"deny" action still passes the request down the filter chain?

Discussed in https://github.com/corazawaf/coraza/discussions/770

Originally posted by dspeg April 12, 2023
I am testing the Coraza Wasm Plugin on Envoy/Istio. I set up a SecRule to block certain requests in Phase 2 along with the setting SecDefaultAction "phase:2,log,deny,status:403".  When a request is blocked by this rule, the client gets back the expected status code "403". However the application protected by the Coraza WAF still receives the request and processes it. This is not expected.
I'm not sure whether I have misconfigured Envoy/Istio or I have missed some Coraza rules or configs. Please help troubleshoot this issue. Thanks!

First of all, thanks @dspeg for reporting this. What you are experiencing comes from a conceptually different behavior on how the request is handled by Envoy.
Envoy:

Aims to stream the request. Therefore, as soon as request headers are received (and in our case analyzed by Coraza at phase:1) they are sent upstream to the application. This breaks the ModSecurity (and CRS rules) axiom that the final deny/allow decision can be made at the end of phase 2, and only then the request will be sent upstream.
Is based on callbacks when certain events happen. If a request does not have a body, the OnHttpRequestBody is never called. This is something that happens in your case. Even if you have SecRequestBodyAccess Off, if OnHttpRequestBody would have been called, phase 2 rules would have been executed (with the variables available, not including of course the body itself), and a debug message would have been printed. See this code. Not seeing this message, I think that indeed your request does not have a boy, so phase:2 is just executed when is "too late", during OnHttpResponseHeaders. Please, take a look here. Your interruption log that reports phase "http_response_headers" confirms that.

In order to handle this problem we are mainly taking into account the following ideas:

Try to anticipate phase:2 evaluation during OnHttpRequestHeaders when no body is present. https://github.com/corazawaf/coraza-proxy-wasm/pull/128.  This might not cover all the cases (especially because of Chunked encoding), but it can come in handy.
MultiPhase evaluation. The idea is about evaluating the variables as soon as they are ready, not sticking necessarily when the phase is set inside the rule, but rather anticipating individual rules as much as possible.
An example based on the CRS rule in your report:
Rule 944150 comes with the following variables REQUEST_LINE|ARGS|ARGS_NAMES|REQUEST_COOKIES|REQUEST_COOKIES_NAMES|REQUEST_HEADERS|XML:/*|XML://@*. Based on this mapping  we know that, for example, REQUEST_HEADERS will be definitely read at phase:1 while XML at phase:2. Therefore REQUEST_HEADERS evaluation will be anticipated to phase:1, while for the XML variables, we will wait for phase:2.
What we are aiming for is to inspect all data that has been received so far as soon as possible to be able to say that, up to this point, they are "inspected and good to go". This, in conjunction with the early blocking CRS feature (https://github.com/corazawaf/coraza-proxy-wasm/pull/129), permits to effectively raise the anomaly score and eventually drop the request already at phase:1, before sending anything upstream.
It is experimental and it comes with complexity and not trivial corner cases, but in the last month, I think we made nice progress.
To learn more about it:

First PR and discussion: https://github.com/corazawaf/coraza/pull/565
Current open PR with some before/after that you can find interesting and more (raw) details on current limitations: https://github.com/corazawaf/coraza/pull/719
Proxy-wasm branch that relies on the current open PR: https://github.com/M4tteoP/coraza-proxy-wasm/tree/multiphase

Any early feedback, comment, or idea is very welcome!

More background info regarding the original issue:

The denied action is a "GET"
There is "SecRequestBodyAccess Off" in the Coraza WAF config.
The WAF is running on an Istio Sidecar proxy.

I did another round of testing. Note that I'm using a Wasm file built from a snapshot of the coraza-proxy-wasm project, with latest commit on Feb. 16, 2023.

The to-be-denied request is "POST", with a request body,  sent by "curl".
There is still "SecRequestBodyAccess Off".
The WAF is running on an Istio Sidecar proxy.
The blocking rule is in Phase 2.
Result is the request is still sent to the upstream app.
And no response is sent to "curl".

   Dummy pattern blocking, rule 201 [file ""] [line "0"] [id "201"] [rev ""] [msg "Dummy pattern blocking, rule 201"] [data ""] [severity "emergency"] [ver ""] [maturity "0"] [accuracy "0"] [hostname "<IP_ADDRESS>"] [uri "/sample-dotnet/v1.0/?param=attack_pattern_1"] [unique_id "lSrpZLlKiPoRuIBvZbA"]
2023-04-13T22:47:01.815380Z	debug	envoy wasm	wasm log istio-system.coraza-wasm: [lSrpZLlKiPoRuIBvZbA] [201] Finish evaluating rule 201
2023-04-13T22:47:01.815383Z	debug	envoy wasm	wasm log istio-system.coraza-wasm: [lSrpZLlKiPoRuIBvZbA] Finished phase 2
2023-04-13T22:47:01.815389Z	info	envoy wasm	wasm log istio-system.coraza-wasm: 10 interrupted, action "deny", phase "http_request_body"
2023-04-13T22:47:01.815397Z	debug	envoy http	[C1106807][S3828747809941241759] Sending local reply with details
2023-04-13T22:47:01.815417Z	error	envoy wasm	wasm log istio-system.coraza-wasm: interruption already handled, unexpected local response
2023-04-13T22:47:01.815439Z	debug	envoy http	[C1106807][S3828747809941241759] request end stream
2023-04-13T22:47:01.815955Z	debug	envoy client	[C1106771] response complete
2023-04-13T22:47:01.815987Z	debug	envoy router	[C1106807][S3828747809941241759] upstream headers complete: end_stream=true
2023-04-13T22:47:01.816011Z	debug	envoy router	[C1106807][S3828747809941241759] resetting pool request
2023-04-13T22:47:01.816046Z	error	envoy wasm	wasm log istio-system.coraza-wasm: interruption already handled, unexpected local response
`

After removing the config "SecRequestBodyAccess Off", I can still reproduce the problem.

The to-be-denied request is "POST", with a request body, sent by "curl".
The WAF is running on an Istio Sidecar proxy.
The blocking rule is in Phase 2.
Result:
The request is still sent to the upstream app.
And no response is sent back to "curl".

Let's dig into it.

The to-be-denied request is "POST", with a request body, sent by "curl".

We can expect a curl request like: curl -XPOST 'http://localhost:8080/' -H "foo:maliciousheader" --data "test data"

The blocking rule is in Phase 2
There is still SecRequestBodyAccess Off or the SecRequestBodyAccess directive is not added (So by default it is anyways Off)

We don't care about body access, therefore I'm guessing that the rule that we are running is checking something related to phase:1 (e.g. REQUEST_HEADERS or get ARGS)
So, we can have a config like this:
"rules": [
  "SecRuleEngine On",
  "SecDebugLogLevel 9",
  "SecRule REQUEST_HEADERS \"@rx maliciousheader\" \"id:102,phase:2,t:lowercase,deny,status:403\""
]

Request Lifecycle:

OnHttpRequestHeaders callback is triggered. Phase 1 is executed, but no rules are in place. Following the Envoy streaming logic, the headers are already streamed upstream, so the application receives them.
The request has a body (--data "test data"), therefore OnHttpRequestBody callback is triggered. The request body is not accessible. The callback logs Skipping request body inspection, SecRequestBodyAccess is off., but still proceeds to evaluate all the already populated variables (of course excluding the body itself). At this point, we have the match:
MATCH tx_id="..." rule_id=102 operator_function="@rx" operator_data="maliciousheader" arg="maliciousheader", the disruptive deny action is executed and the transaction is interrupted: Transaction interrupted tx_id="..." context_id=3 action="deny" phase="http_request_body". The client receives back a 403, while the application detects a connection that has been closed with an unexpected EOF:

2023/04/14 10:23:05 POST /
 > User-Agent: curl/7.87.0
 > Foo: maliciousheader
 > Content-Length: 5
 > Content-Type: application/x-www-form-urlencoded
 > X-Request-Id: 1ad85595-15e8-4f53-923a-af13c4973274
 > X-Envoy-Expected-Rq-Timeout-Ms: 15000
 > X-Forwarded-Proto: http
2023/04/14 11:23:05 failed to read request body: unexpected EOF

It happens because during phase 1 we already had elements that could have been evaluated, but it actually not happened, because the rule was expected to be executed only in phase 2. In the meanwhile, Envoy already started the connection to the application and started to stream data.
This is exactly the use-case that we are targeting with the MultiPhase evaluation, even if "SecRule REQUEST_HEADERS \"@rx maliciousheader\" \"id:102,phase:2,t:lowercase,deny,status:403\" is set to be fired at phase:2, we are aware that the REQUEST_HEADERS variable is already available at phase:1, therefore it is anticipated, the interruption is triggered at http_request_header phase (phase 1) and upstream does not receive any data.

And no response is sent back to "curl".

About this point, seeing the log line interruption already handled, unexpected local response, I really think you are experiencing the same issue you reported https://github.com/corazawaf/coraza/discussions/594. Would be great if you could also run here the more verbose coraza-proxy-wasm to dump the response headers. The more we collect the more we are able to correct it in an optimal way.

Thank you so much for going into the details to explain the issue!
I will run the testing suggested.

This is exactly the use-case that we are targeting with the MultiPhase evaluation, even if "SecRule REQUEST_HEADERS "@rx maliciousheader" "id:102,phase:2,t:lowercase,deny,status:403" is set to be fired at phase:2, we are aware that the REQUEST_HEADERS variable is already available at phase:1, therefore it is anticipated, the interruption is triggered at http_request_header phase (phase 1) and upstream does not receive any data.

I see a Multi Phase evaluation PR mentioned had been merged in Jan. 2023. We need more changes to support this feature?  Since my Wasm file was built in Feb. 2023, and multi phase evaluation is not working properly.
The suggested change to add "tx.early_blocking=1" to rule config should help some other cases. But it does not help my test case, and this is expected.

I have dumped more response headers using the provided wasm file.   Dummy pattern blocking, rule 201 [file ""] [line "0"] [id "201"] [rev ""] [msg "Dummy pattern blocking, rule 201"] [data ""] [severity "emergency"] [ver ""] [maturity "0"] [accuracy "0"] [hostname "<IP_ADDRESS>"] [uri "/sample-dotnet/v1.0/attack_pattern_1"] [unique_id "ajTHFIvXwSeKniCNuRi"]

2023-04-14T17:24:25.505638Z	debug	envoy wasm	wasm log istio-system.coraza-wasm: [ajTHFIvXwSeKniCNuRi] [201] Finish evaluating rule 201
2023-04-14T17:24:25.505641Z	debug	envoy wasm	wasm log istio-system.coraza-wasm: [ajTHFIvXwSeKniCNuRi] Finished phase 2
2023-04-14T17:24:25.505837Z	info	envoy wasm	wasm log istio-system.coraza-wasm: 9 interrupted, action "deny", phase "http_request_body"
2023-04-14T17:24:25.505862Z	debug	envoy http	[C1145970][S18915379674551781] Sending local reply with details
2023-04-14T17:24:25.505883Z	error	envoy wasm	wasm log istio-system.coraza-wasm: interruption already handled, unexpected local response
2023-04-14T17:24:25.505888Z	error	envoy wasm	wasm log istio-system.coraza-wasm: Dumping Added Response header: :status|444
2023-04-14T17:24:25.505892Z	error	envoy wasm	wasm log istio-system.coraza-wasm: Dumping Added Response header: x-envoy-peer-metadata|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
2023-04-14T17:24:25.505893Z	error	envoy wasm	wasm log istio-system.coraza-wasm: Dumping Added Response header: x-envoy-peer-metadata-id|sidecar~<IP_ADDRESS>~sample-dotnet-5d446868d7-m8cpf.sample~sample.svc.cluster.local
2023-04-14T17:24:25.505898Z	debug	envoy http	[C1145970][S18915379674551781] request end stream
2023-04-14T17:24:25.505925Z	debug	envoy connection	[C1145971] connected
2023-04-14T17:24:25.505943Z	debug	envoy client	[C1145971] connected
2023-04-14T17:24:25.505948Z	debug	envoy pool	[C1145971] attaching to next stream
2023-04-14T17:24:25.505951Z	debug	envoy pool	[C1145971] creating stream
2023-04-14T17:24:25.505955Z	debug	envoy router	[C1145970][S18915379674551781] pool ready
2023-04-14T17:24:25.506360Z	debug	envoy client	[C1145971] response complete
2023-04-14T17:24:25.506389Z	debug	envoy router	[C1145970][S18915379674551781] upstream headers complete: end_stream=true
2023-04-14T17:24:25.506404Z	debug	envoy router	[C1145970][S18915379674551781] resetting pool request
2023-04-14T17:24:25.506424Z	error	envoy wasm	wasm log istio-system.coraza-wasm: interruption already handled, unexpected local response
2023-04-14T17:24:25.506452Z	error	envoy wasm	wasm log istio-system.coraza-wasm: Dumping Added Response header: :status|404
2023-04-14T17:24:25.506456Z	error	envoy wasm	wasm log istio-system.coraza-wasm: Dumping Added Response header: content-length|0
2023-04-14T17:24:25.506458Z	error	envoy wasm	wasm log istio-system.coraza-wasm: Dumping Added Response header: date|Fri, 14 Apr 2023 17:24:24 GMT
2023-04-14T17:24:25.506459Z	error	envoy wasm	wasm log istio-system.coraza-wasm: Dumping Added Response header: server|Kestrel
2023-04-14T17:24:25.506462Z	error	envoy wasm	wasm log istio-system.coraza-wasm: Dumping Added Response header: x-envoy-peer-metadata|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
2023-04-14T17:24:25.506464Z	error	envoy wasm	wasm log istio-system.coraza-wasm: Dumping Added Response header: x-envoy-peer-metadata-id|sidecar~<IP_ADDRESS>~sample-dotnet-5d446868d7-m8cpf.sample~sample.svc.cluster.local
2023-04-14T17:24:25.506467Z	debug	envoy pool	[C1145971] response complete
2023-04-14T17:24:25.506469Z	debug	envoy pool	[C1145971] response before request complete
2023-04-14T17:24:25.506472Z	debug	envoy connection	[C1145971] closing data_to_write=0 type=1
2023-04-14T17:24:25.506476Z	debug	envoy connection	[C1145971] closing socket: 1
2023-04-14T17:24:25.506515Z	debug	envoy client	[C1145971] disconnect. resetting 0 pending requests
2023-04-14T17:24:25.506539Z	debug	envoy pool	[C1145971] client disconnected, failure reason:
2023-04-14T17:24:25.506545Z	debug	envoy pool	invoking idle callbacks - is_draining_for_deletion_=false
2023-04-14T17:24:25.506556Z	debug	envoy pool	[C1145971] destroying stream: 0 remaining
2023-04-14T17:24:26.824338Z	debug	envoy conn_handler	[C1145972] new connection from <IP_ADDRESS>:60138

I see a Multi Phase evaluation PR mentioned had been merged in Jan. 2023. We need more changes to support this feature? Since my Wasm file was built in Feb. 2023, and multi phase evaluation is not working properly.
Hi, I mainly pointed you all the PRs related to MultiPhase to give context about the ongoing work upstream (in the Coraza repo). A wasm file built in Feb. 2023 does not support multiphase, the feature has to be enabled at build time, and currently, it is not added in the main wasm build.
You can find it under the multiphase branch: enabling it is a matter of providing an extra build tag with a recent Coraza version or, even better for experimental tests, pointing to the following PR: https://github.com/corazawaf/coraza/pull/719

Addressed by multiphase evaluation that is enabled by default (see #194)


Add Platinum?

Platinum is a rare metal, and is also known as a "noble metal", which is the reason i'm bringing it up. Platinum is often used in machines and lab equipment that need to work with caustic chemicals, and also has found use in Catalytic Converters, a common part of modern combustion powered vehicles (That means cars).
The catalytics portion of this is the main reason to add it, as Platinum is a common catalyst for handling burn waste, processing naphtha into gasoline(!), and as a catalyst in fuel cells.
In terms of coloring it, it'd probably be advisable to take a leaf from Thermal Foundation's book and give it a metallic cyan color.

Thermal Foundation is Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International, so there wouldn't be legal issues.
Although I don't think using others' textures is a good idea, instead of using our own, so probably won't happen. (just saying)

@Pannoniae Will remove that note. I was thinking of the "ALL RIGHTS RESERVED" on the codebase, and decided to be blind at that moment.

@moonheart08 yeah, that's confusing :D Basically it says "all rights reserved, but we have the rights so here are the terms: - for code: don't be a jerk license, for assets: that"

@elesti added textures / jsons for platinum.

I don't like metallic cyan for platinum, it's one of the few boring white metals that truly, genuinely has a claim to being really, really white. So we went with white. But yes, absolutely!


Fixed theme variant properties

What does the pull request do?
Fixed theme variant properties: the names were wrong and the CLR properties have to be in the same class as the Avalonia property (also, changing the property owner doesn't seem to make any difference).
What is the current behavior?
It's impossible to bind to TopLevel.RequestedThemeVariant.
What is the updated/expected behavior with this PR?
It's possible to bind to TopLevel.RequestedThemeVariant. However, it's also possible to bind to any StyledElement.RequestedThemeVariant, so ThemeVariantScope seems to be useless (still testing things, not sure).
EDIT: Setting RequestedThemeVariant on controls works fine, so ThemeVariantScope actually doesn't seem to be needed.
How was the solution implemented (if it's not obvious)?
Moved the CLR property definition to StyledElement, where the Avalonia property is declared.
An alternative would be to remove the Avalonia property in StyledElement and make the one in TopLevel an AddOwner of the one in ThemeVariantScope.
Checklist

[ ] Added unit tests (if possible)?
[ ] Added XML documentation to any related classes?
[ ] Consider submitting a PR to https://github.com/AvaloniaUI/Documentation with user documentation

Fixed issues
Fixes #10309

You can test this PR using the following package version. 11.0.999-cibuild0029883-beta. (feed url: https://pkgs.dev.azure.com/AvaloniaUI/AvaloniaUI/_packaging/avalonia-all/nuget/v3/index.json) [PRBUILDID]

From my understanding, ThemeVariantScope and the lack of RequestedThemeVariant on all controls is because Avalonia has inheriting properties where UWP doesn't which may cause issues in contexts where a control is using an inherited property (e.g. Foreground)
From theme dictionary PR:

Each control has two properties: RequestedThemeVariant and ActualThemeVariant. RequestedThemeVariant is only accessible for Application, TopLevel (including Window), and ThemeVariantScrope controls. Potentially it can be added to the Page control to improve mobile support. We need this restriction because Avalonia has inheritable properties, while UWP does not. This would cause problems with font and background colors inherited from the parent which has different theme variant. While ThemeVariantScrope override most common inheritable properties.

RequestedThemeVariant actually exists on all controls as an Avalonia property. The CLR properties in TopLevel and ThemeVariantScope were simply getters/setters for that Avalonia property which were broken, i.e. binding from XAML didn't work.
As I suggested, it can also be moved to ThemeVariantScope and TopLevel would AddOwner, removing the one in StyledElement (so it couldn't be set on all controls).
There is also the option to "fix" the XAML compiler if this is actually a bug, allowing to have CLR properties in inherited types, but then the Avalonia property in the base class doesn't make much sense I guess?

As I suggested, it can also be moved to ThemeVariantScope and TopLevel would AddOwner, removing the one in StyledElement (so it couldn't be set on all controls).

Yes, I did that in this PR https://github.com/AvaloniaUI/Avalonia/pull/10149

Yes, I did that in this PR https://github.com/AvaloniaUI/Avalonia/pull/10149

Thanks, I missed that, I'll close this then.


persistence (a la memdb?)

When using this with Hyperdrive, you can't read a file without getting an improper length message. Hyperdrive calls the .close method after the write is finished and the data gets deleted.
Is this expected behavior?

2.0.0 does not clear the buffer on close

Does 4.1.0 clear the buffer on close?


bucc up fails on new repo

git clone https://github.com/starkandwayne/bucc.git
cd bucc
bucc up

Results are:
cp: /Users/drnic/Projects/bosh_deployments/bucc/ops/0-jumpbox-user.yml: No such file or directory
cp: /Users/drnic/Projects/bosh_deployments/bucc/ops/1-garden-runc.yml: No such file or directory
cp: /Users/drnic/Projects/bosh_deployments/bucc/ops/2-uaa.yml: No such file or directory
cp: /Users/drnic/Projects/bosh_deployments/bucc/ops/3-credhub.yml: No such file or directory
cp: /Users/drnic/Projects/bosh_deployments/bucc/ops/cpis/virtualbox/0-cpi.yml: No such file or directory
cp: /Users/drnic/Projects/bosh_deployments/bucc/ops/cpis/virtualbox/0-outbound-network.yml: No such file or directory
Opening file /Users/drnic/Projects/bosh_deployments/bucc/src/bosh-deployment/bosh.yml:
  open /Users/drnic/Projects/bosh_deployments/bucc/src/bosh-deployment/bosh.yml: no such file or directory

Exit code 1

Suggestion: automatically run git submodule update --init if files are missing

we are now using git subtree to get the latest bosh-deployment repo in our ci


Prevent syntax error

The trailing comma triggers an error when trying to execute the migration.

Same here. Had to fix manually

Thanks! Merged and released in 2.0.5.


useTransition causes rerender loop when array has fewer items

🐛 Bug Report
Each re-render useTransition is passed an array from state. This works fine when adding objects, but when objects are removed from the array it triggers a rerender loop.
possibly related: #636
To Reproduce
Steps to reproduce the behavior:
press the buttons in the sandbox
Expected behavior
The animation seems to get run properly, but the rerender loop is unexpected.
Link to repro (highly encouraged)
bug with useState hook: https://codesandbox.io/s/usetransition-bug-state-v49uq
bug with useReducer hook (slightly more complex): https://codesandbox.io/s/usetransition-bug-25xbr
Environment

react-spring v8.x.x or 9.x beta
react v16.8

The new useTransition api looks amazing - really looking forward to react-spring 9.
I found this issue after some maddening debugging, trying to figure out why my expired items were not unmounted. Do you think a quick note in your docs warning of this might be useful?
Also, no pressure of course, but can I ask when you hope to have the current canary released? Very eager to get my hands on it. Thanks for all the hard work - truly appreciated


update version note in README

What this PR does / why we need it:
this text made it seem like capk was only tested with v0.1.+, it as
now adjusted to say v1.+ with a note about manual testing.
Which issue this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close that issue when PR gets merged): fixes #
Special notes for your reviewer:
Release notes:

NONE

thanks @cyang49 seems like we have more cleanup to do to get this working with the 1.1.x versions of cluster api. it should work with the 1.0.x series though.

thanks @cyang49 seems like we have more cleanup to do to get this working with the 1.1.x versions of cluster api. it should work with the 1.0.x series though.

I'll try that and report back  when I can. Thanks!

@cyang49 i think it will still fail, i see the issue and will add it to this PR. i just need to test my solution.

i think we just need to update the sample template to follow this guidance https://cluster-api.sigs.k8s.io/developer/providers/v1alpha3-to-v1alpha4.html#required-cluster-template-changes
but i'd like to check the kustomize templates to make sure we haven't missed something.
/hold until we get more info here

@cyang49 i think it will still fail, i see the issue and will add it to this PR. i just need to test my solution.

You are right, it failed. I tried clusterctl 1.0.5
$ clusterctl version
clusterctl version: &version.Info{Major:"1", Minor:"0", GitVersion:"v1.0.5", GitCommit:"d2caa19f4469202b30f2c3ed288e5315c2abdeb7", GitTreeState:"clean", BuildDate:"2022-03-08T18:34:49Z", GoVersion:"go1.16.8", Compiler:"gc", Platform:"linux/amd64"}

Error is the same as using 1.1.3
$ clusterctl generate cluster wow --infrastructure kubemark --flavor capd --kubernetes-version 1.21.1 --control-plane-machine-count=1 --worker-machine-count=4 | kubectl apply -f -
cluster.cluster.x-k8s.io/wow created
dockercluster.infrastructure.cluster.x-k8s.io/wow created
dockermachinetemplate.infrastructure.cluster.x-k8s.io/wow-control-plane created
error: error validating "STDIN": error validating data: [ValidationError(KubeadmControlPlane.spec): unknown field "infrastructureTemplate" in io.x-k8s.cluster.controlplane.v1beta1.KubeadmControlPlane.spec, ValidationError(KubeadmControlPlane.spec): missing required field "machineTemplate" in io.x-k8s.cluster.controlplane.v1beta1.KubeadmControlPlane.spec]; if you choose to ignore these errors, turn validation off with --validate=false

thanks for confirming, i'm going to update the manifest and give it a try locally. hopefully i can post an update later today.

@cyang49 i found another issue, the image reference in the config template was wrong and pointing to an older location that doesn't exist anymore. i think i've got all the places that need changing, but we will have to make a new release before we use the workflow from the readme.

i think there might be an issue with our capd manifest as well, i am getting some kernel errors trying to mount the docker socket. i will keep tweaking this PR.

@cyang49 you might also try the e2e integration test scripts, https://github.com/kubernetes-sigs/cluster-api-provider-kubemark#running-integration-e2e-test
that will give you a cluster based on a similar workflow, but it will build all the artifacts locally.

ok, i thinik i've found all the issues and updated the artifacts here as well as the instructions.
i have also created a test release in my own fork to demonstrate how this works. if you follow the new readme, and replace the clusterctl.yaml file with the following:
providers:
  - name: "kubemark"
    url: "https://github.com/elmiko/cluster-api-provider-kubemark/releases/v0.3.1-test/infrastructure-components.yaml"
    type: "InfrastructureProvider"

you should be able to follow the instructions in the quickstart. be aware, i have noted that the tested environment is ubuntu server 22.04 and clusterctl 1.1.4. hope it works =)

given that we've merged #47, i want to update this for an upcoming v0.4.0 release.

i have updated this PR to be used as the release for version 0.4.0, i am going to propose an issue for the release and link it to this. i will remove the hold when we have agreement.
@agradouski ptal

/lgtm

thanks @agradouski , i'm planning to remove the hold and do the release tomorrow (22 July).

/cancel hold

/hold cancel


CI: test py3.6 instead of py3.4

This now passes on 3.6 without conda (installing everything from pip) and  with 3.5 + lightsource2-dev.
This fails with 3.5 + lightsource2-tag (https://github.com/NSLS-II/lightsource2-recipes/issues/97) and fails 3.6 + ligsource2-tag (https://github.com/NSLS-II/lightsource2-recipes/issues/95, will also hit 97).

We are testing pip-installed 3.6 deps and conda-installed 3.5 deps. I'm allowing the conda-installed 3.6 build to fail until we sort out the deps.


Hush Android compile warnings

A big deal of "warning: pointer is missing a nullability type specifier" kind of warnings were being generated from a third-party library when compiling for Android. This patch should silence those warnings

CI gfxreconstruct build queued with queue ID 810.

CI gfxreconstruct build # 2927 running.

CI gfxreconstruct build # 2927 passed.


Environment variable for root does not work

I'm trying to use teamocil with the root setting in my config. I have something like this:
windows:
  - name: some-name
    root: $WORKSPACE
    layout: even-horizontal
    panes:
      - commands:
        - cd my-project
        - git fetch

I have $WORKSPACE set to ~/dev/workspace and exported in my shell config (I'm using fish) but this is not working.
Running with the debug flag I see
tmux new-window -n 'some-name' -c '/Users/sahil/dev/$WORKSPACE'

Instead of resolving the variable to a path, it's instead appending it to my current directory and creating an invalid path.
Is this something that can be fixed?

This happens because the file is not 'parsed' by the shell, when you use commands on the terminal, the shell can look up the variable SAMPLE in your environment when you echo $SAMPLE. However, this file simply gets loaded into Teamocil as a string and no further parsing is done, except from YAML to a ruby hash, not even a shell nearby :)
I've created a pull request here: #121 but the tests aren't running and I'm not really sure why but the commits add a grand total of ~3 lines (including documentation note) enabling ERB support in the YAML config files. This allows you to do something like this instead:
windows:
  - name: some-name
     root: <%= ENV['workspace'] %>
     layout: even-horizontal
     ... snipped...

I'm unsure if it'll make it in the actual project, for now - I've created a fork which is at the time of writing on version 1.4.2.
To install the fork, one should first git clone my fork locally, then uninstall the teamocil gem with gem uninstall teamocil then cd into the fork directory and run rake install:local to build and install the forked version, you should be able to use the teamocil command like normal with the key difference being enabled ERB support :)


docs(rbac): additional docs for backend configuration

I struggled a bit after following the RBAC setup instructions to actually get things wired up correctly so I thought I might document the couple of missing steps that I discovered. Happy to tweak as needed.

/cc @PatAKnight @AndrienkoAleksandr

Thank you! Everything looks good, just one last thing. To keep consistent with the rest of the repo, do you mind updating your commit messages to:
docs(rbac): <commit_message>


chore: add jsdoc types for scripts

Types of changes

[x] Bug fix (a non-breaking change which fixes an issue)
[ ] New feature (a non-breaking change which adds functionality)
[ ] Breaking change (fix or feature that would cause existing functionality to change)

Description
This fixes a couple of minor issues and adds JSdoc comments to type repo scripts to help protect against future issues.
Checklist:

[ ] My change requires a change to the documentation.
[ ] I have updated the documentation accordingly. (PR: #)
[ ] I have added tests to cover my changes (if not applicable, please state why)
[x] All new and existing tests are passing.

Codecov Report

Merging #7458 into dev will increase coverage by 0.09%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##              dev    #7458      +/-   ##
==========================================
+ Coverage   70.23%   70.32%   +0.09%
==========================================
  Files          88       88
  Lines        3699     3704       +5
  Branches     1009     1010       +1
==========================================
+ Hits         2598     2605       +7
+ Misses        893      892       -1
+ Partials      208      207       -1

Flag
Coverage Δ

#unittests
70.32% <ø> (+0.09%)
:arrow_up:

Impacted Files
Coverage Δ

packages/generator/src/generator.js
85.07% <0.00%> (-0.36%)
:arrow_down:

packages/utils/src/cjs.js
69.69% <0.00%> (ø)

packages/config/src/config/_common.js
100.00% <0.00%> (ø)

packages/core/src/module.js
94.38% <0.00%> (+0.26%)
:arrow_up:

packages/webpack/src/config/base.js
62.98% <0.00%> (+0.48%)
:arrow_up:

packages/config/src/options.js
96.80% <0.00%> (+1.30%)
:arrow_up:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 8933d37...b2f2120. Read the comment docs.

Thanks @danielroe for improvements ☺
But i think having tsdocs for internal build scripts is unnecessary complexity until we migrate repo to typescript for nuxt3


Amplify console does not cleanup SSR resources for failed builds (Lambda@Edge and Cloudfront)

Before opening, please confirm:

[X] I have checked to see if my question is addressed in the FAQ.
[X] I have searched for duplicate or closed issues.
[X] I have read the guide for submitting bug reports.
[X] I have done my best to include a minimal, self-contained set of instructions for consistently reproducing the issue.

App Id
No response
Region
No response
Amplify Hosting feature
No response
Describe the bug
Hello,
After deleting Amplify project, Amplify did not delete all the Cloudfront and Lambda@Edge SSR resources, can you please help fixing this issue?
Expected behavior
Amplify to delete Cloudfront and Lambda when the project is deleted
Reproduction steps
1- Create many Cloudfront distribution with Lambda@Edge association to reach the account limit for Distributions per AWS account that can have Lambda@Edge functions https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cloudfront-limits.html#limits-lambda-at-edge
2- Create Amplify Nextjs project.
3- Delete Amplify project
Build Settings
No response
Additional information
No response

Hi @AbdullahBashatah, thanks for raising this issue with us. We have currently identified this as a bug and have added it to our product backlog.

Hi Guys,
Is there any update on this one?
This kinda feels like how the distributions used to behave


docker guide in v3 release is unreachable.

In v3 release, the docker guild
https://github.com/coreos/etcd/blob/master/Documentation/docker_guide.md is unreachable.

@gyuho can you fix this please?

Sure fixing now.

Just fixed. The correct link was https://github.com/coreos/etcd/blob/master/Documentation/op-guide/container.md#docker. (https://github.com/coreos/etcd/blob/release-3.0/Documentation/op-guide/container.md#docker for release 3.0)
Thanks a lot @siddontang


TypeError [ERR_INVALID_ARG_VALUE]: The argument 'path' must be a string or Uint8Array without null bytes

- Starting...
ℹ nexe 4.0.0-beta.15
✔ nexe 4.0.0-beta.15
- Finished in 1.976s
✔ Finished in 1.976s
TypeError [ERR_INVALID_ARG_VALUE]: The argument 'path' must be a string or Uint8Array without null bytes. Received '/zigbee2mqtt/node_modules/es5-ext/string/\x00#/contains/index.js'
    at Object.openSync (fs.js:468:10)
    at readFileSync (fs.js:377:35)
    at Object.load (/usr/lib/node_modules/nexe/node_modules/resolve-dependencies/lib/node-loader.js:111:25)
    at Loader.load (/usr/lib/node_modules/nexe/node_modules/resolve-dependencies/lib/loader.js:45:29)
    at /usr/lib/node_modules/nexe/node_modules/resolve-dependencies/lib/loader.js:79:48
    at Array.map (<anonymous>)
    at Loader.load (/usr/lib/node_modules/nexe/node_modules/resolve-dependencies/lib/loader.js:78:14)
    at /usr/lib/node_modules/nexe/node_modules/resolve-dependencies/lib/loader.js:79:48
    at Array.map (<anonymous>)
    at Loader.load (/usr/lib/node_modules/nexe/node_modules/resolve-dependencies/lib/loader.js:78:14)

When I look in the /zigbee2mqtt/node_modules/es5-ext/string/ directory, there is a directory named # which seems to get encoded somewhere and it breaks.
# ls -l /zigbee2mqtt/node_modules/es5-ext/string/
total 32
drwxr-xr-x    9 root     root          4096 Jan  2 18:23 #
-rw-r--r--    1 root     root           708 Oct 26  1985 format-method.js
drwxr-xr-x    2 root     root          4096 Jan  2 18:23 from-code-point
-rw-r--r--    1 root     root           287 Oct 26  1985 index.js
-rw-r--r--    1 root     root           291 Oct 26  1985 is-string.js
-rw-r--r--    1 root     root           205 Oct 26  1985 random-uniq.js
-rw-r--r--    1 root     root          1064 Oct 26  1985 random.js
drwxr-xr-x    2 root     root          4096 Jan  2 18:23 raw

The issue happened with the latest Nexe beta but the issue seems to be in this package. If it isn't the correct place to raise this issue, let me know :)

Oh and if you are short on time, let me know and I will try to debug some further!

Oh and if you are short on time, let me know and I will try to debug some further!

looks like an issue that was resolved in enhanced-resolve already. Should be fixed in https://github.com/nexe/resolve-dependencies/commit/9ab5cf68d4e815688928636f64f215537c0f0a60
Thanks for the report!

looks like an issue that was resolved in enhanced-resolve already. Should be fixed in https://github.com/nexe/resolve-dependencies/commit/9ab5cf68d4e815688928636f64f215537c0f0a60
Thanks for the report!

Ai bad news, sadly is doesn't seem fixed by the latest dependency bump. I just retried with the newest beta16 but the same error:
# nexe --build --target alpine --output zigbee2mqtt
 ---> Running in c90444410a79
- Starting...
ℹ nexe 4.0.0-beta.16
✔ nexe 4.0.0-beta.16
- Finished in 1.988s
✔ Finished in 1.988s
TypeError [ERR_INVALID_ARG_VALUE]: The argument 'path' must be a string or Uint8Array without null bytes. Received '/zigbee2mqtt/node_modules/es5-ext/string/\x00#/contains/index.js'
    at Object.openSync (fs.js:468:10)
    at readFileSync (fs.js:377:35)
    at Object.load (/usr/lib/node_modules/nexe/node_modules/resolve-dependencies/lib/node-loader.js:111:25)
    at Loader.load (/usr/lib/node_modules/nexe/node_modules/resolve-dependencies/lib/loader.js:45:29)
    at /usr/lib/node_modules/nexe/node_modules/resolve-dependencies/lib/loader.js:79:48
    at Array.map (<anonymous>)
    at Loader.load (/usr/lib/node_modules/nexe/node_modules/resolve-dependencies/lib/loader.js:78:14)
    at /usr/lib/node_modules/nexe/node_modules/resolve-dependencies/lib/loader.js:79:48
    at Array.map (<anonymous>)
    at Loader.load (/usr/lib/node_modules/nexe/node_modules/resolve-dependencies/lib/loader.js:78:14)

Ai bad news, sadly is doesn't seem fixed by the latest dependency bump. I just retried with the newest beta16 but the same error:
# nexe --build --target alpine --output zigbee2mqtt
 ---> Running in c90444410a79
- Starting...
ℹ nexe 4.0.0-beta.16
✔ nexe 4.0.0-beta.16
- Finished in 1.988s
✔ Finished in 1.988s
TypeError [ERR_INVALID_ARG_VALUE]: The argument 'path' must be a string or Uint8Array without null bytes. Received '/zigbee2mqtt/node_modules/es5-ext/string/\x00#/contains/index.js'
    at Object.openSync (fs.js:468:10)
    at readFileSync (fs.js:377:35)
    at Object.load (/usr/lib/node_modules/nexe/node_modules/resolve-dependencies/lib/node-loader.js:111:25)
    at Loader.load (/usr/lib/node_modules/nexe/node_modules/resolve-dependencies/lib/loader.js:45:29)
    at /usr/lib/node_modules/nexe/node_modules/resolve-dependencies/lib/loader.js:79:48
    at Array.map (<anonymous>)
    at Loader.load (/usr/lib/node_modules/nexe/node_modules/resolve-dependencies/lib/loader.js:78:14)
    at /usr/lib/node_modules/nexe/node_modules/resolve-dependencies/lib/loader.js:79:48
    at Array.map (<anonymous>)
    at Loader.load (/usr/lib/node_modules/nexe/node_modules/resolve-dependencies/lib/loader.js:78:14)

can you share what npm ls enhanced-resolve shows in your project with nexe installed?

can you share what npm ls enhanced-resolve shows in your project with nexe installed?

Of the project:
# npm ls enhanced-resolve
<EMAIL_ADDRESS>/zigbee2mqtt
`-- (empty)

Global installed nexe:
 # npm -g ls enhanced-resolve
/usr/lib
`--<EMAIL_ADDRESS>  `--<EMAIL_ADDRESS>    `--<EMAIL_ADDRESS>
What is expected as output? It seems to be the version you specified in
I created a branch with an easy to reproduce example:
https://github.com/LANsible/docker-zigbee2mqtt/tree/resolve-dependencies-bug
You can test it like this:
git clone https://github.com/LANsible/docker-zigbee2mqtt.git
cd docker-zigbee2mqtt
git checkout resolve-dependencies-bug
docker build . -t test
docker run -it test

That drops you to a rootshell within the project I am trying to build.
The source of the from image can be found here:
https://github.com/LANsible/docker-nexe

Of the project:
# npm ls enhanced-resolve
<EMAIL_ADDRESS>/zigbee2mqtt
`-- (empty)

Global installed nexe:
 # npm -g ls enhanced-resolve
/usr/lib
`--<EMAIL_ADDRESS>  `--<EMAIL_ADDRESS>    `--<EMAIL_ADDRESS>
What is expected as output? It seems to be the version you specified in
I created a branch with an easy to reproduce example:
https://github.com/LANsible/docker-zigbee2mqtt/tree/resolve-dependencies-bug
You can test it like this:
git clone https://github.com/LANsible/docker-zigbee2mqtt.git
cd docker-zigbee2mqtt
git checkout resolve-dependencies-bug
docker build . -t test
docker run -it test

That drops you to a rootshell within the project I am trying to build.
The source of the from image can be found here:
https://github.com/LANsible/docker-nexe

I am still seeing this issue with the beta17. Is there anything I can help to troubleshoot this?

I believe this is the same issue.
https://github.com/nexe/resolve-dependencies/blob/4cb15f6307fd067af722a71068753328febc5f41/src/node-loader.ts#L116
Until this is properly fixed I'm using this patch.
try {
    file.contents = readFileSync(absPath, 'utf-8');
} catch (error) {
    console.log('failed with %s', error.message);
    file.contents = readFileSync(absPath.replace('\x00', ''));
}

root@Devon:/usr/local/bin/node/api# ./node_modules/.bin/nexe ./dist/index.js
ℹ nexe 4.0.0-beta.17
✔ nexe 4.0.0-beta.17
✔ Finished in 7.548s
TypeError [ERR_INVALID_ARG_VALUE]: The argument 'path' must be a string or Uint8Array without null bytes. Received '/usr/local/bin/node/api/node_modules/es5-ext/string/\x00#/contains/index.js'

If you can reinstall this should be fixed in a patch version


[Feature]: Enable showing total in tooltip on AreaChart

What problem does this feature solve?
I use a stacked area chart because the total of the series added together is relevant. I want the user to be able to see the value of the top of the chart (all series added together) when they use a tooltip.
I can create a custom tooltip that shows the total but I want the default style of the tooltip which means I need to recreate this in my own custom component.
What does the proposed API look like?
prop on AreaChart that is something like tooltipShowTotal

@christopherkindl Makes more sense leave this to custom tooltip & blocks, wdyt?

Hi! Thank @goleary  you for submitting this feature request. This prop is very dependent on the data context of the chart. In our last minor update, we added a new customTooltip prop, where you can create a custom tooltip component fitting your needs. Hence, I am going to close this issue.

I've implemented using a custumTooltip for now, but I'd argue that area charts are used because the total is relevant, so the fact that it requires a custom implementation feels strange to me.

how we make tooltip clickable?

Hi, this is not possible.


allocpool: match pattern properly

Before it failed with
Argument "Binary file /proc/6780/cmdline matches\n" isn't numeric in numeric eq (==)
at /root/github.com/SUSE-Cloud/automation/scripts/mkcloudhost/allocpool line 32, <$fh> line 1.

tested it with
$num=1;
if(!$ENV{CHECKPROC} || `cat /proc/$num/cmdline` =~ m/$ENV{CHECKPROC}/) {
  print "match\n"
} else {print "no\n"}


Add support for B2C authorities

I just spent two days trying to understand what i am doing wrong. Now i searched the library for any reference of b2c or B2C. Seems that nothing is in there or commented out.
Please add support for B2C!

I have same scenarios, please add support for azure b2c.

Same here. This library seems to have been left out in the cold. No updates for B2C and "work in progress" code is present within package source code.

Hi, just wondering if there are any plans to schedule support for B2C?

There are no plans to support B2C in MSAL GO.


Controls in ListView.Header may end up in unload state after changing the ListView.ItemsPanel

Describe the bug
When changing the ItemsPanel value of a given ListView, the control child of the ListView.Header will be unload and reload again reusing the same instance.
Issue is that often a race condition occurs and the ListView.Header control child receive the load event first and then unload one, meaning we end up with controls in an unload state in the ListView.Header.
Steps to reproduce the bug
Create a UWP project with the following:
.xaml:
    <Page.Resources>
        <ItemsPanelTemplate x:Name="GridDisplayModeItemsPanelTemplate">
            <ItemsWrapGrid Orientation="Horizontal" />
        </ItemsPanelTemplate>

        <ItemsPanelTemplate x:Name="ListDisplayModeItemsPanelTemplate">
            <ItemsStackPanel />
        </ItemsPanelTemplate>
    </Page.Resources>

    <Grid>
        <Grid.RowDefinitions>
            <RowDefinition Height="Auto" />
            <RowDefinition Height="Auto" />
            <RowDefinition Height="*" />
        </Grid.RowDefinitions>
        <ListView
            x:Name="list"
            ItemsPanel="{StaticResource GridDisplayModeItemsPanelTemplate}"
            ItemsSource="{x:Bind Items}">
            <ListView.Header>
                <muxc:ProgressRing
                    HorizontalAlignment="Left"
                    VerticalAlignment="Center"
                    IsActive="True"
                    Loaded="ProgressRing_Loaded"
                    Unloaded="ProgressRing_Unloaded" />
            </ListView.Header>
        </ListView>

        <Button
            Grid.Row="1"
            Click="ChangeItemsPanel"
            Content="Change ItemsPanel" />

        <TextBlock
            x:Name="Status"
            Grid.Row="2"
            Padding="12"
            Foreground="Red"
            TextWrapping="Wrap" />
    </Grid>

.xaml.cs:
        public IEnumerable<string> Items { get => new[] { "Item1", "Item2", "Item3" }; }

        private void ChangeItemsPanel(object sender, Windows.UI.Xaml.RoutedEventArgs e)
        {
            Status.Text += "ItemsPanel: Changing\n";

            // Switching ItemsPanel
            list.ItemsPanel = list.ItemsPanel == ListDisplayModeItemsPanelTemplate
                ? GridDisplayModeItemsPanelTemplate
                : ListDisplayModeItemsPanelTemplate;

            Status.Text += "ItemsPanel: Changed\n";
        }

        private void ProgressRing_Loaded(object sender, Windows.UI.Xaml.RoutedEventArgs e)
            => Status.Text += $"ProgressRing#{sender.GetHashCode()}: Loaded\n";

        private void ProgressRing_Unloaded(object sender, Windows.UI.Xaml.RoutedEventArgs e)
            => Status.Text += $"ProgressRing#{sender.GetHashCode()}: Unloaded\n";

To repro, just click on the Button until the ProgressRing is no longer visible.
Expected behavior
While changing a ListView.ItemsPanel value the ListView.Header control child must always receive the unload and load event in the right order.
Screenshots

As you can see, based on its hashcode 23318221, the ProgressRing control instance is reused after updating the ListView.ItemsPanel. It also received the second load event before the unload event, which explains why the ProgressRing is not animated anymore due to its unloaded state.
NuGet package version
Microsoft.UI.Xaml 2.8.0
Windows app type

[ ] UWP
[ ] Win32

Device form factor
Desktop
Windows version
Windows 11 (21H2): Build 22000
Additional context
No response

Any update regarding this issue?

This is likely a dup of the issue mentioned here - https://github.com/microsoft/microsoft-ui-xaml/issues/1900


Inaccurate physics with simple bodies (RigidBodies can temporarily penetrate other PhysicsBodies)

Godot version:
v3.0.stable.official
OS/device including version:
Windows 10 Pro 10.0.16299 Build 16299
Issue description:
Simple 3d physics are not resolved correctly. Slow moving rigidbodies can enter/penetrate staticbodies at slow speeds. This collision is slowly corrected over several frames by pushing out the rigidbody. Setting the physics fps to a high value like 240 fps minimizes the problem, but it's still noticeable.
Sample Video
Steps to reproduce:
Add a staticbody as a ground. Add an rigidbody with a sphere collider and drop it from medium heights (10-20 Units).
Minimal reproduction project:
Left-Mouseclick accelerate rigidbody.
Physics_Issue.zip

This incorrect behaviour has been confirmed from multiple users in the comments of this post on reddit.

Related issue: https://github.com/godotengine/godot/issues/9071

I'm not sure if it is directly related to #9071. Since this is not about CCD. It's even unrelated to the physics backend bullet/godot.

btw, if anyone is reading this don't listen to those reddit comments by turning up the fixed fps value. this will make your game become distorted for other players.

https://github.com/godotengine/godot/issues/20105

looks like a CCD issue caused by too few solver iterations for the speed of the objects / timescale being used, however, seems like this is hardcoded whenever it's needed
maybe this can be added as a UI setting that users can tweak

Not sure if additional test-cases/experiences are wanted since it's been confirmed, but, I ran into this recently in 3.2.1-stable on Ubuntu 20.04 and put together one before I found this.
From my testing, CCD doesn't appear to make a difference and it only appears to noticeably affect certain shapes. In particular, boxes and convex colliders, cylinders appear to be covered by #27212 and #38426. Rotating on two axes appears like it may prevent/reduce the brief penetration, not sure if that's a clue as to the issue. I missed testing concave colliders unfortunately, but I can come back and add that when I have the chance. Both the Bullet and GodotPhysics backends appear to exhibit the behavior.
File: Physics.tar.gz
Video: https://youtu.be/WI5zC6CuA8k
Controls:
1 - Restart at 1.00x speed
2 - Restart at 0.50x speed
3 - Restart at 0.25x speed
4 - Restart at 0.10x speed
R - Restart without CCD
C - Restart with CCD
I tried to keep all of the collider settings at their defaults and scale the fixed process rate in slowmo to maintain the physics step size - so you can see what's going on.

IIRC CCD is MIA for quite some time? @Calinou

@Zireael07 Indeed, see #9071.

Confirmed reproducible in 3.3 with both Bullet and GodotPhysics (both with the MRP from https://github.com/godotengine/godot/issues/16505#issue-295677840 and the more advanced test suite from https://github.com/godotengine/godot/issues/16505#issuecomment-624102996).


Notifications: display value unit in Rx/Tx notification configuration

Add GiB after the edit box and change GB to GiB.

Feel free to assign it to me if you want to

Thanks. Assigned to you.
Note: For the Value edit box this needs to be done conditionally - only when Metric starts with network-.


Broken links in page

Above:
When configuring your experiments, you can enable the advanced setting featurization. The following table shows the accepted settings for featurization in the AutoMLConfig class.
https://docs.microsoft.com/en-us/python/api/azureml-train-automl/azureml.train.automl.automlconfig?view=azure-ml-py

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 585fff5e-cadd-8967-8c09-63d8afcb53b3
Version Independent ID: 95274303-b152-2ee8-113e-e0763beca7ed
Content: Create automated ML experiments - Azure Machine Learning
Content Source: articles/machine-learning/how-to-configure-auto-train.md
Service: machine-learning
Sub-service: core
GitHub Login: @cartacioS
Microsoft Alias: sacartac

@BillmanH Thank you for the feedback. We are actively investigating and will get back to you soon.

@BillmanH , thanks for your report! The link has been fixed, you should see the change live in a few hours. #please-close


Gives me error on Kali linux when running ./install.sh

sudo ./install.sh
[sudo] password for kali:
Hit:1 http://archive.ubuntu.com/ubuntu bionic InRelease
Get:2 http://kali.download/kali kali-rolling InRelease [30.6 kB]
Get:3 http://archive.ubuntu.com/ubuntu bionic-security InRelease [88.7 kB]
Get:4 http://archive.ubuntu.com/ubuntu bionic-updates InRelease [88.7 kB]
Reading package lists... Done
E: Release file for http://http.kali.org/kali/dists/kali-rolling/InRelease is not valid yet (invalid for another 2d 8h 59min 19s). Updates for this repository will not be applied.
E: Release file for http://archive.ubuntu.com/ubuntu/dists/bionic-security/InRelease is not valid yet (invalid for another 2d 15h 22min 25s). Updates for this repository will not be applied.
E: Release file for http://archive.ubuntu.com/ubuntu/dists/bionic-updates/InRelease is not valid yet (invalid for another 2d 15h 23min 27s). Updates for this repository will not be applied.
./install.sh: 2: winecfg: not found
./install.sh: 3: wine: not found
./install.sh: 4: wine: not found
./install.sh: 5: wine: not found
./install.sh: 6: wine: not found
Anyone know what to do?

the wine package will automatically install, as here you don't have a wine package, but I cancelled the installation when it was installing into my machine because I don't know about wine package, if you know about it you can go through with it by
typing the command sudo apt-get install wine
I think it might help ya and I will come back to reply if it works with me.
good luck :)

it looks like wine32 is missing, you should install it.
as root, please execute "apt-get install wine32"
wine: cannot find '/root/.wine/drive_c/Python27/python.exe'
Traceback (most recent call last):
File "bee.py", line 161, in
main()
File "bee.py", line 134, in main
os.rename('dist/k.exe', 'dist/' + name)
OSError: [Errno 2] No such file or directory
It shows this after i've installed the wine

It says to install wine32 .
but it gives error


fix: Joining with an invalid version

fix: #396

@SohKey I guess you can make some research work in here, but if it's not fixable on AresRPG, this pr should be closed

After some thinking, this is actually okay to have as a temporary fix. @SohKey can you just improve the end message similarly to https://github.com/aresrpg/aresrpg/blob/master/src/player/resource_pack.js
Note that later on we'll need to find a way to support multiple version of the same protocol


Initial continuous integration with Travis CI

Proposal of an initial continuous integration setup using Travis CI (see also #72).
If merged and enabled at Travis CI, code pushes to GitHub will automatically build the code and run a number of tests to verify the neo-cli functionality.

The steps executed by Travis CI are defined in .travis.yml
The proposed setup uses a Docker image based on the microsoft/dotnet:2.0-sdk base image to build the code
Currently 2 test stages are implemented:

neo-cli tests using expect: these tests interacts with neo-cli like any normal user, send commands and wait for correct output. This could catch errors like #70. Note: if output of neo-cli commands that are tested with expect change, the test-neo-cli.expect script will also need to be updated accordingly.
JSON-RPC tests: neo-cli is started in the background with dotnet neo-cli.dll --rpc, and the JSON-RPC api is tested with curl commands. Currently one json-rpc test is implemented: querying totalSupply of the RPX token. This can catch errors such as #71.

Example output of Travis CI: https://travis-ci.org/metachris/neo-cli/builds/322348356
This PR is an initial CI setup which can easily be extended with more tests in the future.
Looking forward to hearing your thoughts, and whether you are interested in all of those tests or just a part of it, or something completely different. I'd also like to know how you want to name the directory which contains the continuous integration scripts (in this proposal it's simply /ci).

I like these changes, they will add more robustness to this repo. Given the amount of functionality exposed through neo-cli for the main neo repo, we should try and restrict the testing to general neo-cli rather than trying to stretch tests to cover all neo functionality.
/ci is fine for folder name


Added HTML parsing to XML module, references #1240

Let me know if you'd like more tests. I think since the HTML parsing functions of libxml2 return the same document structure as the XML ones it isn't worth duplicating most of the tests that already exist.

Not to be done here, but something to think about in the mid-term if we're continuing to add HTML related functionality to the XML class is to rename it. The superset of XML and HTML would be SGML, though that is less well known, other candidates that quickly come to mind are Document or DOM.

body p { margin-bottom: 0cm; margin-top: 0pt; }

On 08/20/2015 02:53 PM, Jonne Haß
  wrote:

  Not to be done here, but something to think about in the
    mid-term if we're continuing to add HTML related functionality
    to the XML class is to rename it. The superset of XML and HTML
    would be SGML, though that is less well known, other candidates
    that quickly come to mind are Document or DOM.
  —
    Reply to this email directly or view
      it on GitHub.

+1 for Document::XML and Document::HTML

:+1: for Document from me.

Are there any issues with this PR that I need to fix before it is merged?

It no longer cleanly applies, so a rebase couldn't hurt, but I think it's just nobody with commit rights had the time to review it yet ;)

@ryanworl Your PR is perfect, it's just that right now I have time to merge it. I'll merge with the command line. I'll also try to add a way to parse an HTML from an IO.

@ryanworl Thanks!! :heart::yellow_heart::blue_heart::purple_heart::green_heart:

Maybe Document is too general, I actually don't mind the XML namespace... and then HTML is kind of like XML, so...

Ew, it really is not, sorry.


PhysicsDirectSpaceState2D.intersect_shape stops working when there are lots of Area2Ds

Tested versions
4.2.stable
System information
Windows 10
Issue description
Calling the function PhysicsDirectSpaceState2D.intersect_shape returns an empty array when there are many nearby overlapping Area2Ds.

In this GIF, the red circle is the intersect_shape call being made every physics frame. The lighter blue circle is the Area2D that we are trying to intersect. The darker blue circle is 3,000 Area2Ds on a separate collision layer.
Notice how the size of the return results array goes to 0 as the mouse gets closer to the 3,000 Area2Ds. You would expect that the results size is 1 as long as the red circle is over the lighter blue circle.
Steps to reproduce

Download the MRP
Enable visible collision shapes
Try mousing over the Area2Ds

Minimal reproduction project (MRP)
IntersectShapeTest.zip

Can you please try with 4.2.2 to make sure it's still occurring

This is because of the following:
https://github.com/godotengine/godot/blob/97b8ad1af0f2b4a216f6f1263bef4fbc69e56c7b/servers/physics_2d/godot_space_2d.h#L108
It should be documented and/or made configurable.
Making it configurable would require moving some memory allocations:
https://github.com/godotengine/godot/blob/97b8ad1af0f2b4a216f6f1263bef4fbc69e56c7b/servers/physics_2d/godot_space_2d.h#L111-L112


Xnero: Watch sbhilyrics(?!.com)

Xnero requests the watch of the watch_keyword sbhilyrics(?!\.com). See the MS search here and the Stack Exchange search in text, in URLs, and in code.

sbhilyrics(?!\.com) has been seen in 0 true positives, 0 false positives, and 0 NAAs.

Approved by Spevacus in Charcoal HQ


Error: The non-abstract class '$BuildContext' is missing implementations for these members:  - BuildContext.mounted

Flutter (Channel stable, 3.7.0, on Microsoft Windows [Version 10.0.22621.1194], locale en-US)

Fixed in https://github.com/ethanblake4/flutter_eval/commit/f04f972f43f8b7bea917025b4c50a90e297b7244


@EnableOAuth2Resource requires oauth2.client.clientId

So maybe I am missing something here.  I am trying to create an API-Gateway service.  It is configured with the oauth client information.  I have a separate service acting as the authorization service, it configures that client (the api gateway) to be able to access multiple resources.  On my resource I do not want to configure a client, just the resource id and the jwt endpoint.  Yet I cant because that annotation requires a client id.
In the docs it says this:
The @EnableOAuth2Resource annotation will protect your API endpoints if you have the same environment settings as the SSO client, except that it doesn’t need a tokenUri or authorizationUri, and it also doesn’t need a clientId and clientSecret if it isn’t using the tokenInfoUri (i.e. if it has jwt.* or userInfoUri).

This implies to me that I shouldn't need it.  I am thinking of the case where the resource does not have the need to act as a client at all.  Once I get everything in a halfway working state I can upload an example but let me know if I am missing something here.

The docs should be correct in principle. An integration test would be helpful if you want to help.

Here's a sample (one of a series of related samples I was planning on turning into some blogs): https://github.com/dsyer/security-micro-clients/tree/master/oauth2. I did make some changes to the resource server configuration in Spring Cloud, but I think this sample would have worked with RC1 with a bit of manual configuration of the secure paths in the UI.

Thanks Dave.  I am working on a sample that integrates all these concepts and spring-cloud modules mostly for my own understanding.  Its still a a WIP (but making progress :) ).   Once its done I will run it by you and if you think it would be useful I would be more then happy to contribute it to wherever


TempDir ignores errors in drop

Any reason why TempDir ignores errors when dropped?
I feel this is unsafe default behavior, as it could lead to a long-running process leaking temporary directories. To avoid this problem, a program must wrap TempDir and have the wrapper call TempDir::close in the wrapper's destructor—all to find out that an error occurred.
Here's an alternative. Suppose the TempDir destructor panicks on error instead of silently squashing it. This means a program's default behavior is to be notified of the error. If a program must prevent panicking—for whatever reason—then that program could do the wrapper thing and squash the error in the wrapper's destructor.
The alternative strategy is safer, as it requires action on the part of the programmer to ignore errors instead of requiring action on the part of the programmer to be notified of errors. In the case of TempDir's destructor, an error is probably a leak, the elimination of which is a big part of Rust's raison d'être.

Closing as working as intended, see comments here as well


ledger nano s support

Wondering if anyone has looked into this yet. Yubikey support ed25519, but the main advantage of a hardware wallet is displaying the transaction on the display so that you know what you are actually signing.  It looks like one would have to write a substrate app for bolos (the ledger os), which interprets the extrinsics for display.

Just recalling that was discussed a few times in public chats in Riot as well. Maybe @folsen can recall what was the conclusion?

It is part of the W3F grant program, https://github.com/w3f/Web3-collaboration/issues/14

Definitely something we want, but yes we'd have to write an app for it. If there's a grantee that can do it that'd be great, but lets keep an eye on this and try to make sure it looks like we'll have something in place for launch.

The main difficulty with the app is that runtime upgrades might break it. It looks like an interesting weekend project to get yubikey/nano s to sign transactions, without using the display. We need this for https://github.com/paritytech/ink/issues/134.
For this one needs to construct an apdu packet, and then send it to yubikey with pcsc-rust and the ledger using ledger-rs.

The main difficulty with the app is that runtime upgrades might break it.

That's why I'd wait as long as possible with it so we're reasonably sure that whatever we built it against is stable enough.

Should be done


viramate not working with gbfraiders

after I click in the join button nothing happens, with another tab/windows using the site/extension neither
in 2 different environment fedora/windows10

How did you install the Viramate extension? If it was not from the Chrome Webstore, you will need to change the Viramate ID in the Misc Settings of GBFRaiders.


When Clicking on awake buttonin taskbar the box is not appearing

Microsoft PowerToys version
0.84.1
Installation method
Microsoft Store
Running as admin
Yes
Area(s) with issue?
Awake
Steps to reproduce
clicking on awake not popping the dailogue box for awake , also when restated the pc the awake icon from taskbar which has been pinned disapperas , when trying turing of and on awake it in settings it appears back

PowerToysReport_2024-09-18-16-50-40.zip
✔ Expected Behavior
awake dailogue box opening and clicking keep awake indefinitely, keep awake for a time interval, keep awake until time expiration, keep screen on
❌ Actual Behavior
the dialogue box not appearing, also when restarted the icon from taskbar of awake disappears, appears when awake is turned off and on in settings

Other Software
No response

Duplicate of #34148


Current UI too big for Steam Deck screen

I can't see the bottom of the application on the Deck's native resolution, 1280x800. Maybe add a scroll bar or something?

Not a fix, but a quick work around I figured out - you can change the orientation of the Deck's screen to portrait in Display Settings which gives enough height to see the whole UI.

I am working on making the current design smaller, it should be ready in less than an hour.
But in the long run, I think it would be great with a Deck specific UI version.

This has now been solved in this release:
https://github.com/PhilipK/BoilR/releases/tag/v.0.9.7


Fix and Improve PistonMove event

Description

PistonMove event properties were incorrect and the code for it seemed to be somewhat outdated format wise. I added the PistonBlockActor class (though I had it extend NativeClass instead of BlockActor because for some reason doing that makes none of the methods I put on the class work, if there is a way to fix that lmk and I can make the change)
Motivation and Context

Fixes the PistonMove event
Types of changes

[x] Bug fix (non-breaking change which fixes an issue)
[x] New feature (non-breaking change which adds functionality)

Checklist:

[x] My code follows the code style of this project.
[x] I have tested my changes and confirmed that they are working

Not sure whats up with those dependency cylces, anyone able to help me pinpoint where that issue is?

Nevermind figured it out, that should not have taken 9 commits

I'm changing the project to use prettier and it seems it will make conflicts.
I'll merge it in manually. Thank you for your contribution.


Taxonomy term page css is broken

http://staging.beta.dosomething.org/volunteer/animals

This was fixed in #3724.


All functions should accept UUID as a string or buffer type

Created by: @bradtumy Sep 07 2021 at 16:23 CET
Last updated: Jul 18 2022 at 11:09 CET
ClickUp ID: IK-1448
StartForgottenPasswordFlowRequest expects a DigitalTwinID in UUID4 format.  I thought I could take the DigitalTwinID from the token introspection and use that.  I get an error that it’s not a UUID formatted string.  How should this be handled?
from
I have noticed that some uuid can't be properly encoded by grpc
https://github.com/indykite/jarvis-sdk-nodejs-proto/tree/uuid-encoding-fix includes fix but it fixes only getDigitalTwinall functions should accept either uuid as string or as buffer
9:37
seems that similar fix needs to be applied to all functions
Include unit tests.
9:3

Commented by: @bradtumy Sep 07 2021 at 16:24 CET
@bayegan Per slack conversation this morning, I've created this bug to fix how the functions accept UUID


Event Hubs: Update EventProcessorClient component to pull BlobClient from DI

Update AzureComponent to pass concrete AzureClientFactoryBuilder and remove TBuilder generic
Update associated components (RegisterClientFactory is replaced with concrete AddClient call)
Update launchSettings.json in EH sample AppHost
Update EventProcessorClient component to pull BlobServiceClient from DI

The BlobServiceClient is first looked for as a keyed service using settings.BlobConnectionName -- the serviceKey is always the same as the connectionName for keyed services. If this is not found, a default service is looked for. If this is not found, an InvalidOperationException is thrown with a helpful message. This is a breaking change from Preview 5.
Closes https://github.com/dotnet/aspire/issues/3254
Microsoft Reviewers: Open in CodeFlow

fyi @eerhardt


Addon releases

create new table
track releases over github api
create new page

Closed via https://github.com/componette/componette.com/commit/18fcbb4c30a62bf20deb565401d651bab09a28c3


net: lwm2m: LwM2M timeout recovery

LwM2M engine is blocking new notification send.
Notification or Send timeout trig Reconnect and registration state.
Send/Notification  message is blocked if client is not connected.

Signed-off-by: Juha Heiskanen<EMAIL_ADDRESS>

@SeppoTakalo @simensrostad @VeijoPesonen @rlubos Please review this.


ci: add github actions

Welcome to Codecov :tada:
Once merged to your default branch, Codecov will compare your coverage reports and display the results in this comment.
Thanks for integrating Codecov - We've got you covered :open_umbrella:


working on UI, needs to working on data.map ability, keeping response…

… info together.

Response info together with new card components that contain all info related to $cashtag


Exporting to js file?

Is there a way to export this as a bundled js file kinda like Stencil?

same important question

Hi @gino8080 and @alienfacepalm,
I've stumbled through this while searching for something else... I'm doing the bundling and exporting to a single JS file using Rollup. Here's my rollup.config.js:
`import typescript from "rollup-plugin-typescript2";
import resolve from "rollup-plugin-node-resolve";
import commonjs from "rollup-plugin-commonjs";
import replace from "rollup-plugin-replace";
export default {
input: "./src/index.tsx",
output: {
file: "./dist/bundle.js",
sourcemap: true
},
format: "esm",
plugins: [
resolve({
browser: true
}),
replace({
"process.env.NODE_ENV": JSON.stringify("production")
}),
typescript(),
commonjs({
include: ["node_modules/"],
exclude: ["/*.stories.js"],
namedExports: {
"node_modules/react/index.js": [
"Children",
"Component",
"PropTypes",
"createElement",
"useState",
"useEffect"
],
"node_modules/react-dom/index.js": ["render"]
}
})
]
};
`
Extract from this GitHub repo

It already is a bundled file: https://unpkg.com/react-to-webcomponent/dist/react-to-webcomponent.js. Is this what you are looking for?

We will put a link to this on the readme so people know about it.


Ceph rgw/podman pids limit

Description of problem:
RGW container fails to start (on a RHEL8 setup) with:
Jul 15 14:20:43 servera kernel: cgroup: fork rejected by pids controller in /machine.slice/libpod-54832992fcbbbf92b0d10d0491f7ff987728bec87c1c55b79cb3921c6f503f49.scope
Jul 15 14:20:43 servera conmon[34853]: terminate called after throwing an instance of 'std::system_error'
Jul 15 14:20:43 servera conmon[34853]:  what():  Resource temporarily unavailable
Jul 15 14:20:43 servera conmon[34853]: *** Caught signal (Aborted) **
Jul 15 14:20:43 servera conmon[34853]: in thread 7f5d605e1280

The podman default pids-limit is set to 2048.
$ grep . sys/fs/cgroup/pids/machine.slice/libpod-*/pids.max
sys/fs/cgroup/pids/machine.slice/libpod-9336707e04da464b9128b7c57a0ee9b70efc5acb5207ea03ab413583c2264283.scope/pids.max:2048
sys/fs/cgroup/pids/machine.slice/libpod-d0eb2257c2fb371e015af9b68c716ed280399d9d2e88925aad9323ac26f659f3.scope/pids.max:2048

While this value of 2048 is more than sufficient when the rgw thread pool size uses its default value of 512, when rgw thread pool size is increased up to a value near to the pids-limit value, it does not leave place for the other processes to spawn and run within the container and the container crashes.

Also the --pids-limit parameter isn't specific to podman, the same exists for docker too.

Just to clarify, --pids-limit is available for docker too but the default is different (4096 on docker 1.13.1 for instance).
@guits I'm wondering if we should just set unlimited pids for all containers. What do you think ?

@guits I'm wondering if we should just set unlimited pids for all containers. What do you think ?

that seems to be the easiest fix. I'm just not sure what could be the impact.

Just did the test on my lab using --pids-limit=0 (unlimited). The max is limited by the systemd setting DefaultTasksMax:

ansible@servera]# sudo systemctl show -p DefaultTasksMax
DefaultTasksMax=49484

[ansible@servera ~]$ sudo cat /sys/fs/cgroup/pids/machine.slice/libpod-907d46541475e6234f80c78facd3aeb9c552da0ae419c99df17d066000d220d3.scope/pids.max
49484

With the rgw thread pool size default value of 512 the pids.current value is:

[ansible@servera ~]$ cat /sys/fs/cgroup/pids/machine.slice/libpod-907d46541475e6234f80c78facd3aeb9c552da0ae419c99df17d066000d220d3.scope/pids.current
601

When increasing rgw thread pool size up to 2048:

[ansible@servera ~]$ cat /sys/fs/cgroup/pids/machine.slice/libpod-c9e69c9ab167f50a5a6f17a95501fcb97798c3069c35212f0ca9c9bd52262a3e.scope/pids.current
2137

Delta between rgw thread pool size and pids.current for both cases is 89...
Either we go for the unlimited value or we use some kind of formula to calculate the pids-limit for the container.

Just did the test on my lab using --pids-limit=0 (unlimited). The max is limited by the systemd setting DefaultTasksMax:

ansible@servera]# sudo systemctl show -p DefaultTasksMax
DefaultTasksMax=49484

[ansible@servera ~]$ sudo cat /sys/fs/cgroup/pids/machine.slice/libpod-907d46541475e6234f80c78facd3aeb9c552da0ae419c99df17d066000d220d3.scope/pids.max
49484

With the rgw thread pool size default value of 512 the pids.current value is:

[ansible@servera ~]$ cat /sys/fs/cgroup/pids/machine.slice/libpod-907d46541475e6234f80c78facd3aeb9c552da0ae419c99df17d066000d220d3.scope/pids.current
601

When increasing rgw thread pool size up to 2048:

[ansible@servera ~]$ cat /sys/fs/cgroup/pids/machine.slice/libpod-c9e69c9ab167f50a5a6f17a95501fcb97798c3069c35212f0ca9c9bd52262a3e.scope/pids.current
2137

Delta between rgw thread pool size and pids.current for both cases is 89...
Either we go for the unlimited value or we use some kind of formula to calculate the pids-limit for the container.

let's go with unlimited value

@guits I'm wondering if we should just set unlimited pids for all containers. What do you think ?

@dsavineau is that really relevant to do this for all Ceph services?

jenkins test centos-container-all_in_one

jenkins test centos-container-external_clients

jenkins test centos-container-update

jenkins test centos-non_container-all_daemons

jenkins test centos-non_container-collocation

jenkins test centos-non_container-lvm_osds

jenkins test centos-container-all_in_one

jenkins test centos-container-all_daemons

jenkins test centos-container-lvm_osds

jenkins test centos-container-lvm_batch

jenkins test centos-container-external_clients

jenkins test centos-container-all_in_one

See https://github.com/ceph/ceph/pull/42214 for the corresponding cephadm PR. Would be great, if someone could that PR pr over , as I'm too ignorant in this particularity.


VMware has changed the contents of the VMware Horizon Client.dmg breaking installation

The previous versions would have the .app inside a dmg. The latest version now has a .pkg to be installed inside the .dmg.

Fix submitted.


Fix Windows build for Neo DLR

Part of effort to fix Windows build for Neo DLR. See neo-ai/neo-ai-dlr#10

@hcho3 Looks like https://github.com/neo-ai/tvm/blame/dev/include/tvm/runtime/c_backend_api.h#L125-L127 breaks upstream unit test(https://github.com/neo-ai/tvm/pull/39). Could you take a look?

@wweic Let's revert this PR for now.


[v1.2][F14-B3] Investigapptor

Very thorough documentation of the new feathers, great! One suggestion is that you could use diagrams/examples to describe how a feature is implemented. Use of code snippets is good but should be minimal since code gets outdated very quickly. Try to draw some UML diagrams we learn so far and I believe that you are able to do that well 👍


Making transaction - request failed with status code 400

As reported by the user, when trying to send YTN to some address the transaction is not processed and error is displayed.

As per analysis of the relay api the transaction that was sent from mobile wallet was rejected due to:
66: min relay fee not met
Further investigation showed that default miner fee calculation for larger number of tx inputs was calculated using too small amounts.
Resolution:
update miner fee calculation for larger transaction size/number of txinputs.

OTA update was sent to the network so the fix should propagate and  autoupdate on user devices the next time the app is started (requires active internet connection and a couple of seconds to download the fix).
Do not uninstall the app. Just terminate the app (if in background) and start it anew.


SEAL can be found only for x86  on aarch64

Description
If you want to install with "pip install ." on an Raspberry Pi 4 (aarch64), you are receiving the following error message:
aarch64-linux-gnu-gcc -Wsign-compare -DNDEBUG -g -fwrapv -O2 -Wall -g -fstack-protector-strong -Wformat -Werror=format-security -g -fwrapv -O2 -fPIC -I/usr/include/python3.11 -I/home/skriesch/homomorphic/lib/python3.11/site-packages/numpy/_core/include -IPyfhel -IPyfhel/Afhel -IPyfhel/SEAL/SEAL/seal -I/home/skriesch/homomorphic/include -I/usr/include/python3.11 -c Pyfhel/Afhel/Afseal.cpp -o build/temp.linux-aarch64-cpython-311/Pyfhel/Afhel/Afseal.o -std=c++17 -O3 -DHAVE_CONFIG_H
      In file included from Pyfhel/Afhel/../SEAL/SEAL/seal/defines.h:68,
                       from Pyfhel/Afhel/../SEAL/SEAL/seal/bigpoly.h:8,
                       from Pyfhel/Afhel/../SEAL/SEAL/seal/seal.h:3,
                       from Pyfhel/Afhel/Afseal.h:41,
                       from Pyfhel/Afhel/Afseal.cpp:37:
      Pyfhel/Afhel/../SEAL/SEAL/seal/gcc.h:20:10: fatal error: x86intrin.h: No such file or directory
         20 | #include <x86intrin.h>
            |          ^~~~~~~~~~~~~
      compilation terminated.

Code To Reproduce Error

Clone the repo
Set the Python environment
Enter "pip install ."
SEAL can not be built for aarch64

Expected behavior
SEAL will be built
Workaround
Clone the MS SEAL Project and build for aarch64
Setup:

OS: Raspberry OS
Python:  3.11.2-1+b1 (arm64)
C compiler version: gcc 4:12.2.0-3  (arm64)
Pyfhel Version: master

I want to suggest a more maintainable solution of dependencies (like SEAL). Other projects are using makefiles with the feature to fetch special versions. Then you don't need "git clone" in your repository. Here is such an example for SEAL:
https://github.com/OpenMined/TenSEAL/blob/main/cmake/seal.cmake
Is that a possible solution for you as a replacement of the old SEAL version from 2 years ago?

@skriesch I'll take a look!


Agent Framework

Should be a framework package that glues together the chosen handlers, resolvers, stores, etc.
Protocols need to be implementable both inside the main Aries repo and outside by downstream repos. i.e., use decoupled patterns.
Should include a defaults Option that provides the (curated) default list of handlers, resolvers, stores, etc. to make a default instantiation of the framework easy.
Used by agent implementations (including reference agents).

The reference agent (#68) consumes this framework.

@troyronda @llorllale can this be moved to Development in Epics board ?


[STORY] Have direct links to the console from docs

For example, let's say we are guiding a user to create an application.
Instead of saying,
1. In the Asgardeo Console, Select the Develop > Applications.
2. Select Use Predefined and select Single-Page Application type.

we can directly link to https://console.asgardeo.io/develop/applications/templates and upon user login it should directly go to a URL like
https://console.asgardeo.io/t/<organization_name>/develop/applications/templates
where a user can directly do his task

This is a limitation in the Console UI. Because the console app is a SPA, it defaults every link to the homepage and then will let the user navigate. A static link from the docs or a blog or SO post should allow the user to end up at the right place with their most recent or default tenant. I have spoken to @darshanasbg about the improvement on the console side.

I looked up the issue is handled on the choreo side to see how the UX is working.
EX: https://console.choreo.dev/insights/devices and https://console.choreo.dev/insights/devices/ahdsfhjf
will both result in the user ending up on the https://console.choreo.dev/organizations/<org_name>/insights/devices page after auth flow.


Sum_Of_Two_Numbers

result must  be only out argument
dont assign values inside workflow as they must be passed from a seperate workflow

Please make changes

Changes Done @vajrang-b


Add license

From the headers of some files it would appear that this project is licensed under the 2-Clause BSD License. It would be helpful to add a LICENSE file.

The MIT License was pushed in a while ago now.


⚠ Samsung has degraded performance

In cc35dfc, Samsung (https://samsung.com) experienced degraded performance:

HTTP code: 200
Response time: 2839 ms

Resolved: Samsung performance has improved in d48ec83.


Obi integration in opam-check-all

For now kit-ty-kate/opam-check-all uses the obi library to the list of maintainers per packages but nothing more. To be able to use the obi fully in opam-check-all here what I would need:

[ ] Full logs: opam-check-all needs access to the full log of the opam build. It is "common" to see errors being displayed outside the "opam error square" either because it was too long, because there is not enough informations or because one of the dependencies failed (and is not retrievable outside of this particular combination, e.g. some particular mix of depopts or depexts makes it fail in a way it wouldn't otherwise). Access to the latest logs through a link seems doable (for 3 versions of OCaml, it takes about 2Go of disk space)
[ ] Obi.Index.params consistency: opam-check-all needs some kind of hint to know which versions of OCaml are available (are they hardcoded ?), whether x86_64 builds have been successfully done (can I be assured they are always available ?) and which distributions have been built. It might be good to have some kind of header in the index file to have this information available right away.

Concerning the distributions issue: I guess I'd have to make a ranking at some point. opam-check-all uses Debian Unstable as it seems to be the distribution with the most external package available (e.g. latest versions of LLVM, latest version of SDL used by tsdl, and so on…).
However if anybody have some hints about which distributions would be the most suited to display result by default (not Debian Stable in my opinion), it would be much appreciated.

I like the idea of the aggregate header indicating the total set of versions and architectures available. Related to #6 to make rendering easy for clients.  Also related to #9 because Obi needs to use ocaml-version instead of hardcoding OCaml compiler versions.


Hosting archive via rsync

You can also rsync/SSH to a Mac if Remote Login is enabled in Sharing. I'll have to test this out at some point if no one else does. Should be pretty much the exact same.


Compile error with .net core 5.0.1?

I updated all my packages to 5.0.1 today but there is now a compilation error due to version conflict:
4>C:\Source\CAIRS\CAIRS.UnitTests\CAIRS.UnitTests.csproj : error NU1107: Version conflict detected for Microsoft.CodeAnalysis.CSharp.Workspaces. Install/reference Microsoft.CodeAnalysis.CSharp.Workspaces 3.8.0 directly to project CAIRS.UnitTests to resolve this issue.
4>C:\Source\CAIRS\CAIRS.UnitTests\CAIRS.UnitTests.csproj : error NU1107:  CAIRS.UnitTests -> CAIRS -> Microsoft.VisualStudio.Web.CodeGeneration.Design 5.0.1 -> Microsoft.VisualStudio.Web.CodeGenerators.Mvc 5.0.1 -> Microsoft.VisualStudio.Web.CodeGeneration 5.0.1 -> Microsoft.VisualStudio.Web.CodeGeneration.EntityFrameworkCore 5.0.1 -> Microsoft.VisualStudio.Web.CodeGeneration.Core 5.0.1 -> Microsoft.VisualStudio.Web.CodeGeneration.Templating 5.0.1 -> Microsoft.VisualStudio.Web.CodeGeneration.Utils 5.0.1 -> Microsoft.CodeAnalysis.CSharp.Workspaces (>= 3.8.0)
4>C:\Source\CAIRS\CAIRS.UnitTests\CAIRS.UnitTests.csproj : error NU1107:  CAIRS.UnitTests -> bunit 1.0.0-beta-11 -> bunit.xunit 1.0.0-beta-11 -> SourceFileFinder 1.0.0 -> Microsoft.CodeAnalysis 3.7.0 -> Microsoft.CodeAnalysis.CSharp.Workspaces (= 3.7.0).
4>Done building project "CAIRS.UnitTests.csproj" -- FAILED.

I'm not entirely sure whether this is due to a restriction in SourceFileFinder, bunit or something else entirely!

Hi @robalexclark
Have you tried installing Microsoft.CodeAnalysis.CSharp.Workspaces explicitly in your project?
e.g. <PackageReference Include="Microsoft.CodeAnalysis.CSharp.Workspaces" Version="3.8.0" />

That did resolve it, although it needed a fair few upstream projects to be updated as well```
  <PackageReference Include="Microsoft.CodeAnalysis.CSharp.Workspaces" Version="3.8.0" />
  <PackageReference Include="Microsoft.CodeAnalysis.Workspaces.Common" Version="3.8.0" />
  <PackageReference Include="Microsoft.CodeAnalysis.Common" Version="3.8.0" />

Thanks!

There is unfortunately how we resolve version conflicts in .net. I will make sure to update my libs dependencies for the next release.


Support for updating app name, buildpacks and stack

Is there a related GitHub Issue?
https://github.com/cloudfoundry/korifi/issues/2327

What is this change about?
Support for updating app name, buildpacks and stack

Does this PR introduce a breaking change?
No

Acceptance Steps
See story

Tag your pair, your PM, and/or team
@kieron-dev

Looks good to me now

Though I think the linter wants you to check the return value from starting the cache.


Cameras last image is not loading in HA.  And force_sync  is not working.

Please check Services, Known Bug / Issues and Troubleshooting over here first: https://github.com/fuatakgun/eufy_security/blob/master/README.md
Describe the bug
A clear and concise description of what the bug is.
HA images are not refreshing with the last image.  Attempted to use force_sync and images did not update.
Expected behavior
Expect the images to be loaded whenever motion or person is detected or change is detected.
**Hardware Information about Home Assistant
HA
core-2021.10.5
supervisor-2021.10.0
**Hardware Information about Cameras

Camera Model (T8124, T8002, T8112)
Live Streaming Protocol: RTSP or P2p

2021-10-18 07:55:36 DEBUG (MainThread) [custom_components.eufy_security] eufy_security - on_message - {'type': 'event', 'event': {'source': 'device', 'event': 'property changed', 'serialNumber': 'T8XXX', 'name': 'pictureUrl', 'value': 'https://zhixin-security-pr.s3.us-west-2.amazonaws.com/thumb/2021/10/18/station/T8XXXX/jWeTGjSQfQBQRbFU./camera01_20211017223550.jpg?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJYLV2KOLW6PU4FSA%2F20211018%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20211018T145535Z&X-Amz-Expires=86400&X-Amz-SignedHeaders=host&X-Amz-Signature=c1d3b7899b68e', 'timestamp':<PHONE_NUMBER>000}}

is this happening all the time? sometimes, this is happening to me that, pictureUrl is not valid. but happens very rarely.

yes, all the time.  The only way to get it to refresh is to restart the HA server.
Note that this seemed to be working until all the updates from last week.  Not sure if that helps.

happy to debug the cameras if you can share with me. RTSP ones should work, this is interesting.
Analzyze: this is on purpose (joking) thanks for warning

Happy to share.
LOL on Analzyze.
How to proceed?

updating my local dev instance for last couple of hours. I will probably continue tomorrow (in EU timezone)

can you please share with admin rights?

were you able to look?

Not sure if it is related, the sensors are almost never updated with a status.

can you confirm if your models are supported here? https://github.com/bropat/eufy-security-client/#known-working-devices

Yes.  The CAM E and S40 are on there.

Can you share these cameras with admin rights?

All are shared with admin rights.  The doorbell is on the working list too.
The images are not updated in HA.   The motion and person detection is not indicated in HA.  The backyard (CAM E) one seems to indicate more than the north, south and driveways (solo e40)..

your camera notification settings should be like full effect, include thumbnail, so you will receive up to date event pictures.
your security settings should be enabled to receive push notifications for motion/sound as integration totally relies on push notifications.
backyard had already enabled with these, that is because you receive more :)

Totally confused.  Did you update them?
Backyard is the only one not set to Full Effect.

Why are you confused, elaborate please?
you can go ahead and check if I had enabled them, but do not assume if I did not inform you. I am trying to be sensitive while playing with other people's devices. If i have to enable, I let the owner, otherwise, I ask the owner to do.

No worries. And understand.  Appreciate the help.
All the cameras notifications are set to Full Effect.  The only on that isn't is the backyard.  It is set to Most Efficient.  I will change the backyard to Full Effect.
As for the security setting being enabled to receive...  Where is that set?

Sending screenshots by order, do not forget to save at the end

I'll test it with the different notification settings to see which will work best.

You need to enable notifications for all guard modes which needs to update events in HA

Got it.  Just saw your images.  Thank you!!!

Welcome, please resolve if it works

Last image is loading.  Other issue still not resolved is that the sensors are not updating.

Are you gonna open a  issue for sensors?

Yes. I am traveling today and will likely do it tomorrow.  It's no rush. Thank you again.


Inputs and outputs for mapping

Currently the inputs being taken are entire scoresets. Out of all the data in the scoreset, only the urn, target sequence, uniprot, and target type are required for the mapping. In order to make it more efficient, is there a better way to obtain this data, instead of requiring an entire scoreset to be an input?
Additionally, in accordance with the new/anticipated changes in MaveDB, TaxID can be taken as an input to obtain additional required data.

This software should have as an input a target sequence, a set of variants represented on that sequence, and the sequence alphabet type (nucleic acid, amino acid)
The format for this can be specified by you.
The output format can also be specified by you, but should include:

the mapped sequence and associated metadata (minimally the refget and refseq sequence identifiers)
the mapping relationship (e.g. "homologous_to")
each original variant and its mapped variant


Updating interactive walkthrough link in index.md to resolve 404 error

Updated interactive walkthrough link in index.md to resolve 404 error. Also, expressing deep gratitude to LangChain library developers for their exceptional efforts 🥇 .
@baskaryan , @hwchase17 , @eyurtsev

thanks @aashishsainiShorthillsAI


mention highlight doesn't work if capitalisation is not the same as playername

local name = gsub(word_table[o], "[^a-zA-Z0-9_-]*$", "")
local mentioned = players_online[name]
    if mentioned then
        if not mentions then
	    mentions = {}
        end
        mentions[name] = true
    end

fixed

fixed


Disabled dotnet telemetry & reorganized docker build layers

Separating the dockerfile  into two "copy" commands will prevent future builds from having to re-download all the requirements when only the shad0w source code has changed.

That's a great find!

That's a great find!

That's really nice, thanks

That's really nice, thanks


[RESOLVED] High ICMP ping response time

Problem started at 12:31:14 on 2023.06.16
Problem name: High ICMP ping response time
Host: MF-FG
Severity: Warning
Operational data: Value: 410ms
Original problem ID: 28868
Event details in Zabbix: http://<IP_ADDRESS>/tr_events.php?triggerid=23132&eventid=28868

Problem has been resolved in 5m 0s at 12:36:14 on 2023.06.16
Problem name: High ICMP ping response time
Host: MF-FG
Severity: Warning
Original problem ID: 28868


Correlation plot: wrong label when change a correlation type

How to reproduce

Add correlation plot.
Open viewer properties.
Follow the 'Misc' section.
Change Correlation type to Spearman.

Expected behavior
Label 'Show Pearson R' should be changed on 'Show Spearman R'.
Observed behavior
The label stays the same.
Screenshots

This issue has been mirrored in Jira: https://reddata.atlassian.net/browse/GROK-14772


feat: refactor projects intro

What type of PR is this?
refactor: projects introduce layout.
What this PR does / why we need it (en: English/zh: Chinese):
en: Refactor the layout of the project introduction module on the home page.
zh: 重构首页的项目介绍模块的布局

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.田鑫鑫 seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.You have signed the CLA already but the status is still pending? Let us recheck it.


Fix merge error for a comment

r? @keybase/react-hackers

Actually since this is a comment-only change I'll just merge it.


Port PR 34711 changes from corefx

Fixes https://github.com/dotnet/corefx/issues/6134
Fixes https://github.com/dotnet/corefx/issues/5450
Tiny code changes, one to ensure that statistics are handled using try-finally blocks and another to make sure that an AutoResetEvent is cleaned up when the parser instance is disconnected. Auto and manual tests pass.

LGTM


HybrIK outputs nothing

Hi!
I tried to execute scripts/demo_image.py --img-dir ~/<img_dir>/ --out-dir ~/<out_dir>/  but there is no output 3d mesh.
What should I do?

My bad.. I accidentally commented out the parts where images along with meshes are output. Sorry ^^;


Config.SitVersion is null

No idea why this is happening but it crashes the manager on connection because it needs that version

Did #186 solve whatever this was?

Did #186 solve whatever this was?

I haven't encountered this since so I believe so. I'll close this and we can reopen if needed


Us32 mostrar componentes no mapa

Criação de uma view para a requisição do mapa da rede

Coverage remained the same at 100.0% when pulling da63f2fd96246730250efa5064c666c5347eb602 on US32-MostrarComponentesNoMapa into 6e36b52bd7f91d58701b14e6833dfb38b6ff943c on master.

Coverage remained the same at 100.0% when pulling 764b5f92919d26723233c65ffa0426d941502aa9 on US32-MostrarComponentesNoMapa into 6e36b52bd7f91d58701b14e6833dfb38b6ff943c on master.

Coverage remained the same at 100.0% when pulling a678488be9e46e890e498e327e5a7ae8770f1f56 on US32-MostrarComponentesNoMapa into 2549198bcd95b3945153173e6a402bbe3b97dbb5 on master.