appropriate.
@sharad4u Hi, can you please take a look? Thanks a lot!

Any updates on this?

@sharad4u Hi, do you have any idea? Thanks!

Any update on this? We also wish to use Azure Front Door and keep our AKS cluster private.

This doesn't seem to be on the roadmap.
https://feedback.azure.com/forums/217313-networking/suggestions/36232873-vnet-integration-front-door

@YutongTie-MSFT - This isn't supported and now documented here - https://docs.microsoft.com/en-us/azure/frontdoor/front-door-faq#can-azure-front-door-load-balance-or-route-traffic-within-a-virtual-network
#please-close


_include does not work for QuestionnaireResponse:questionnaire

Describe the bug
Per FHIR spec, QuestionnaireResponse.questionnaire is a canonical. But when using a full URL for this field, a QuestionnaireResponse search request with _include=QuestionnaireResponse:questionnaire does not return the Questionnaire resource the QR refers to.
Ironically, if you use relative URL for the "questionnaire" field, the _include works, but FHIR spec requires that
the QuestionnaireResponse.questionnaire should be a canonical.
To Reproduce

Use/load the attached (see below) sample Questionnaire and QuestionnaireResource files or create/load your own,
Make sure to use "full" URL for the QuestionnaireResponse.questionnaire field.
A request like:
QuestionnaireResponse?_id=MY-QR-RES-ID&_include=QuestionnaireResponse:questionnaire
Should return Questionnaire resource as well.

Attached sample Questionnaire and QuestionaireResponse files:
questionnaire-hapi.json.txt
questionnaire-resp-hapi.json.txt
Expected behavior
Should included the referenced Questionnaire in the results as requested.
Environment (please complete the following information):

HAPI FHIR Version: HAPI FHIR 5.5.0-PRE1-SNAPSHOT (live on hapi.fhir.org as of 2021-07-28)

We have found out how to make #1583 work with our configuration. The missing part was to strip the base url on canonical references before storing the resource. Then the suggested workaround is no longer needed. This is the same as we do for references.
When retrieving resources, the base url must be added again to allow validation.


CI targets fail

          Currently two targets fail:

32bit architecture (x86)
long term support (lts) julia with 1.6

Originally posted by @kaat0 in https://github.com/railtoolkit/TrainRuns.jl/issues/81#issuecomment-2205863095

long term support (lts) julia will change to 1.10


fix: 修复 mergedCell 缺失theme 导致的报错

👀 PR includes

✨ Feature

[ ] New feature

🎨 Enhance

[ ] Code style optimization
[ ] Refactoring
[ ] Change the UI
[ ] Improve the performance
[ ] Type optimization

🐛 Bugfix

[X] Solve the issue and close #1868

🔧 Chore

[X] Test case
[ ] Docs / demos update
[ ] CI / workflow
[ ] Release version
[ ] Other ()

📝 Description
🖼 Screenshot

Before
After

❌
✅

🔗 Related issue link

🔍 Self-Check before the merge

[ ] Add or update relevant docs.
[ ] Add or update relevant demos.
[ ] Add or update test case.
[ ] Add or update relevant TypeScript definitions.

:tada: This PR is included in version @antv/s2-v1.33.1 :tada:
The release is available on:

npm package (@latest dist-tag)
GitHub release

Your semantic-release bot :package::rocket:

:tada: This PR is included in version 1.0.0 :tada:
The release is available on GitHub release
Your semantic-release bot :package::rocket:


Remove --generator as it has been deprecated

kubectl --generator has been deprecated

https://github.com/MicrosoftDocs/azure-docs/issues/52923

Checklist

[ ] make test-all (UNIX) passes. CI will also test this
[ ] unit and/or integration tests are included (if applicable)
[ ] documentation is changed or added (if applicable)

Description of change

@joshgav would love your feedback on this as you were the original implementer.

LGTM to remove the --generator flag, it was indeed deprecated a while ago.
@koolwithk I'm not sure what's causing the error when copying files back to the local workstation, if it's still happening perhaps open another issue to dig into that.

Thank you both, much appreciated!


Airbyte OSS Auth

I would like to use airbyte_api to manage my locally installed Airbyte OSS. Airbyte OSS works with client_id and client_secret and if I access api endpoints directly with requests it works fine, however I would like to use the airbyte_api package. How can I auth?
P.S.
Here is the code for a click command I am currently using. As you can see it is too long and I would love to switch to something more pythonic.
[### airbyte.py
import os
import click

cmd_folder = os.path.join(os.path.dirname(__file__), '', 'airbyte')
cmd_prefix = 'cmd_'

class RUN(click.MultiCommand):
    def list_commands(self, ctx):
        """
        Obtain a list of all available commands.

        :param ctx: Click context
        :return: List of sorted commands
        """
        commands = []
        for filename in os.listdir(cmd_folder):
            if filename.endswith('.py') and filename.startswith(cmd_prefix):
                commands.append(filename[4:-3])

        commands.sort()
        return commands

    def get_command(self, ctx, name):
        """
        Get help for specific command.
        :param ctx: Click context
        :param name: Command name
        :return: Command's cli function
        """
        ns = {}
        filename = os.path.join(cmd_folder, cmd_prefix + name + '.py')
        with open(filename) as f:
            code = compile(f.read(), filename, 'exec')
            eval(code, ns, ns)
        return ns['cli']

# run = RUN(help='This tool\'s subcommands are loaded from a plugin folder dynamically.')

@click.command(cls=RUN)
def cli():
    """ Commands to facilitate task execution. """
    pass

if __name__ == '__main__':
    cli()]([url](url))

### airbyte/cmd_get_source.py
import os
import click
import requests
import json

@click.command()
@click.option("--source-id", required=True, help="The ID of the Airbyte source to update.")
def cli(source_id):
    """
    Updates the state of multiple streams in an Airbyte connection with given parameters.
    """
    # Retrieve client_id and client_secret from environment variables
    client_id = os.getenv("AIRBYTE_CLIENT_ID")
    client_secret = os.getenv("AIRBYTE_CLIENT_SECRET")

    # Ensure the environment variables are set
    if not client_id or not client_secret:
        print("Error: AIRBYTE_CLIENT_ID or AIRBYTE_CLIENT_SECRET is not set.")
        exit(1)

    # Step 1: Obtain the access token
    token_url = "http://localhost:8000/api/v1/applications/token"
    token_body = {
        "client_id": client_id,
        "client_secret": client_secret
    }

    try:
        token_response = requests.post(token_url, headers={"Content-Type": "application/json"}, json=token_body)
        token_response.raise_for_status()
        access_token = token_response.json().get("access_token")
        if not access_token:
            click.echo("Failed to retrieve access token.")
            return
        click.echo("Access token retrieved successfully.")
    except requests.exceptions.RequestException as e:
        click.echo(f"Failed to obtain token: {e}")
        return

    # Step 2: Get source
    url = f"http://localhost:8000/api/v1/sources/get"

    # Prepare headers with the retrieved access token for authentication
    headers = {
        "Content-Type": "application/json",
        "Authorization": f"Bearer {access_token}"
    }

    payload = {
        "sourceId": source_id
    }

    # Make the API request to update the state
    try:
        response = requests.post(url, headers=headers, json=payload)
        response.raise_for_status()
        click.echo(response.text)
        click.echo(json.dumps(response.json(), indent=2))
    except requests.exceptions.RequestException as e:
        click.echo(f"Failed to get source: {e}")

if __name__ == "__main__":
    cli()

python airbyte.py get_source --source-id 2c6b5520-94ab-4c83-94d0-fc8dfe9269c8

So to clarify, how can you authenticate in Airbyte OSS, when:
the Airbyte API endpoint is not clear for the OSS version.
Is it http://localhost:8000/api/v1/
Is it http://localhost:8000/api/public/v1/
and how can you authenticate, as the OSS version comes with
"client_id": client_id,
"client_secret": client_secret
and the generation of Access token (valid for 3 minutes by default) - it seems like the Access token is not supported by the airbyte-api package.

The workaround is working fine for now.


add_sofc_materials_articles

adding SOFC-Exp Corpus

Hey @lhoestq , thanks for the feedback on this! I updated the _generate_examples with some comments on the process, and reduced the dummy_data.zip down quite a bit as well.
For the dummy data, I reduced the text to only three sentences, and aligned the corresponding entity/token/sentence annotations to that (reduced accordingly). The frames file is a strange combined format for the annotations and I found if I reduced that that would break the parser no matter what I did, so I left that as is. The difference between a reduced frames and non-reduced frames file in the compressed dummy data was only about ~4kb, so hopefully leaving this as is will be ok!


Dropdown with checkbox needs a double click after a select is made. (Laravel and Livewire 3)

Describe the bug
When using the dropdown with checkboxes in it, after making a selection in the dropdown, I need to double-click the button to re-open the dropdown.
To Reproduce
See attached video:
https://github.com/themesberg/flowbite/assets/29499564/aabe555b-0c3e-458d-9414-909881174035
Expected behavior
When clinking the dropdown button it should re-open.
Desktop (please complete the following information):

OS: MAC OS
Browser chromium 120

Additional context
Running laravel 10 with livewire 3.
This is the component:

    <button id="dropdownDietButton" data-dropdown-toggle="dropdownDietCheckbox"
        class="text-black relative bg-grayBG border font-medium rounded-full text-sm px-5 py-2.5 text-center inline-flex items-center"
        type="button">

            <x-heroicon-o-rectangle-stack class="w-5 h-5" />

Diet<svg class="w-2.5 h-2.5 ms-3" aria-hidden="true"
            xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 10 6">
            <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2"
                d="m1 1 4 4 4-4" />
        </svg>
    </button>

            @foreach ($userDiets as $diet)

                        <input id="diet-{{ $diet->id }}" type="checkbox" value="{{ $diet->id }}"
                            wire:model.live="selectedDiets"
                            class="w-4 h-4 bg-gray-100 border-gray-300 rounded text-lightBlue focus:ring-blue-500 focus:ring-2">
                        id }}"
                            class="text-sm font-medium text-gray-900 ms-2">{{ $diet->name }}

            @endforeach

I also have the problem that after a radio button is checked, I call the dropdown instance to toggle it (use dropdown.toggle()) or hide it (use dropdown.hide()).
dropdown = FlowbiteInstances.getInstance('Dropdown', 'dropdownButton') for example
Sometimes the dropdown is hidden as expected after clicking on the radio button, but then I have to click the trigger (e.g. the button) twice to open the dropdown again.
Sometimes the dropdown is not hidden after I have clicked on the radio button. I have to click twice on the radio button to hide the dropdown.
But sometimes it doesn't show any issue.

To make sure it works every time.
I have found a workaround to overcome this issue, that I don't add the attribute data-dropdown-toggle in the HTML, but create the dropdown instance later on by my own.
The key point in solving this issue is to use triggerType, set to none instead of click (default).
        const options = {
            triggerType: 'none',
            onShow: () => {
            },
            onToggle: () => {
            },
        };

and then, the dropdown.hide() or dropdown.toggle will work as expected!
So I guess something is wrong with the default triggerType: 'click'.


Make adjustments to rename the project to bw_projects

closes #4

@cmutel I am not able to tag you for review of the PR, instead tagging you here.


Replace react-file-input

react-file-input is no longer maintained... The last update to this repository was over 2 years ago. You should consider replacing this with a package that is actively maintained.

Is this library even being used? I did not see any references in the code. Can the dependency just be removed?

I have a file uploader in the 'import' component. Not sure if it uses that package


Cannot find the value of the field AzureADSTSEndpoint

Hi all, I attempted to build a streaming service that users can upload/access media files (and I want to do this via REST)
Then I followed the tutorial https://docs.microsoft.com/en-us/azure/media-services/media-services-rest-upload-files
And I tried to upload the file via postman. The section "Add connection values to your environment" states that user should fill the environment values before uploading a file. The problem I'm facing is that how can I get the value AzureADSTSEndpoint?
Besides, in the same section, it does not specify the path of file BigBuckBunny.mp4. How can you upload the file with postman?
In addition, is there any other docs I have to study if I want to achieve the goal as I mentioned above?
Please give me some suggestion.
Thanks in advance.

Hey @frankShih,
We have this question answered on our MSDN forum: https://social.msdn.microsoft.com/Forums/en-US/2131d586-c81e-4dc8-a87c-2e433056d3b2/cannot-find-the-value-of-the-field-azureadstsendpoint?forum=MediaServices
If you continue to have any issues, feel free to let us know and we'd be happy to help & provide clarity.


fix color of outcomes for crypto, keeping markets with No Contest sam…

…e colors as before, fix NFL Tie/No Contest outcome label

cherry-picked into release/1.2.0


Add Config groups to API

config groups and config needs to be available via API for the inventory plugin.

mentioned in commit 968b3a0f929b67b5a3b1d55e04419c2da78a725b

mentioned in commit 4fd157a785d354b2a97baaa1196d95bec3b5bdc2

mentioned in commit 65269382b3b228a89eab8f271189d2e6e4f13796

marked this issue as blocking nofusscomputing/projects/ansible/collections/centurion_erp_collection#3

mentioned in issue nofusscomputing/projects/ansible/collections/centurion_erp_collection#3

added 5m of time spent

mentioned in commit 40b83e4b289e6ebbab2e9cefe12e510cb67fb602

marked this issue as blocking nofusscomputing/projects/ansible/collections/centurion_erp_collection#4

mentioned in merge request nofusscomputing/projects/ansible/collections/centurion_erp_collection!2

mentioned in merge request nofusscomputing/projects/ansible/collections/centurion_erp_collection!7

mentioned in commit 281d839801154a9a440cd503afbc04586d648d21

mentioned in commit 3993cc96a5cc61b0ed455f2d2b0c21af100fe8c4

mentioned in commit 2f55024f0b34013ce944ec524094446705dcddc4

mentioned in commit 213644a51a11169fcb71251f967e074274918633


how to create border for pages ?

help me, how to create border for pages ?

Hello, you should ask on the html2pdf project : https://github.com/spipu/html2pdf.


Expand input_source_detect_input() to allow arrays and

https://github.com/JujuAdams/Input/commit/677acefd1e34271ea7322fd21680d68ecaecbe55


Center Menu Bar?

What would you guys think of centering the menu at the top for now? Given we have 8 buttons. We can always move it back when we get a logo. Not sure on the status of that.
@JoseRoman
@theseanconn

Go for it.
On Wed, Oct 28, 2015 at 9:27 PM, Ernie Wilson<EMAIL_ADDRESS>wrote:

What would you guys think of centering the menu at the top for now? Given
we have 8 buttons. We can always move it back when we get a logo. Not sure
on the status of that.
@JoseRoman https://github.com/JoseRoman
@theseanconn https://github.com/theseanconn
—
Reply to this email directly or view it on GitHub
https://github.com/KHS-Minithon/website/issues/44.

--
For The Fight. For The Cure. For The Kids,
Sean Connolly
Kennett High School Mini-THON Head
Website http://khsminithon.org
Event Page http://fourdiamonds.donordrive.com/event/khs16
Twitter  http://twitter.com/khsminithon
Instagram http://instagram.com/khsminithon

What kind of logo do you guys want?

The logo will be added when it is finished. We have people working on it here. We can figure out where to implement it when it is completed. Go ahead and center the menu @JoseRoman @Ernie3


Clean up CMakeLists

Hello, I'm a contributor to Apache Trafficserver and I'm part of an effort to move our build to CMake. One of our plugins depends on NuRaft, and I'm investigating how we should detect it in our build.  I am willing to PR the necessary changes to your CMakeLists.txt to export targets, to make this cleaner in the future. At the same time, I'm willing to do some other clean up; in particular, I am curious why you wrote your own logic to detect OpenSSL when find_package(OpenSSL) exists.

Looks like #358 already addresses that later concern. I would be happy to pick up that PR if the original author is no longer working on it.

Hi @JosiahWI
please go ahead and make a PR about exporting target. Let me review it.
Regarding Open SSL -- we don't want to break existing building script with pre-configured library path. If you can take over the PR and address the things I mentioned in the comment, that will be great. Thanks.


HiyaCFW-Helper Error: PLease update 7-zip.

I've updated 7-zip to the latest version and it did not help. windows 10, I've tried many different things nothing seems to work. The smaller window says Update 7-zip. Here is the log.
Opening HiyaCFW Helper...
Initializing GUI...
Searching for 7-Zip in the Windows registry...
TWLTool v1.6.1
by WulfyStylez
Special thanks to CaitSith2
CTR:
000000: 00 66 02 00 00 9a fd ff ff 99 fd ff 00 00 00 00  .f..............
Normalkey:
000000: 98 ee 80 80 00 6c b4 f6 3a c2 6e 62 f9 ec 34 ad  .....l..:.nb..4.
CTR:
000000: 00 76 02 00 00 8a fd ff ff 89 fd ff 00 00 00 00  .v..............
Normalkey:
000000: 98 ee 80 80 00 6c b4 f6 3a c2 6e 62 f9 ec 34 ad  .....l..:.nb..4.
Nintendo DS rom tool 1.24 - Nov  2 2005 00:24:53 by Rafael Vuijk (aka DarkFader)
TWLTool v1.6.1
by WulfyStylez
Special thanks to CaitSith2
reading consoleid/CID from nocashinfo block
Processing twln...
0.00 % complete.
12.14 % complete.
24.28 % complete.
36.42 % complete.
48.56 % complete.
60.70 % complete.
72.84 % complete.
84.98 % complete.
97.11 % complete.
100.00% complete.
Processing twlp...
0.00 % complete.
76.42 % complete.
100.00% complete.
Crypt complete!
ERROR: Data Error : title\00030017\484e4145\content\title.tmd

You might have an older version of 7-Zip installed also, uninstall all versions of 7-Zip before installing 19.00.
If you still get errors I would try redumping the NAND and see if that works.

Removed 7-Zip dependency in 7b1a92155e52f3e48a5c9f271fe7062d9cbe5f91
Closing ticket.


Allow changing sections at the segment level

Requires #41
Allow changing order/which sections should be emitted in each segment.
If this is not explicitly specified on a segment then fallback to the global setting

Done in commit https://github.com/decompals/slinky/commit/73885c2bfadc0ae0012fe5d903b5ba5dcc3b840c


Shop will falsey detect bookmarks

Describe the bug
Currently using bluestacks 64. After issuing shop command, the bot will correctly enter secret shop. The bot usually then detects a bookmark even if there's a lack of one, and try to buy it. Then proceeds to click on the skystones on the top and promptly visit skystone refill shop. I'm not sure if I've installed the bot incorrectly or if the bot itself isn't working. I've tried bluestacks client at different sizes and at fullscreen, but the problem still persists.
Steps to reproduce

Open Epic 7 to lobby
Open powershelll
Run epic7 shop
bot enters secret shop
about 80-90% of the time it falsely detects bookmark
tries to purchase
clicks on skystones at top right
prompts skystone refill shop

Additional context

Validations

[X] Check that there isn't already an issue that reports the same bug to avoid creating a duplicate.
[X] The provided reproduction is a minimal reproducible example of the bug.

Should have been fixed in some of the feature PRs, please open another ticket if the problem persists.


MeshForwarder: Check if child is marked in message child mask before decrease of mQueuedIndirectMessageCnt

Codecov Report

Merging #1455 into master will increase coverage by 0.02%.
The diff coverage is 71.42%.

@@            Coverage Diff             @@
##           master    #1455      +/-   ##
==========================================
+ Coverage   70.83%   70.86%   +0.02%
==========================================
  Files         143      143
  Lines       19498    19500       +2
  Branches     2385     2386       +1
==========================================
+ Hits        13812    13819       +7
+ Misses       4790     4785       -5
  Partials      896      896

Impacted Files
Coverage Δ

src/core/thread/mesh_forwarder.cpp
74.22% <71.42%> (-0.5%)
:x:

src/core/thread/lowpan.hpp
86.84% <0%> (-10.53%)
:x:

src/core/thread/network_data_leader_ftd.cpp
68.45% <0%> (-1.17%)
:x:

src/core/thread/lowpan.cpp
92.29% <0%> (-0.72%)
:x:

src/core/thread/network_data_leader.cpp
80.09% <0%> (-0.5%)
:x:

src/core/thread/mle_router.cpp
79.95% <0%> (-0.06%)
:x:

src/core/thread/mle.cpp
81.08% <0%> (ø)
:white_check_mark:

src/core/common/message.cpp
95.85% <0%> (+0.41%)
:white_check_mark:

src/ncp/ncp_base.cpp
37.54% <0%> (+0.52%)
:white_check_mark:

... and 4 more

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update c7dc5f5...badc84e. Read the comment docs.


DependsOnNot - added ability to set property as array

Added ability to set dependency for a field "being NOT equal to a LIST of values"

If this PR will be merged - there will be no need to merge this PR ("DependsOnNot bug fix with strict check"). Current PR already fixing that bug...


DatabaseException: Error updating 'CVE-2020-36569'

Describe the bug
classpath 'com.android.tools.build:gradle:4.1.1'
gradle version is: 7.0.2
after run ./gradlew dependencyCheckAnalyze
in logs falls down, this error:
org.owasp.dependencycheck.data.nvdcve.DatabaseException: Error updating 'CVE-2020-36569'
org.owasp.dependencycheck.data.update.exception.UpdateException: org.owasp.dependencycheck.data.nvdcve.DatabaseException: Error updating 'CVE-2020-36569'
	at org.owasp.dependencycheck.data.update.nvd.ProcessTask.processFiles(ProcessTask.java:157)
	at org.owasp.dependencycheck.data.update.nvd.ProcessTask.call(ProcessTask.java:114)
	at org.owasp.dependencycheck.data.update.nvd.ProcessTask.call(ProcessTask.java:41)
	at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
	at java.base/java.lang.Thread.run(Thread.java:829)
Caused by: org.owasp.dependencycheck.data.nvdcve.DatabaseException: Error updating 'CVE-2020-36569'
	at org.owasp.dependencycheck.data.nvdcve.CveDB.updateVulnerability(CveDB.java:823)
	at org.owasp.dependencycheck.data.update.nvd.NvdCveParser.parse(NvdCveParser.java:114)
Caused by: org.owasp.dependencycheck.data.nvdcve.DatabaseException: Error updating 'CVE-2020-36569'

	at org.owasp.dependencycheck.data.update.nvd.ProcessTask.importJSON(ProcessTask.java:141)
	at org.owasp.dependencycheck.data.update.nvd.ProcessTask.processFiles(ProcessTask.java:154)
	... 6 more
Caused by: org.h2.jdbc.JdbcBatchUpdateException: Value too long for column "VERSIONENDEXCLUDING CHARACTER VARYING(60)": "'0.0.0-20160722212129-ac0cc4484ad4_before_v0.0.0-20200131131040-063a3fb69896' (75)"; SQL statement:
INSERT INTO software (cveid, cpeEntryId, versionEndExcluding, versionEndIncluding, versionStartExcluding, versionStartIncluding, vulnerable) VALUES (?, ?, ?, ?, ?, ?, ?) [22001-214]
	at org.h2.jdbc.JdbcPreparedStatement.executeBatch(JdbcPreparedStatement.java:1269)
	at org.apache.commons.dbcp2.DelegatingStatement.executeBatch(DelegatingStatement.java:241)
	at org.apache.commons.dbcp2.DelegatingStatement.executeBatch(DelegatingStatement.java:241)
	at org.owasp.dependencycheck.data.nvdcve.CveDB.executeBatch(CveDB.java:1248)
	at org.owasp.dependencycheck.data.nvdcve.CveDB.updateVulnerabilityInsertSoftware(CveDB.java:1098)
Caused by: org.h2.jdbc.JdbcBatchUpdateException: Value too long for column "VERSIONENDEXCLUDING CHARACTER VARYING(60)": "'0.0.0-20160722212129-ac0cc4484ad4_before_v0.0.0-20200131131040-063a3fb69896' (75)"; SQL statement:

	at org.owasp.dependencycheck.data.nvdcve.CveDB.updateVulnerability(CveDB.java:816)
	... 9 more

Version of dependency-check used
classpath 'org.owasp:dependency-check-gradle:7.2.1'
classpath 'org.owasp:dependency-check-gradle:7.4.3'
Log file
When reporting errors, 99% of the time log file output is required. Please post the log file as a gist and provide a link in the new issue.
To Reproduce
Steps to reproduce the behavior:

run ./gradlew dependencyCheckAnalyze
See error

Expected behavior
task started and scan completed
Additional context
Add any other context about the problem here.

Same issue here. The problem is that the maximum length of the column is 60 characters whereas the versionEndExcluding of CVE-2020-36569 is of length 75.
To fix this a schema change similar to this one is needed:
https://github.com/jeremylong/DependencyCheck/blob/21b08b3b8368e224beeca346cfaa246ea8bb3ac9/core/src/main/resources/data/upgrade_5.1.sql#L1

Raised a PR which could be a potential fix for the issue : https://github.com/jeremylong/DependencyCheck/pull/5221
Please review the PR.

Hello @srini00088, I reviewed you PR I believe that should solve the issue. But I have a question if I'm using 6.0.2 version. Will the merging of these PR will solve the same problem in 6.0.2 version as well?

will this be released after merging? this currently breaks all our builds an we are wondering if we need to disable CVE scanning in general or if it is feasible to wait?

same here, all the pipelines are failing because of it, its trying to insert long value into varchar(60).
we need a fix asap please

Looking at CVE-2020-36569, it seems that when they modified it on 2023-01-05, they bungled adding the end version. The value is apparently the concatenation of the start and end versions, which makes it so long.

I think NVD is in error with the version string.
CVE-2020-36569:

Authentication is globally bypassed in github.com/nanobox-io/golang-nanoauth between v0.0.0-20160722212129-ac0cc4484ad4 and v0.0.0-20200131131040-063a3fb69896 if ListenAndServe is called with an empty token.

0.0.0-20160722212129-ac0cc4484ad4_before_v0.0.0-20200131131040-063a3fb69896 is a incorrect version.

@karstenspang @mlemmens I think you folks are right, the issue could be with CVE database, I have also reported an issue with https://cveform.mitre.org/

Short question: I'm using "dependency-check-maven" ... is there a way to say "ignore failed/crashed" plugin?

Short question: I'm using "dependency-check-maven" ... is there a way to say "ignore failed/crashed" plugin?

We use this ${cve.check.skip} which allows us to turn off the plugin by using this Maven parameter -Dcve.check.skip=false

Good idea. But I'm searching for something like "in case of errors (any), just show it but continue the build".

the same question, I'm using "dependency-check-gradle" ... is there a way to say "ignore failed/crashed" plugin? or how to avoid in further this issue?

I got nothing on this, we have had to temporarily turn off the plugin on all our pipelines until there is a fix

Short question: I'm using "dependency-check-maven" ... is there a way to say "ignore failed/crashed" plugin?

We use this ${cve.check.skip} which allows us to turn off the plugin by using this Maven parameter -Dcve.check.skip=false. Add this as a skip tag in the configuration

Sorry, doesn't work for me - I've got:
      <plugin>
        <groupId>org.owasp</groupId>
        <artifactId>dependency-check-maven</artifactId>
        <version>7.4.3</version>
        <executions>
          <execution>
            <configuration>
              <skip>true</skip>
...

but it still tries to update the database. (I've also tried <skip>false</skip> in case there's some reversed logic somewhere.)
Only thing I can think of is to comment out the whole plugin.

Isn't it good to have some automatic test before changing the CVE database and breaking thousands of projects all over the world?
I know it's a question more to the direction of CVE, but anyway, this behaviour is to be avoided.

We are also getting same error while running mvn site to generate vulnerability report.

Hello !
same here !

Same problem here, this bug breaks out build pipelines. So a fix asap is highly appreciated.

Same problem here

[ERROR] Unable to continue dependency-check analysis. [INFO] ------------------------------------------------------------------------ [INFO] BUILD FAILURE [INFO] ------------------------------------------------------------------------ [INFO] Total time:  03:55 min [INFO] Finished at: 2023-01-06T10:36:47Z [INFO] ------------------------------------------------------------------------ [ERROR] Failed to execute goal org.owasp:dependency-check-maven:7.4.3:check (default) on project config-service: Fatal exception(s) analyzing config-service: One or more exceptions occurred during analysis: [ERROR] 	UpdateException: org.owasp.dependencycheck.data.nvdcve.DatabaseException: Error updating 'CVE-2020-36569' [ERROR] 		caused by DatabaseException: Error updating 'CVE-2020-36569' [ERROR] 		caused by JdbcBatchUpdateException: Value too long for column "VERSIONENDEXCLUDING CHARACTER VARYING(60)": "'0.0.0-20160722212129-ac0cc4484ad4_before_v0.0.0-20200131131040-063a3fb69896' (75)"; SQL statement: [ERROR] INSERT INTO software (cveid, cpeEntryId, versionEndExcluding, versionEndIncluding, versionStartExcluding, versionStartIncluding, vulnerable) VALUES (?, ?, ?, ?, ?, ?, ?) [22001-214] [ERROR] 	NoDataException: No documents exist

The protection is not to make false assumptions about the names/ids one doesnt' control.

Same here, pipelines currently unusable, fails when updating CVE database with above mentioned error.

I hit the same problem today.
Most of the information is here so I won't repeat it I just want to add that I met this issue on 7.1.3 version then upgraded to latest 7.4.3 and the problem persists.

Me too

For Jenkins pipeline users I recommend to wrap the dependency check execution in a catchError block and have it in a separate stage. We have done that sometime ago as it's not the first time a CVE DB update breaks. That way builds continue and only the stage for the dependency check is marked as failed.
stage('Analyze dependencies') {
  catchError(buildResult: 'UNSTABLE', catchInterruptions: false, message: 'OWASP dependency check failed', stageResult: 'FAILURE') {
    sh 'mvn ...'
  }
}

Does any one got solution,
we're using Azure Pipeline, and facing same issue
- task: dependency-check-build-task@6     inputs:       projectName: $(set_project_name.project_name)       scanPath: '$(Build.SourcesDirectory)'       format: 'HTML'       reportsDirectory: '$(Agent.TempDirectory)'       dependencyCheckVersion: 6.5.3       additionalArguments: '--nodeAuditSkipDevDependencies --disableNodeJS --disableYarnAudit --disableOssIndex'

Running into this issue, can we please have an ETA on the fix?

Such issues are very critical for enterprise companies. It started to made us thought should we use dependency-check now? How can we make sure that such issues won't exist in future?

btw, for H2 Database there is no need to specify varchar length at all

Does any one got solution, we're using Azure Pipeline, and facing same issue

task: dependency-check-build-task@6
inputs:
projectName: $(set_project_name.project_name)
scanPath: '$(Build.SourcesDirectory)'
format: 'HTML'
reportsDirectory: '$(Agent.TempDirectory)'
dependencyCheckVersion: 6.5.3
additionalArguments: '--nodeAuditSkipDevDependencies --disableNodeJS --disableYarnAudit --disableOssIndex
`

You could add the following to your pipeline task, this won't solve the issue but should prevent your builds from failing.
continueOnError: true

Have reported the improper version-data at NIST NVD for correction on their side.
@jeremylong do you have time to integrate the PR (#5221 as is or in adapted form for a larger column size) and roll the release of 7.4.4?

We are also experiencing this issue - fix for this asap please.

For all suffering from it: if you use a persistent folder across builds (you do, don't you????) you can temporarily work around this issue by disabling the auto-update, which means dependency-check will only run against the already collected set of vulnerabilities and not discover new ones.
In any case I would recommend a setup where your build uses the CVE database as is (autoupdate disabled) and you run a scheduled job to perform the update of the CVE-database in the datadirectory from the NVD datastreams (update-only goal of maven-plugin / update Task of gradle plugin)

Same issue here. All builds are blocked now : nodejs and java, no exception. version of ODC 7.1.0

I increased column length to 90 in initialize.sql and upgrade_5.1.sql for columns "versionEndExcluding VARCHAR(90), versionEndIncluding VARCHAR(90),versionStartExcluding VARCHAR(90), versionStartIncluding VARCHAR(90)" and updated it in jars .But on running again getting same error .Running it via terminal .Any help on how to increase the length and run it via command line ? @aikebah

I increased column length to 90 in initialize.sql and upgrade_5.1.sql for columns "versionEndExcluding VARCHAR(90), versionEndIncluding VARCHAR(90),versionStartExcluding VARCHAR(90), versionStartIncluding VARCHAR(90)" and updated it in jars .But on running again getting same error .Running it via terminal .Any help on how to increase the length and run it via command line ? @aikebah

If you patched your local jars you should be able to purge the database and get it to work (but it will need purging as it will not upgrade your database, which is already upgraded to the expected version, so you need to force it to be recreated)

I disagree. Not blocking the build would allow CVEs like log4shell in your software, with the risk of being automatically deployed. Over the past years wrong or spurious CVEs (at least for me) have not been a problem at all. Occasionally there were false positives but those cases can easily be solved with the suppression.xml

I am having the same issue here when upgrading to v 7.4.3

I am having the same issue here when upgrading to v 7.4.3

This is completely unrelated to versions. Any version will run into it when attempting to update with the latest additions to the NIST NVD

To the very long list of people commenting your builds are broken -- you should not be using this plugin to block your builds!
Think about it -- if one of your dependencies is marked vulnerable, now you can't fix any bugs with your software, or even test it, until you patch or ignore the CVE! It's crazy.
  You're basically allowing strangers on the internet to block your internal processes whenever they want, for any or no reason.

To the very long list of people commenting your builds are broken -- you should not be using this plugin to block your builds!
Think about it -- if one of your dependencies is marked vulnerable, now you can't fix any bugs with your software, or even test it, until you patch or ignore the CVE! It's crazy.
  You're basically allowing strangers on the internet to block your internal processes whenever they want, for any or no reason.

Fyi, failBuildOnAnyVulnerability is by default false...the issue here happens before the scan

It's that the plugin breaks the build because internal DB is using much too restrictive limits on externally provided values, which is not the expected behavior.

60 characters in that strange a limit to a version-bound that should contain a single unique version of a software component. I presume you'd rather have us claim 2GB of your harddrive for an insane 2GB version number?

Instead of arguing if one or the other approach is correct, acknowledge that a lot of people are impacted by this situation, that appears quite simple to solve, and there is even a PR for it.
I suggest time is better spend fixing it...

By default the H2 database file gets created in /.m2/repository/org/owasp/dependency-check-data/7.0 directory with name odc.mv.db
We can access this database file using H2 console and run command to modify the column length.
I followed below step:

Downloaded the H2 database zip from https://github.com/h2database/h2database/releases/download/version-2.1.214/h2-2022-06-13.zip
Extracted it and from bin folder ran command 'java -cp h2-2.1.214.jar org.h2.tools.Shell'
It opened H2 shell
Entered below details in the shell:
URL-   jdbc:h2:.m2\repository\org\owasp\dependency-check-data\7.0\odc
Driver- org.h2.Driver
User-   dcuser
Password- DC-Pass1337!
Now in sql prompr run command 'ALTER TABLE software ALTER COLUMN versionEndExcluding SET DATA TYPE VARCHAR(100);'

NOTE:  is user's home directory

How many CVEs are fixed by checking the size of an input before doing something with it?

I increased column length to 90 in initialize.sql and upgrade_5.1.sql for columns "versionEndExcluding VARCHAR(90), versionEndIncluding VARCHAR(90),versionStartExcluding VARCHAR(90), versionStartIncluding VARCHAR(90)" and updated it in jars .But on running again getting same error .Running it via terminal .Any help on how to increase the length and run it via command line ? @aikebah

If you patched your local jars you should be able to purge the database and get it to work (but it will need purging as it will not upgrade your database, which is already upgraded to the expected version, so you need to force it to be recreated)

But how do I purge the database? Do we internally purge the old db and create new one on running 'sh dependency-check.sh'.I  could also find where h2 db is created .

By default the H2 database file gets created in userhome/.m2/repository/org/owasp/dependency-check-data/7.0 directory with name odc.mv.db We can access this database file using H2 console and run command to modify the column length. I followed below step:

Downloaded the H2 database zip from https://github.com/h2database/h2database/releases/download/version-2.1.214/h2-2022-06-13.zip
Extracted it and from bin folder ran command 'java -cp h2-2.1.214.jar org.h2.tools.Shell'
It opened H2 shell
Entered below details in the shell:
URL-   jdbc:h2:userhome.m2\repository\org\owasp\dependency-check-data\7.0\odc
Driver- org.h2.Driver
User-   dcuser
Password- DC-Pass1337!
Now in sql prompr run command 'ALTER TABLE software ALTER COLUMN versionEndExcluding SET DATA TYPE VARCHAR(100);'

NOTE: userhome is user's home directory

I couldn't find 'dependency-check-data' folder inside my user home .m2/repo . I ran ODC via command line.Is there any other place where we store the h2 db files.

I increased column length to 90 in initialize.sql and upgrade_5.1.sql for columns "versionEndExcluding VARCHAR(90), versionEndIncluding VARCHAR(90),versionStartExcluding VARCHAR(90), versionStartIncluding VARCHAR(90)" and updated it in jars .But on running again getting same error .Running it via terminal .Any help on how to increase the length and run it via command line ? @aikebah

If you patched your local jars you should be able to purge the database and get it to work (but it will need purging as it will not upgrade your database, which is already upgraded to the expected version, so you need to force it to be recreated)

But how do I purge the database? Do we internally purge the old db and create new one on running 'sh dependency-check.sh'.I also couldn't find where h2 db is created .( I don't have anything(such as data) inside .m2 repo )

For the CLI using your invocation that would be the command sequence
sh dependencycheck.sh --purge to purge it followed by sh dependencycheck.sh --updateonly  or a regular scan to trigger the recreation

I have no ability to add any sort of fixes or patches to our CVE environment,
nor do I have any choice of not running CVE check.
I can update the version of dependency check.
Waiting for mitre to fix a bug is a giant question mark, right?
Can we have a fix for dependency check where it can skip malformed CVE's?
Faster, hopefully, than miter can do something?

@ericgoffster see the linked PR (#5221).... integration and a release is to be expected later today
And it's not mitre, but NIST NVD team that needs to correct the entry. The CVE is correct, the linked CPE in NIST NVD is having an incorrect version stated (and it's a bug in DependencyCheck to break on it while NIST NVD allows the large version value)

builds are failing due to [ERROR] org.owasp.dependencycheck.data.nvdcve.DatabaseException: Unable to retrieve id for new vulnerability for 'CVE-2022-32923'
org.owasp.dependencycheck.data.update.exception.UpdateException: org.owasp.dependencycheck.data.nvdcve.DatabaseException: Unable to retrieve id for new vulnerability for 'CVE-2022-32923'

To the very long list of people commenting your builds are broken -- you should not be using this plugin to block your builds!
Think about it -- if one of your dependencies is marked vulnerable, now you can't fix any bugs with your software, or even test it, until you patch or ignore the CVE! It's crazy.
  You're basically allowing strangers on the internet to block your internal processes whenever they want, for any or no reason.

To the very long list of people commenting your builds are broken -- you should not be using this plugin to block your builds!
Think about it -- if one of your dependencies is marked vulnerable, now you can't fix any bugs with your software, or even test it, until you patch or ignore the CVE! It's crazy.
  You're basically allowing strangers on the internet to block your internal processes whenever they want, for any or no reason.

Fyi, failBuildOnAnyVulnerability is by default false...the issue here happens before the scan

you should not be using this plugin to block your builds! - I think that is a choice, maybe you want to have that as you a conservative approach as you are very security aware and prefer to have no build that one with any possible security concern. Sure you need processes in place to quickly resolve false positives. We prefer to have a DevSecOps tightly integrated into our build so it is detected immediately. Yes we allow strangers on the internet to develop software we depend on (that is the nature of open source), and some bad things can happen so we have processes in place to manage that.
If you are suffering from this problem, it is not good and due to you not having the level of control you need. This is a bug and they happen.
Best regards to the hard working team that manage this plugin! Great job!

What most want (including me) is an ETA for a fix.  If you cannot provide it, can you tell us where to get it from?
I would also suggest that extending the column width is at best a temporary patch.  I'd propose that what should happen is that a single incorrect row in the input shouldn't cause dependency check to fail, instead, it should report a warning that the database is malformed.
In regard to blocking builds, many who aren't using dependencycheck to block a build are still having build failures.
Dependency check produces a report for our builds via mvn, a failed dependency check does NOT block our builds.
However, a failed maven plugin that generates an exception does block the build.  Maven is reporting a build failure because the plugin generated an exception, not a failure because dependencycheck reported a vulnerability.

According to GitHub Actions, the build for release 7.4.4 is running. That should not take long. :+1:

@keithboone as noted in the PR.... the ETA is 'later today'. This is a small volunteer project of people that also have a day-job, so we do our best, but we cannot just 'drop all work and work on a fix' you'd have to resort to the paid security scanners for that. The tools all have a flag that skips the entire update, so if you have a local cached CVE database (which you should have, to avoid the constant recreation) you can avoid the issue by temporarily enabling the don't update my CVE DB flag of the tool that you use.

In regard to blocking builds, many who aren't using dependencycheck to block a build are still having build failures. Dependency check produces a report for our builds via mvn, a failed dependency check does NOT block our builds. However, a failed maven plugin that generates an exception does block the build. Maven is reporting a build failure because the plugin generated an exception, not a failure because dependencycheck reported a vulnerability.

Exactly this. We also don't have dependency-check configured to fail builds with vulnerabilities but the fact it fails in an unexpected way causes our pipeline to fail anyway.

@jeremylong @aikebah et al -- ty for your alacrity in resolving this issue. I'm sure everyone here will join me in saying we appreciate it and all'y'all for everything you're doing :smiley:

I would also suggest that extending the column width is at best a temporary patch. I'd propose that what should happen is that a single incorrect row in the input shouldn't cause dependency check to fail, instead, it should report a warning that the database is malformed.

Fully agree on that remark, something we should mainly take into account in the updates that are anyhow needed in response to the phase-out of the NVD datastreams (switch to API only) scheduled for September 2023 - https://nvd.nist.gov/general/news/change-timeline)

I also just want to express my gratitude for your work. If you would ask any big company for a immediate fix for their software, they would laugh you out of the room. Keep up the good work!

Just ran a test build through Azure DevOps against Release 7.4.4 and all appears well - thanks for the incredibly quick turnaround on a fix!

thanks for the quick turnaround! 👍🏼

Is it possible to get the 7.4.4 within a gradle plugin?

Now it works, thanks

Is it possible to get the 7.4.4 within a gradle plugin?

I have no doubt that Jeremy is working hard to get that one out as well. But that required first to have this project released

Is it possible to get the 7.4.4 within a gradle plugin?

I have no doubt that Jeremy is working hard to get that one out as well. But that required first to have this project released

@aikebah thank you for the update.

@aikebah @jeremylong  or anyone else who might happen to know...
I'm upgrading...
If I add the purge goal to my maven plugin, how often does that purge run? Or should I add it for the upgrade and then remove it?

no need to purge when upgrading. Upgrading will just work out-of-the-box. The purging was for Dnu12 who wanted to run with a manually self-patched version of 7.4.3.
When you run an analysis with ODC in its default configuration it will patch the database and succesfully update.

The codebase was using v6.0.3 -- are you saying that I did not need to upgrade it to pick up the new fix?
I realized we're pretty far behind the latest version and noted that v7.x.x would be a breaking change that requires the purge.
I attempted to update the version locally first, and the build failed until I added the purge goal.

I was hitting send just as you edited the comment.
I'll do the initial upgrade with the purge, then remove it. Thank you, @aikebah -- I appreciate your help!

The codebase was using v6.0.3 -- are you saying that I did not need to upgrade it to pick up the new fix?
I realized we're pretty far behind the latest version and noted that v7.x.x would be a breaking change that requires the purge.
I attempted to update the version locally first, and the build failed until I added the purge goal.

You need to upgrade, only 7.4.4 will work.
If codebase was still on v6.0.3 than ODC would IIRC provision a new data directory with a 7.x compatible database.
If that breaks on an unusable database a one-off purge should suffice

Any idea when its going to hit the Maven Repo https://mvnrepository.com/artifact/org.owasp/dependency-check-maven

Any idea when its going to hit the Maven Repo https://mvnrepository.com/artifact/org.owasp/dependency-check-maven

It's already available: https://repo1.maven.org/maven2/org/owasp/dependency-check-maven/7.4.4/
mvnrepository.com and search.maven.org don't index new artifacts immediately, but that doesn't mean the new version isn't ready to be downloaded.

The gradle plugin was also just pushed.

El complemento gradle también se acaba de impulsar.

Jeremy, is it possible to run dependency check with Gradle?

Any idea when its going to hit the Maven Repo https://mvnrepository.com/artifact/org.owasp/dependency-check-maven

It's already available: https://repo1.maven.org/maven2/org/owasp/dependency-check-maven/7.4.4/ mvnrepository.com and search.maven.org don't index new artifacts immediately, but that doesn't mean the new version isn't ready to be downloaded.

Seems to be failing still when we run this command org.owasp:dependency-check-maven:RELEASE:check
[2023-01-06T19:25:47.041Z] [2023-01-06T19:25:47.040Z] [ERROR] org.owasp.dependencycheck.data.nvdcve.DatabaseException: Error updating 'CVE-2020-36569'
[2023-01-06T19:25:47.041Z] [2023-01-06T19:25:47.041Z] org.owasp.dependencycheck.data.update.exception.UpdateException: org.owasp.dependencycheck.data.nvdcve.DatabaseException: Error updating 'CVE-2020-36569'

Add a -U to your command to force maven to check for the latest version, or even better: be explicit on the version you want (maven will only periodically check for a new stable version and rely on cached version metadata in the localrepository otherwise)

I know nobody uses ant, but ... I use ant. Is an ant bundle on the way? Today when my previous DC wasn't working, I upgraded to the latest 7.4.3 as recommended by DC before it failed. Running it again, it says that 7.4.4 is the latest and I should upgrade, but it doesn't look like downloads are available, yet.
I love the work OWASP is doing on this tool, btw.

Aha, I see it. Just not yet lined from the OWASP web site: https://github.com/jeremylong/DependencyCheck/releases/download/v7.4.4/dependency-check-ant-7.4.4-release.zip

@ChristopherSchultz was just about to tell you that URL, but you beat me to it

will the CLI update itself or do I need to pull a fresh copy when it's available?

will the CLI update itself or do I need to pull a fresh copy when it's available?

It is available (linked on the releases), but you'll have to download and unpack it yourself

Appreciate the quick turn around. Does the Jenkins Plugin (v5.2.0) cache the available versions to install?

Any information about Gradle?

Any information about Gradle?

Just browse a bit up https://github.com/jeremylong/DependencyCheck/issues/5220#issuecomment-1374031615

After updating from 7.4.3 to 7.4.4, I have this error in my Gitlab CI:
Caused by: org.h2.jdbc.JdbcSQLTransientException: Row not found when trying to delete from index "PUBLIC.IDXSOFTWARECPE: 12109601" [90112-214]

[ERROR] Failed to execute goal org.owasp:dependency-check-maven:7.4.4:aggregate (default) on project my-project: Fatal exception(s) analyzing my-project: One or more exceptions occurred during analysis:
[ERROR] 	UpdateException: org.owasp.dependencycheck.data.nvdcve.DatabaseException: Unable to retrieve id for new vulnerability for 'CVE-2020-25021'
[ERROR] 		caused by DatabaseException: Unable to retrieve id for new vulnerability for 'CVE-2020-25021'
[ERROR] 		caused by JdbcSQLTimeoutException: Timeout trying to lock table {0}; SQL statement:
[ERROR] DELETE FROM software WHERE cveid = ? [50200-214]
[ERROR] 		caused by DbException: Row not found when trying to delete from index "PUBLIC.IDXSOFTWARECPE: 12109601" [90112-214]
[ERROR] 		caused by JdbcSQLTransientException: Row not found when trying to delete from index "PUBLIC.IDXSOFTWARECPE: 12109601" [90112-214]
[ERROR] 	NoDataException: No documents exist
[ERROR] -> [Help 1]

¿What can I do? Thanks in advance

Looks like a corrupted H2 database to me at first sight. You could try a one-off build that uses
org.owasp:dependency-check-maven:7.4.4:purge org.owasp:dependency-check-maven:7.4.4:aggregate to clear out the data and recreate it (and then revert back to just the aggregate goal)
(I know maven-plugin of 7.4.4 can complete successfully as I've done successful updates of the CVEDB with maven in our CI infra)

FWIW 7.4.4 fixed the CLI issue for me - tytyty and have a rad weekend! :beers:

Thanx for fixing that fast!

Do we know how to consume the latest version through pypi package? I tried setting these two variables but still got the sql error:
export DEPENDENCY_CHECK_VERSION=7.4.4
export DEPENDENCY_CHECK_URL=https://github.com/jeremylong/DependencyCheck/releases/download/v7.4.4/dependency-check-7.4.4-release.zip
pip install 'dependency-check<1'

Looks like a corrupted H2 database to me at first sight. You could try a one-off build that uses org.owasp:dependency-check-maven:7.4.4:purge org.owasp:dependency-check-maven:7.4.4:aggregate to clear out the data and recreate it (and then revert back to just the aggregate goal) (I know maven-plugin of 7.4.4 can complete successfully as I've done successful updates of the CVEDB with maven in our CI infra)

That worked.
Thank you!

I think the problem with Gradle was solved, I'm doing analysis of different versions and it gives me successful results.

I think the problem with Gradle was solved, I'm doing analysis of different versions and it gives me successful results.

@Dhanxy Likely multiple versions work (as the database version is sufficiently compatible), but you will need 7.4.4 to run the upgrade-script and your safest bet would be to be in-sync on the version used).
Not sure whether that's easy to arrange within a Gradle environment. I'm more familiar with the maven environment where I advise (and practice) to use a property for the version in the pom.xml (set to a default value and updated to latest release during regular maintenance) which then gets a system- or user-wide override by that same property configured in the maven settings.xml, so that scans can use an updated version of the plugin without a need to first change the pom.xml (maven's counterpart of the build.gradle)

Hello, jenkins plugin still has 7.4.3 version as latest available.
Workaround for jenkins how to install latest 7.4.4 version is manuall instalation.

i think this ticket can be closed

Hi @srini00088,
I looked at your #5221. With my limited knowledge of this, I have a comment about the fix.

Do you think of a reason why this column size should be limited to a value that fixes the current scenario? What if another CVE with a longer string comes in the future?

I increased column length to 90 in initialize.sql and upgrade_5.1.sql for columns "versionEndExcluding VARCHAR(90), versionEndIncluding VARCHAR(90),versionStartExcluding VARCHAR(90), versionStartIncluding VARCHAR(90)" and updated it in jars .But on running again getting same error .Running it via terminal .Any help on how to increase the length and run it via command line ? @aikebah

If you patched your local jars you should be able to purge the database and get it to work (but it will need purging as it will not upgrade your database, which is already upgraded to the expected version, so you need to force it to be recreated)

But how do I purge the database? Do we internally purge the old db and create new one on running 'sh dependency-check.sh'.I also couldn't find where h2 db is created .( I don't have anything(such as data) inside .m2 repo )

For the CLI using your invocation that would be the command sequence sh dependencycheck.sh --purge to purge it followed by sh dependencycheck.sh --updateonly or a regular scan to trigger the recreation

After purging,I don't face above issue.But it got stuck for long time ( there's no issue with internet connection ).I checked this issue https://github.com/jeremylong/DependencyCheck/issues/4163 . But there was no response .Any help on that.( Just running the tool shouldn't be this hard I guess ? ).Thanks so much for all the help so far . @aikebah

I increased column length to 90 in initialize.sql and upgrade_5.1.sql for columns "versionEndExcluding VARCHAR(90), versionEndIncluding VARCHAR(90),versionStartExcluding VARCHAR(90), versionStartIncluding VARCHAR(90)" and updated it in jars .But on running again getting same error .Running it via terminal .Any help on how to increase the length and run it via command line ? @aikebah

If you patched your local jars you should be able to purge the database and get it to work (but it will need purging as it will not upgrade your database, which is already upgraded to the expected version, so you need to force it to be recreated)

But how do I purge the database? Do we internally purge the old db and create new one on running 'sh dependency-check.sh'.I also couldn't find where h2 db is created .( I don't have anything(such as data) inside .m2 repo )

For the CLI using your invocation that would be the command sequence sh dependencycheck.sh --purge to purge it followed by sh dependencycheck.sh --updateonly or a regular scan to trigger the recreation

After purging,I don't face above issue.But it got stuck for long time ( there's no issue with internet connection ).I checked this issue #4163 . But there was no response .Any help on that.( Just running the tool shouldn't be this hard I guess ? ).Thanks so much for all the help so far . @aikebah

Attaching image @aikebah

I increased column length to 90 in initialize.sql and upgrade_5.1.sql for columns "versionEndExcluding VARCHAR(90), versionEndIncluding VARCHAR(90),versionStartExcluding VARCHAR(90), versionStartIncluding VARCHAR(90)" and updated it in jars .But on running again getting same error .Running it via terminal .Any help on how to increase the length and run it via command line ? @aikebah

If you patched your local jars you should be able to purge the database and get it to work (but it will need purging as it will not upgrade your database, which is already upgraded to the expected version, so you need to force it to be recreated)

But how do I purge the database? Do we internally purge the old db and create new one on running 'sh dependency-check.sh'.I also couldn't find where h2 db is created .( I don't have anything(such as data) inside .m2 repo )

For the CLI using your invocation that would be the command sequence sh dependencycheck.sh --purge to purge it followed by sh dependencycheck.sh --updateonly or a regular scan to trigger the recreation

After purging,I don't face above issue.But it got stuck for long time ( there's no issue with internet connection ).I checked this issue #4163 . But there was no response .Any help on that.( Just running the tool shouldn't be this hard I guess ? ).Thanks so much for all the help so far . @aikebah

Report is generated now . But atleast we could show that report is being generated to avoid confusion.

I just wanted to thank from me and my team for the quick fix and all the work, that has been put in this project!
New version for Gradle plugin works and all is well! :)

Hi All. Thanks for all the work you're all putting in.
I'm working for NHS (UK National Health Service) and unfortunately all our pipelines are still broken. We use Maven and we're still seeing the following...
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:7.1.0:aggregate (default-cli) on project bcss-regression: Fatal exception(s) analyzing bcss-regression: One or more exceptions occurred during analysis: [ERROR] 	UpdateException: org.owasp.dependencycheck.data.nvdcve.DatabaseException: Error updating 'CVE-2020-36569' [ERROR] 		caused by DatabaseException: Error updating 'CVE-2020-36569' [ERROR] 		caused by JdbcBatchUpdateException: Value too long for column "VERSIONENDEXCLUDING CHARACTER VARYING(60)": "'0.0.0-20160722212129-ac0cc4484ad4_before_v0.0.0-20200131131040-063a3fb69896' (75)"; SQL statement: [ERROR] INSERT INTO software (cveid, cpeEntryId, versionEndExcluding, versionEndIncluding, versionStartExcluding, versionStartIncluding, vulnerable) VALUES (?, ?, ?, ?, ?, ?, ?) [22001-210]
I'm about to back out all dependency scanning, but before I do, has anyone any suggestions? We use docker containers so I thought it may be docker caching, but I've clearer the cache.
Thanks

Hi All. Thanks for all the work you're all putting in. I'm working for NHS (UK National Health Service) and unfortunately all our pipelines are still broken. We use Maven and we're still seeing the following...
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:7.1.0:aggregate (default-cli) on project bcss-regression: Fatal exception(s) analyzing bcss-regression: One or more exceptions occurred during analysis: [ERROR] UpdateException: org.owasp.dependencycheck.data.nvdcve.DatabaseException: Error updating 'CVE-2020-36569' [ERROR] caused by DatabaseException: Error updating 'CVE-2020-36569' [ERROR] caused by JdbcBatchUpdateException: Value too long for column "VERSIONENDEXCLUDING CHARACTER VARYING(60)": "'0.0.0-20160722212129-ac0cc4484ad4_before_v0.0.0-20200131131040-063a3fb69896' (75)"; SQL statement: [ERROR] INSERT INTO software (cveid, cpeEntryId, versionEndExcluding, versionEndIncluding, versionStartExcluding, versionStartIncluding, vulnerable) VALUES (?, ?, ?, ?, ?, ?, ?) [22001-210]
I'm about to back out all dependency scanning, but before I do, has anyone any suggestions? We use docker containers so I thought it may be docker caching, but I've clearer the cache. Thanks

you must be upgrade to 7.4.4 version. it will fix the problem.
thanks the all contributor of this project.

@marcochristoforou

org.owasp:dependency-check-maven:7.1.0:aggregate

indicates that your project is configured to run version 7.1.0 of ODC maven plugin.
It's likely configured in the pom.xml of that project to take version 7.1.0
Only using version 7.4.4 you will succeed to run the update.
Depending on how your CI infra is organized you might be able to get it rolling by running a one-off job that just runs mvn org.owasp:dependency-check-maven:7.4.4:update-only which would update the database in the maven local repository. (assumes you have build-infra that uses a single maven local repository for all builds)

Sorry all (@aikebah), yes, just sorted that. Be too keen to post, feeing left out I guess :D

On Java9 it raises the DataTimeException: https://github.com/gradle/gradle/issues/13763


Panel Forecasting Using Decision Trees/Decision Tree Ensembles

Is your feature request related to a problem? Please describe.
With reference to #1074
Given a dataset in Panel format, for .e.g

Time
Store Id
Sales

Jan
Store1
283

...
Store1
...

Dec
Store1
200

Jan
Store2
11

...
Store2
...

Dec
Store2
31

We need a make_panel_reduction with exogenous variables which transforms the data into the following format.
The IDs identifying multiple panels will be passed as Categorical Exogenous Variable.

Lag2
Lag1
Store Id
Target

283
205
Store1
Mar Sales S1

...
...
Store1
Dec Sales S1

11
13
Store2
Mar Sales S2

...
...
Store2
Dec Sales S2

So we can train a single model on the above reduced data set and have a Panel Forecaster. The Decision Tree/GBM/RF will make the first split based on the Panel Id(which will amount to maximum reduction of variance in the data), after which, to put it loosley - the case almost becomes univariate(internal to the Decision Tree), a naive  depiction below. (Plotting a feature importance plot for the Decision Tree should show the Panel ID column to be the most important one.)

Advantage-
In a practical setting where we have 1000s of SKU time series to train as in Retail, a Single Model will be sufficient instead of 1000 different univariate models.
Caveats -

Boosting models don't do well when it comes to capturing trend, this can be taken care of by using differences of the values across different lags as exogenous/ fitting a differenced series like ARIMA etc.

Note - Seasonality can be captured by using Date-time indicators like Month/Day of Week etc. as Categorical Exogenous variables.

Did not find any sound research paper on this yet.

References-

Notebook by microsoft
Something similar in Neural Nets by GluonTS

Describe the solution you'd like
A clear and concise description of what you want to happen, ideally taking into consideration the existing toolbox design, classes and methods.
Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.
Additional context
Add any other context or screenshots about the feature request here.

great idea!
Though this is obviously dependent on a panel forecasting design, which in turn is dependent on a consolidated set of panel data container conventions... any good ideas there, @satya-pattnaik?

your format is the "long" format, yes?

great idea!
Though this is obviously dependent on a panel forecasting design, which in turn is dependent on a consolidated set of panel data container conventions... any good ideas there, @satya-pattnaik?

Not sure about this, I have used pandas for such a work but that was very specific. Need to think about this. I hope I am getting you right here, when it comes to data container @fkiraly.

your format is the "long" format, yes?

Yes.

This approach is similar to "pooling" information across observational units in panel regression (there you might have intercepts different panel IDs if you aren't using a panel specific regression approach like fixed effects).
We may need to be careful how we treat the creating of the panel identification feature in the reduction. Some models can handle the categorical predictor, in which case the format @satya-pattnaik suggests would work, but may need this to be one-hot encoded.

just a stupid question: why can we not just have this as a multivariate (endog) forecasting problem? The make_reduction has probably anyway to be adjusted to handle this once we have multivariate interface. So the above example data would then just be:

Time
Sales_1
Sales_2
Sales_3
Sales_X

Dec
283
123
333
...

Jan
113
313
243
...

Feb
312
233
22
...

So we would have a vector forecast with n endog variables where n is the amount of stores. Having this data shape, we can just apply the make_reduction and you can use any tree-based model. So we would not need a make_panel_reduction function but just adjust the make_reduction to multivariate (if this is not yet the case, it has to be done anyway). The function you would need to bring your data into the data shape I wrote above could be done with some pandas functions probably. But this could be contributed maybe, if this kind of data shape (what you called panel data) is often used? Not sure on this 🤔

The format that you have shown here @aiwalter is suited for Vector Forecasting. Vector forecasting in such a scenario makes sense when there is inter-dependency between "Sales_1", "Sales_2"(might be because of competition).
A use case for this is - when forecasting sales of items inside the "same" category. Two items of same category but different brands might have inter-dependence(in their sales) because of promotions, discount on one affects the sales of the other(adversely).
CAT1_DELLT =  L1 * CAT1_DELLT-1 + L2 * CAT1_MACT-1 + e1
CAT1_MACT =  M1 * CAT1_MACT-1 + M2 * CAT1_DELLT-1 + e2
Here the forecast is based on "joint evolution" of both the series(for example).
However, I argue that it doesn't make sense to have Vector Forecast when we are considering data across different stores/geographic locations/categories as there might not be any inter-dependence.
For e.g in the M5 data - vector forecasting sales of items from "HOUSEHOLD" category and "FOOD" category will not be helpful.
I am not sure how to vector forecast using Decision Trees, the way that I know is the one I mentioned above(which is a proxy to vector forecasting) where we pass the "group ids" as categorical indicators and the lags to be grouped by the respective group ids.
Will be happy to discuss more on this.
Anything you want to add @ltsaprounis?

I take the liberty to quote this from Hyndman et al.
"There is a large overlap between global models and multivariate forecasting models, because both work on groups of time series. In practical terms, global models are univariate time series models, they only require observations of a single time series for forecasting, they use the group for finding good predictive functions. Consequently, global models are more generally applicable because they do not require observations from multiple time series at the time of forecasting. Multivariate models work on groups that are supposed to have some form of interaction or joint evolution, global models work on any group. For example, forecasting a pandemic with a global model can benefit from time series measured at different historic periods (separated by decades), controlled experiments or even different pathogens, while a multivariate model is limited to the evolution of the current one and factors that influence it. Another example could be electricity consumption patterns, a global model could pool data from different places around the world to find a shared pattern, while it is clear that completely unrelated households at different corners of the world will not benefit from a multivariate approach that used their joint evolution."

Anything you want to add @ltsaprounis?

Thanks @satya-pattnaik! Not much, just more quotes :smile:
These methods were used by the majority of the high ranking M5 submissions. The paper The M5 Accuracy competition: Results, findings and conclusions lists the findings from the accuracy comp in M5. One of the findings is the value of cross-learning:
" In the previous M competitions, most of the series were uncorrelated, of a different frequency and domain, and chronologically unaligned. Therefore, although both of the top-performing submissions of M4 considered “cross-learning” from multiple series concurrently, instead of one series at a time, their approach was difficult to implement effectively in practice, and did not demonstrate the full potential of the approach. In contrast, since the M5 consisted of aligned, highly-correlated series structured in a hierarchical fashion, “cross-learning” was made much easier to apply, achieving superior results when compared to methods that were trained in a series-by-series fashion. Note that, apart from resulting in more accurate forecasts, “cross-learning” implies the use of a single model instead of multiple ones, each trained on the data of a different series, thus reducing overall computational cost and mitigating difficulties related to limited historical observations. Essentially, all top 50 performing methods in M5 utilized “cross-learning”, exploiting all the information being offered by the dataset."
As mentioned above - in the case of M5 the global forecasting methods can also be seen as hierarchical as the product / store hierarchy was introduced in the model as categorical variables. Interested to hear @fkiraly's opinion on this and the implications on a hierarchical forecasting API!
In terms of the data container, in my custom implementation of this, I've used a long format pandas dataframe similar to the format from @satya-pattnaik  here:

We need a make_panel_reduction with exogenous variables which transforms the data into the following format.
The IDs identifying multiple panels will be passed as Categorical Exogenous Variable.

Lag2
Lag1
Store Id
Target

283
205
Store1
Mar Sales S1

...
...
Store1
Dec Sales S1

11
13
Store2
Mar Sales S2

...
...
Store2
Dec Sales S2

this has been implemented by @danbartl, with make_reduction being valid in the global case (instead of adding a different, make_global_reduction)


Implement removeAttr on DOMQueryResults

	{
		foreach($this->container as $node)
			if($node instanceof DOMElement)
				$node->removeAttribute($name);

		return $this;
	}```

This was added in https://github.com/PerryRylance/DOMDocument/commit/ba6fd0e910421d85c7ce65683a7c53a8bc35603b


[TECH DEBT] Leverage react query select field to allow for unique selected answers in questionnaire

Is there an existing issue for this?

[X] I have searched the existing issues

Konveyor version
latest
Priority
Minor
Current Behavior
https://github.com/konveyor/tackle2-ui/pull/1430#pullrequestreview-1658800558
Expected Behavior
No response
How Reproducible
Other (Add more details in 'Anything else')
Steps To Reproduce
No response
Environment
- OS:

Anything else?
No response

See https://github.com/konveyor/tackle2-ui/pull/1430#pullrequestreview-1658800558


Guids in custom.json only uses ratingKey from a single instance

If there is the same movie/show in multiple libraries, when using guids in custom.json, it only works on one of them, at least for blocking with tvdb://.

This is going to require a decent amount of work to fix, for now if you have the same content duplicated in multiple libraries I would just use the ratingKey and copy the entries, I'll try and get this fixed though


Add an idle timer to clear presence after a certain inactivity period

Noticed during use that if I dismissed the YT Music app outside my local network, the discord may be stuck in a playing state for long periods of time without me noticing.
Therefore, I'm adding an idle timer to clear the presence after no events were received for some period of time, default set to 15 minutes.

Will merge if I notice no issues after testing


Update the github workflow

Feature description
The github workflow is generating deprecation warnings and should be updated.
Describe the solution
Both workflows are generating these warnings. Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@v3, actions/setup-python@v4. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/. They are still running, but should be updated.
Describe alternatives
No response
Additional context
No response
Are you working on this?
None

hello @etpeterson let me fix this then, I can take another issue.

Actually, and strangely this broke the Algorithm Analysis workflow. https://github.com/OSIPI/TF2.4_IVIM-MRI_CodeCollection/actions/runs/8114822453
Any ideas why?

None yet, let me try look into it.

Thanks. To get those to run on your branch you can temporarily add yourself or your branch in the filter for the workflow. It's near the top of the workflow file. That way you can iterate easily and remove it later for the final merge.

@etpeterson I was able to fix the issue, the upload_artifact and download_artifact v4 actions are not yet supported for GHES. So, I had to downgrade it back to v3.

Ok, thanks!


Linger implementation

The added tests pass, but some other have been broken. Also, tests for checking the behaviour when fully shutting down the pusher should be added (instead of closing the sockets).

Despite tests passing, they don't pass for the case in which we call pusher.shutdown() instead of pusher.close_sockets(). I think it is related to the self._pyroDaemon.shutdown() call within kill(), but I'm not sure.

Removing the WIP tag. Perhaps we could close this PR and #84 , being aware of the current limitations (read comment above)?


Add Navbar on Home page

Description
Hey! I think it would be much easier to navigate if you have a navbar on the home page. I would like to do this. Kindly assign me this issue.
Screenshots

Additional information
No response

It's great having you contribute to Milan ! This is an auto-generated textThe maintainers/owner will look into the issue soon, add relevant tags and proceed further, please have paitence. Meanwhile feel free to support star the repo and share it with your friends. :nerd_face: :rocket:

Go ahead @snehafarkya

Make sure the navbar is transparent and sits on top of the image not above it
Make sure the navbar works and looks good in mobiles

hey @snehafarkya are you working on this ?

Hii @kirtanchandak ! Yeah I'm working on it.

Hi @snehafarkya , any updates on the issue ?
Please make PR within the next one day if possible.

Hello, can i work on this issue please?

Hey @IAmTamal  i would like to work on this issue if  possible...?


What about image and font?

I notice that npm-css only bundles css files, leaves image, font and other reference assets out. Because CSS always comes along with these, e.x. background-image: url('relative/path'), is there any plan to handle this?

nope, no plans


Add endpoints that allow range queries to get genes and variants from Monarch

@nathandunn Feel free to add more information about how these endpoints should look like.

Related to https://github.com/biolink/biolink-api/issues/26


[api-minor] Move the handling of unbalanced markedContent to the worker-thread (PR 15630 follow-up)

/botio test


[BUG]SR-IOV vGPU devices not showing up after enabling nvidia-driver-toolkit

Describe the bug
After enabling the addons for the nvidia-driver-toolkit and pcidevices-controller, no vGPU devices are enumerated in the Harvester UI
To Reproduce
Steps to reproduce the behavior:

Go to Addons, enable both pcidevices-controller and nvidia-driver-toolkit
Go to PCI Devices and search for NVIDIA devices and enable all of them

Expected behavior
I expected to see the NVIDIA GPUs listed under SR-IOV GPU Devices and / or vGPU Devices. Both tabs are empty
Support bundle
Support bundle attached to this report
Environment

Harvester ISO version: 1.3.2
Underlying Infrastructure: Baremetal with three Dell PowerEdge 740 nodes, with three NVIDIA Tesla T4 GPUs installed

Additional context
I have also attempted to do this on Harvester 1.4.0.rc5 and reproduced the same issue.
supportbundle_a8bd0764-a68e-4876-a0bc-f543ef68ac39_2024-11-09T00-09-05Z.zip

I forgot to note that no pods are created:

NVIDIA T4 does not support sriov based vGPU devices. There is a check in the controller code which labels the nodes when a supported GPU is found and that triggers deployment of the driver.

Really? Interesting because it claims it's SR-IOV capable:

This document also confirms SR-IOV support: https://www.nvidia.com/content/dam/en-zz/Solutions/Data-Center/tesla-t4/t4-tensor-core-product-brief.pdf on page 8

After some back-and-forth with Nvidia support to clarify the Tesla T4's non-support of SR-IOV, I'm wondering if I should make a feature request to add support for legacy vGPUs in Harvester. The T4 is enabled as a pcidevice for passthrough, so is there any solution to attach it to a VM that way?

the T4 can be fully passed through to the VM like any other pcidevice

Just to confirm, the PCI Device passthrough of the Tesla T4 works:


[Bug]:  use Select or Popver find:  Cannot destructure property 'name' of '_ref' as it is undefined.

Reproduction
s
Describe the bug

System Info
"devDependencies": {
    "@intlify/unplugin-vue-i18n": "^0.11.0",
    "@originjs/vite-plugin-federation": "^1.3.3",
    "@types/node": "^18.0.0",
    "@types/serialize-javascript": "^5.0.1",
    "@vitejs/plugin-vue": "^5.0.3",
    "@vue/test-utils": "^2.0.2",
    "@vue/tsconfig": "^0.1.3",
    "autoprefixer": "^10.4.19",
    "npm-run-all": "^4.1.5",
    "postcss": "^8.4.38",
    "sass": "^1.54.8",
    "svgo": "^3.0.2",
    "tailwindcss": "^3.4.1",
    "typescript": "^5.3.2",
    "vite": "^5.0.4",
    "vite-plugin-compression": "^0.5.1",
    "vite-plugin-svg-icons": "^2.0.1",
    "vue-tsc": "^1.8.24"
  }

"vue": "^3.4.0",

Contributes

[X] I am willing to submit a PR to fix this issue
[X] I am willing to submit a PR with failing tests

@jilongsong  can you share a minimal reproduction with this issue? This looks oddly specific issue that you are having, and we need input from you on how to re-create this issue

This is an issue with the Vue version. I upgraded it to the same version as the radix Vue and it was resolved


Add PointCloudTutorial.md

This tutorial describes how to use Zivid SDK to work with Point Cloud data.

Ready for the next round :)

Thanks!


How to assign a port to a service in k8s?

Is this a bug report or a feature request?:feature
What happened:A random port was assigned for my nginx service
What you expected to happen:I hope to access the nginx service through  IP:80，not IP:32675
I'd like to assign the PORT  for my service  while using Metallb, not a random port  that assigned by k8s,
Is there any way please?
How to reproduce it (as minimally and precisely as possible):
Anything else we need to know?:
Environment:

MetalLB version:
Kubernetes version:
BGP router type/version:
OS (e.g. from /etc/os-release):
Kernel (e.g. uname -a):

Can you please provide the output of kubectl get svc with your nginx service?
While it may look like it's listening on a random port, it should be listening on port 80 on the external IP assigned by MetalLB.

@jpds yes，here it is :
NAME                                TYPE           CLUSTER-IP       EXTERNAL-IP   PORT(S)
nginx                               LoadBalancer   <IP_ADDRESS>    <IP_ADDRESS>   80:32675/TCP

You specify the ports to use in the Service object. In your case, port 80 is configured so it should work on the EXTERNAL-IP specified. If it doesn't... Canned response below:

Sorry, but I no longer have the time to debug MetalLB deployments for people. I want to keep this tracker specifically for bugs and features, so I'm going to close this. At some point I may have time to write general troubleshooting documentation, but as a first step towards that I need to clear up the issue tracker.
You could try asking for help on the #metallb channel on the Kubernetes slack, where there are people other than me who can assist.


No gem found

The gem doesn't seem to be at https://rubygems.org.

Hi @straumer :wave: if you would like to use this gem, add it to your Gemfile like this:
gem 'solidus_stripe', git: https://github.com/solidusio-contrib/solidus_stripe.git
Let me know what you think!

Yep, did that. I'm testing it out at the moment. :)

Seems to do its job well with the solidus_backend and solidus_frontend. It'd also be nice if it had an option to use stripe.js version 3 out of the box, for better PCI-Compliance.

Thanks for mentioning. Would you mind to open a new issue for that? This issue can be closed as well.


inline specifier dissapeared in 2.5.0, causing compile error

Hi!
Why did you remove inline specifiers of methods in v2.5.0? They came in v2.2.0 simply dissapear after v2.3.0.
I am using Task class in my template class which is producing linking errors.
Each derived class giving me multiple definition error for each method of your library.
However I'd like to use features from v2.5.0, so i cant go back to v2.3.0.
Is there any chance to restore them?
Marci

The idea behind inlines was to make TS compatible with multiple tab scetches, which we achieved by other means (splitting .H files into definitions and implementation).
I don't have your use case in my scenarios, so never tested before release.
Could you please create an example sketch (similar to existing examples), and I will see how it should be resolved?.
Cheers.

I prepared an example.
Program contains a generic class as parent (TemplateClass) and 2 specialized, derived classes (DerivedClassA, DerivedClassB).
Generic class is header file only, has no implementation file. Also all template methods are inline by default! Each member class (Task in this case) must have the same structure. As long as ur lib contained inline specifier sketch compiled. (@2.3.0)
(explanation here)
TemplateClass
#ifndef CLASSTEMPLATE
#define CLASSTEMPLATE

#include <TaskScheduler.h>  //comment out this line to avoid linking error

template<typename T>
class TemplateClass {
public:
  void someMethod(T input);
  virtual void anotherDerivedMethod(T input)=0;
protected:
  Task _taskToDo; //comment out this line to avoid linking error
};

template<typename T>
inline
void TemplateClass<T>::someMethod(T input) {
    //template class method implementation
}
#endif

DerivedClassA
declaration - DerivedClassA.hpp
#ifndef CLASSA
#define CLASSA

#include "TemplateClass.hpp"

class DerivedClassA : public TemplateClass<char> {
public:
  void anotherDerivedMethod(char input);
};
#endif

implementation - DerivedClassA.cpp
#include "DerivedClassA.hpp"
void DerivedClassA::anotherDerivedMethod(char input) {
  //derived class method implementation
}

DerivedClassB - almost identical to DerivedClassA, but different specialization
declaration - DerivedClassB.hpp
#ifndef CLASSB
#define CLASSB

#include "TemplateClass.hpp"

class DerivedClassB : public TemplateClass<int> {
public:
  void anotherDerivedMethod(int input);
};
#endif

implementation - DerivedClassB.cpp
#include "DerivedClassB.hpp"

void DerivedClassB::anotherDerivedMethod(int input) {
  //derived class method implementation
}

main.cpp
#include <Arduino.h>
#include "DerivedClassA.hpp"
#include "DerivedClassB.hpp"

DerivedClassA* ca;
DerivedClassB* cb;

void setup() {
  ca = new DerivedClassA();
  cb = new DerivedClassB();
}
void loop() {}

environment:

platformio
esp8266

Best,
Marci

Thanks. Will look into this after the holidays.


Log some information when tryLock fail

#12444

Can one of the admins verify this patch?

@LuQQiu Thanks for the review, I push a new commit to address your comment, and reply your comments inline, PTAL.

@LuQQiu Thanks for correct these description and name of metrics, for the trylock, I revert it for this PR, I will track your PR #12507

@maobaolong the tryLock PR is deprioritized. After looking into the code, the most dangerous place is BlockReadHandler and ShortCircuitBlockReadHandler. a new PR https://github.com/Alluxio/alluxio/pull/12519 is added to clean the timeout locks with some risks

alluxio-bot, merge this please


fix unprivileged builds using tar and scratch imports

Umoci actually does try to lchown the newly initialized, empty,
oci layout when you unpack it.  So do so in a new userns.  This
requires a new 'stacker umoci init' subcommand since $golang.

Go modules maybe? :-(
On Tue, Mar 26, 2019, 9:30 AM Serge Hallyn<EMAIL_ADDRESS>wrote:

Why is 'go fmt' fetching all sorts of requirements? just format my code!
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/anuvu/stacker/pull/31#issuecomment-476704060, or mute
the thread
https://github.com/notifications/unsubscribe-auth/AAv61y3kqh7K2Egha3pSl4TWV5-KlBt7ks5vaj0YgaJpZM4cKnVf
.


vmagent: 1.96.0 -> 1.99.0

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://github.com/VictoriaMetrics/VictoriaMetrics/releases.
meta.description for vmagent is: VictoriaMetrics metrics scraper
meta.homepage for vmagent is: https://github.com/VictoriaMetrics/VictoriaMetrics/tree/master/app/vmagent
Updates performed

Golang update

To inspect upstream changes

Release on GitHub

Compare changes on GitHub

Impact
Checks done

built on NixOS
The tests defined in passthru.tests, if any, passed
found 1.97.0 with grep in /nix/store/3wiwfidk8iddi96l1a8myrpv80d1dlfs-vmagent-1.97.0
found 1.97.0 in filename of file in /nix/store/3wiwfidk8iddi96l1a8myrpv80d1dlfs-vmagent-1.97.0

Rebuild report (if merged into master) (click to expand)

1 total rebuild path(s)

1 package rebuild(s)

First fifty rebuilds by attrpath
vmagent

Instructions to test this update (click to expand)

Either download from Cachix:
nix-store -r /nix/store/3wiwfidk8iddi96l1a8myrpv80d1dlfs-vmagent-1.97.0 \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.
Or, build yourself:
nix-build -A vmagent https://github.com/r-ryantm/nixpkgs/archive/82c7eea5c9f56f5c598e5ba381fa40b6589c7d68.tar.gz

Or:
nix build github:r-ryantm/nixpkgs/82c7eea5c9f56f5c598e5ba381fa40b6589c7d68#vmagent

After you've downloaded or built it, look at the files and if there are any, run the binaries:
ls -la /nix/store/3wiwfidk8iddi96l1a8myrpv80d1dlfs-vmagent-1.97.0
ls -la /nix/store/3wiwfidk8iddi96l1a8myrpv80d1dlfs-vmagent-1.97.0/bin

Pre-merge build results
We have automatically built all packages that will get rebuilt due to
this change.
This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.
Result of nixpkgs-review run on x86_64-linux 1

1 package built:

vmagent

Maintainer pings
cc @NULLx76 for testing.

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://github.com/VictoriaMetrics/VictoriaMetrics/releases.
meta.description for vmagent is: VictoriaMetrics metrics scraper
meta.homepage for vmagent is: https://github.com/VictoriaMetrics/VictoriaMetrics/tree/master/app/vmagent
Updates performed

Golang update

To inspect upstream changes

Release on GitHub

Compare changes on GitHub

Impact
Checks done

built on NixOS
The tests defined in passthru.tests, if any, passed
found 1.97.1 with grep in /nix/store/vmihy1bd7n3v1wg0q4030jz5s3yy0r5r-vmagent-1.97.1
found 1.97.1 in filename of file in /nix/store/vmihy1bd7n3v1wg0q4030jz5s3yy0r5r-vmagent-1.97.1

Rebuild report (if merged into master) (click to expand)

1 total rebuild path(s)

1 package rebuild(s)

First fifty rebuilds by attrpath
vmagent

Instructions to test this update (click to expand)

Either download from Cachix:
nix-store -r /nix/store/vmihy1bd7n3v1wg0q4030jz5s3yy0r5r-vmagent-1.97.1 \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.
Or, build yourself:
nix-build -A vmagent https://github.com/r-ryantm/nixpkgs/archive/68c97ad96320abb7b43107ea4dad0a5db01b7fb1.tar.gz

Or:
nix build github:r-ryantm/nixpkgs/68c97ad96320abb7b43107ea4dad0a5db01b7fb1#vmagent

After you've downloaded or built it, look at the files and if there are any, run the binaries:
ls -la /nix/store/vmihy1bd7n3v1wg0q4030jz5s3yy0r5r-vmagent-1.97.1
ls -la /nix/store/vmihy1bd7n3v1wg0q4030jz5s3yy0r5r-vmagent-1.97.1/bin

Pre-merge build results
We have automatically built all packages that will get rebuilt due to
this change.
This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.
Result of nixpkgs-review run on x86_64-linux 1

1 package built:

vmagent

Maintainer pings
cc @NULLx76 for testing.

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://github.com/VictoriaMetrics/VictoriaMetrics/releases.
meta.description for vmagent is: VictoriaMetrics metrics scraper
meta.homepage for vmagent is: https://github.com/VictoriaMetrics/VictoriaMetrics/tree/master/app/vmagent
Updates performed

Golang update

To inspect upstream changes

Release on GitHub

Compare changes on GitHub

Impact
Checks done

built on NixOS
The tests defined in passthru.tests, if any, passed
found 1.99.0 with grep in /nix/store/x5d8cdis79ry6ixdrcpjgds6ca50jmcd-vmagent-1.99.0
found 1.99.0 in filename of file in /nix/store/x5d8cdis79ry6ixdrcpjgds6ca50jmcd-vmagent-1.99.0

Rebuild report (if merged into master) (click to expand)

1 total rebuild path(s)

1 package rebuild(s)

First fifty rebuilds by attrpath
vmagent

Instructions to test this update (click to expand)

Either download from Cachix:
nix-store -r /nix/store/x5d8cdis79ry6ixdrcpjgds6ca50jmcd-vmagent-1.99.0 \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.
Or, build yourself:
nix-build -A vmagent https://github.com/r-ryantm/nixpkgs/archive/44ac563981c21a7a51844c75fd7bdd8a2a7f96d8.tar.gz

Or:
nix build github:r-ryantm/nixpkgs/44ac563981c21a7a51844c75fd7bdd8a2a7f96d8#vmagent

After you've downloaded or built it, look at the files and if there are any, run the binaries:
ls -la /nix/store/x5d8cdis79ry6ixdrcpjgds6ca50jmcd-vmagent-1.99.0
ls -la /nix/store/x5d8cdis79ry6ixdrcpjgds6ca50jmcd-vmagent-1.99.0/bin

Pre-merge build results
We have automatically built all packages that will get rebuilt due to
this change.
This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.
Result of nixpkgs-review --extra-nixpkgs-config '{ allowInsecurePredicate = x: true; }' run on x86_64-linux 1

1 package built:

vmagent

Maintainer pings
cc @NULLx76 for testing.


Add additional search tags for interface styles and pve plugins

Just to note I used to the same pattern for searching descriptions that were used for names. Might need to be changed in the future depending on the length of plugin descriptions and the similarities between others

Can you squash 1st and 2nd commit together?

Can you squash 1st and 2nd commit together?

should be good now


Wrong Api Root in "

Let's say my apigility runs under http://example.com/api, with a service /test thus available under http://example.com/api/test. My issue: The buttons to "Try it out!" are sending their requests to http://example.com/test, which ofc will result in a 500 error every time.
I found that I could fix this in this module's Service.php by modifying $this->baseUrl (appending '/api'), but obviously that's not the intended way to do it.
So is this something I am doing wrong (and if so, how do I do it right?) or something the module is doing wrong?

This repository has been closed and moved to laminas-api-tools/api-tools-documentation-swagger; a new issue has been opened at https://github.com/laminas-api-tools/api-tools-documentation-swagger/issues/7.