Unable to change 'uidNumber' LDAP filter in users service (OCIS Helm/Kubernetes)

Describe the bug
When setting up OCIS on Kubernetes with Authentik as OIDC/LDAP backend I observe some strange behaviour.
The helm charts setting externalUserManagement.ldap.user.shchema.id makes me think that is the 'uid' value the user service will use to perform it's LDAP search with. However, when going through the debug logging it becomes evident the behavior is different.
An example below:
2024-04-22T15:25:31Z DBG GetUserByClaim error="error: not found: (&(objectClass=user)(objectclass=inetOrgPerson)(uidNumber=<OIDC hash>)(!(ak-active=FALSE)))"
This error makes evident that the user service seems to be looking for an attribute called uidNumber. While this is a valid and existing attribute in my LDAP schema, it's automatically populated by Authentik and is not propagated to any OIDC claim, hence, I cannot match on this specific value. However, the OIDC claims do supply me with an uid hash, which is also present in the LDAP schema as the uid attribute.
I would assume that setting externalUserManagement.ldap.user.shchema.id to uid would alter uidNumber to uid in the LDAP search filter.
Steps to reproduce

Deploy both OCIS and Authentik on K3S using helm.
Setup LDAP/OIDC using the default values in Authentik
Configure the OCIS helm chart as per the values below
Attempt l ogin.

Expected behavior
I expected that when externalUserManagement.ldap.user.shchema.id is set to uid it would alter the LDAP search to use that specific attribute in the LDAP search filter.
Actual behavior
The user service searches for a (seemingly hardcoded?) value of uidNumber.
Setup
I'm running K3S on Ubuntu.
OCIS is deployed using the OCIS helm chart.
Authentik is deployed using the Authentik helm chart.
There is an Authentik outpost in the proper namespace which OCIS can authenticate to.k -
Additional context
User schema example
dn: cn=<redacted>,ou=users,dc=ldap,dc=<redacted>,dc=<redacted>
app_password: <redacted>
app_username: <redacted>
uidNumber: 2005
sAMAccountName: <redacted>
name: <redacted>
mail: <redacted>
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: user
objectClass: posixAccount
objectClass: goauthentik.io/ldap/user
memberOf: cn=authentik Admins,ou=groups,dc=ldap,dc=<redacted>,dc=<redacted>
sn: <redacted>
ak-active: TRUE
ak-superuser: TRUE
uid: 2ed8e57fe0cf86d07488b6e5626e2ce0262cddaab98cde67459ad620de8dfe5a
homeDirectory: /home/username
cn: <redacted>
displayName: <redacted>
gidNumber: 2005

Helm chart values
   features:
      externalUserManagement:
        enabled: true
        adminUUID: "<redacted>"
        oidc:
          issuerURI: "<redacted>"
          webClientID: "<redacted>"
          userIDClaim: "sub"
          userIDClaimAttributeMapping: "uid"
          sessionManagementLink: "<redacted>"
          editAccountLink: "<redacted>"
          roleAssignment:
            enabled: true
            claim: "groups"
            mapping:
              - role_name: "admin"
                claim_value: "authentik Admins"
              - role_name: "user"
                claim_value: "OCIS User"
        ldap:
          writeable: false
          uri: "ldaps://<redacted>"
          certTrusted: false
          bindDN: "cn=<redacted>,OU=users,dc=ldap,dc=<redacted>,dc=<redacted>"
          baseDN: "DC=ldap,DC=<redacted>,DC=<redacted>"
          useServerUUID: true
          user:
            schema:
              id: "uid"
              userName: "cn"
              displayName: "displayName"
            baseDN: "OU=users,DC=ldap,DC=<redacted>,DC=<redacted>"
            filter: "(objectClass=user)"
          group:
            schema:
              id: "uid"
            baseDN: "OU=groups,DC=ldap,DC=<redacted>,DC=<redacted>"
            filter: "(objectClass=group)"
          disableUsers:
            disableMechanism: "attribute"
            userEnabledAttribute: "ak-active"
    secretRefs:
      ldapCaRef: "ldap-ca"
      ldapSecretRef: "ldap-bind-secrets"

When setting up OCIS on Kubernetes with Authentik as OIDC/LDAP backend I observe some strange behaviour. The helm charts setting externalUserManagement.ldap.user.shchema.id makes me think that is the 'uid' value the user service will use to perform it's LDAP search with. However, when going through the debug logging it becomes evident the behavior is different.
An example below: 2024-04-22T15:25:31Z DBG GetUserByClaim error="error: not found: (&(objectClass=user)(objectclass=inetOrgPerson)(uidNumber=<OIDC hash>)(!(ak-active=FALSE)))"

This is weird, we are not using the uidNumber attribute in any filter by default. This value must be coming from somewhere else. Are you sure you not externalUserManagement.ldap.user.schema.id  somewhere else? . Can you check the envvars of the users pod? What is USERS_LDAP_USER_SCHEMA_ID set to?

@justSem Which ocis release are you using. And which branch/tag or commitid of the ocis-charts?

nevermind I think I found the problem. There's likely a misunderstanding in what the value uid for userIDClaimAttributeMapping actually means.
From your helm values:

 features:
      externalUserManagement:
[..]
        oidc:
[..]
          userIDClaim: "sub"
          userIDClaimAttributeMapping: "uid"

You set  userIDClaimAttributeMapping to uid. The CS3 user attribute uid  actually reflects the LDAP attribute uidNumber (which is really unfortunate, I know, but that's how it is currently).  I think what you need to set there is actually userid that will map to the LDAP attribute defined in with USERS_LDAP_USER_SCHEMA_ID.

@rhafer I can confirm that did the trick! I was so confused for a good minute there. Thank you :)


Add new EthTx for ethereum transactions.

For use for https://github.com/loomnetwork/loomchain/issues/1177

Required for https://github.com/loomnetwork/loomchain/pull/1227


ci(semantic-release): update repository URL to resolve semantic-release publish

:tada: This PR is included in version 6.1.0 :tada:
The release is available on:

npm package (@latest dist-tag)
GitHub release

Your semantic-release bot :package::rocket:


Need a hotkey for "Jump to next use of current variable"

What is the feature you'd like to have?
A frequent workflow is to follow the dataflow of a single variable, it would be nice if there were a way to navigate between usage sites of a variable. One concern would be the exact order they are visited in. In linearview the order is explicit but in graph view its not quite as obvious.

Also "jump to variable definition/creation"


Remove field length restrictions on FI

Need to undo https://github.com/cfpb/regtech-user-fi-management/issues/235, as FI3 import has valid entities that exceed those limits.
Will need to update revision 6dd77f09fae6 to do nothing (or try/catch), and have new revision to update the types back to sa.String, so environments with the long strings in db won't fail on the old revision, and environments where 6dd77f09fae6 already ran can get the update with new revision.

Did we want to remove all the restrictions or just the restrictions on the FI name, parent name, etc and keep the restrictions on addresses?


Where to change the size of Picker Item's checkmark? (With Image)

This is from Picker's Item list with the code:
                  <Picker
                    style={{ height: 30 }}
                    supportedOrientations={['portrait', 'landscape']}
                    iosHeader={'Choose Type'}
                    mode='dropdown'
                    iosIcon={<Icon darkgray style={styles.chevronRight} name='angle-right' />}
                    selectedValue={this.state.type}
                    onValueChange={(value) => { this.setState({ type: value }) }}
                    textStyle={styles.pickerText}>
                    <Picker.Item label={'Greeting'} value={'Greeting'} />
                    <Picker.Item label={'Reminder'} value={'Reminder'} />
                  </Picker>

How can I edit the size of the checkmark as shown in image below? It's too small/

@VanessaChu Picker's checkmark make use of the default Radio button size. To change this you need to eject the theme.
You can then increase the radio button size by changing the radioBtnSize variable in native-base-theme/variables/*.js

@akhil-geekyants That was it 😀  Thanks


[Codegen] Use "target.build.$TARGET_KIND" for all codegen functions.

Noticed while writing documentation that not all codegen functions
follow the same naming pattern.  Made changes below for consistency,
ease of locating a codegen function.

Removed special case for "micro_dev" target.  Instead, register
BuildCHost as both "target.build.c" and "target.build.micro_dev".

Renamed "target.build.build.aocl_sw_emu" to
"target.build.aocl_sw_emu".  Appears to be a typo introduced in
#841725cc585

@areusch On second thought, it looks like the special case for a micro_dev target should be removed rather than implemented elsewhere, since your commit 745e542e4deaf44f3d6e5665299aa85ef8f4a6b9 removed the micro_dev target entirely.  Is that correct?

@Lunderberg yeah micro_dev can go away now

@areusch Awesome.  In that case, removing the special case for micro_dev, and removing lots of other references so that it doesn't trip people up in the future.

Potential reviewers: @areusch @tqchen

Thank you!  Rebased this morning to remove conflict with main, no other changes made from the approved version.


update an account in the service

Feature: Update Account In Service
As a user of the application
I want to be able to update my account in the service
So that I can modify my account details
Scenario: User updates an account
Given I am logged in to the application
When I edit my Account details
And I make changes to the account details
Then the application sends a request to the service to update the account details


Much slower AV1 encode compared to directly calling ffmpeg or Handbrake

Hello,
I've been playing around with your tool today to compare x264 and svt-av1. I noticed that AV1 encoding was many times slower compared to the same encoding in ffmpeg directly or using Handbrake.
I'm running macOS 14.3 on Macbook Pro M3 Max and I have the latest ab-av1 (v0.7.13) from Cargo, and ffmpeg (6.1.1_2) + SvtAv1EncApp0 (1.8.0) from homebrew.

ab-av1 crf-search -i input.mkv -e libx264 --preset veryslow

estimates 2 minutes for ab-av1 encode -e libx264 -i 'input.mkv' --crf 13.7 --preset veryslow
actual encode takes 1:49 (very close)
ffmpeg -i input.mkv -c:v libx264 -crf 13.7 -preset veryslow test.mkv takes 1:49 (identical)
Handbrake with same CSRF = 14 and Preset = veryslow takes 1:45 (almost identical)

ab-av1 crf-search -i input.mkv --preset 8

estimates 3 minutes for ab-av1 encode -i 'input.mkv' --crf 13 --preset 8
actual encode takes 3:00 (identical)
ffmpeg -i input.mkv -c:v libsvtav1 -crf 13 -preset 8  av1_test.mkv takes 1:08 (almost 3 times faster)
Handbrake with same CSRF = 13 and Preset = 8 takes 0:41 (even faster)

Any ideas? Thanks!

Interesting, ab-av1 calls ffmpeg so there is no difference other than the args used.
Most likely the encode is taking longer as ab-av1 will default av1 encodes to yuv420p10le. This is/was advised with av1 to produce better quality output without any real increase in size.
Assuming your input is yuv420p try setting --pix-format yuv420p to get closer to default ffmpeg behaviour.
This makes me wonder about the general performance cost of 420p -> 420p10le vs 420p -> 420p & if the quality improvement is worthwhile for this to be default behaviour...

With --pix-format yuv420p it takes exactly as long as ffmpeg, thanks! Still curious why Handbrake is even faster, though, do you have any ideas?

Thanks for confirming, no I've no idea about what handbrake is doing vs ffmpeg here.


PTX-1978 force reboot to avoid timing out while waiting for reboot

test passed https://jenkins.portworx.co/job/Torpedo/view/Torpedo 2.2/job/tp-2-2-kops/106/


Every node is required to provide a registry_address

I don't think this was intended, DNSResolver has default DNS resolvers configured thus it shouldn't be required to have registry_address field for every node.
https://github.com/bosagora/agora/blob/133499d7c8083398e147be90bcb2874d86487cbc/source/agora/network/Manager.d#L695-L696

Yeah, we need https://github.com/bosagora/agora/issues/2873

This also causes DNSResolver to send DNS request to HTTP endpoint of the registry node.

Mistakes were made. Big ones. Working on a fix.


ZodError gets empty path

Setup
const searchLocations = makeEndpoint({
  method: "get",
  path: "/locations",
  response: z.array(z_location), // validation rules don't matter here
  parameters: [{
    name: "search", // !!!
    type: "Query",
    schema: z.string().min(1),
  }],
  errors: z_defaultErrors,
})

export default makeApi([
  searchLocations,
])

GET http://localhost:3001/locations?search=
400 Bad Request 👌
{
    "context": "query.search",
    "error": [
        {
            "code": "too_small",
            "minimum": 1,
            "type": "string",
            "inclusive": true,
            "exact": false,
            "message": "String must contain at least 1 character(s)",
            "path": [] -- 😨
        }
    ]
}

Explanation
Without a clear reason error[0].path is empty and path data is reexposed at context. Might be changed at https://github.com/ecyrbe/zodios/issues/76.
I expected path value to be ["query", "search"]. Libraries that parse Zod errors (like https://github.com/causaly/zod-validation-error and others) obviously rely on path so I have to manually split context value and put it back to path...
I'm not sure if it's a bug or something intentional, please clarify 🙏

Hello it's not a bug. query search is not an object, that's why zodios adds some context information that is separate.
if you want zod to have a path for other error parsing tools, you can add e refine in your schema.
cf zod documentation about zod custom path :
https://zod.dev/?id=customize-error-path


Backend failing to delete sector due to foreign key constraint

The backend is failing to delete sector 3072, although it might be reporting that it completed deletion because the frontend didn't throw any errors:
Completed SectorDelete{sectorKey=3072datasetKey=1070, sector=Sector{3072, datasetKey=3, mode=ATTACH, code=null, subjectDatasetKey=1070, subject=ORDER Mesostigmata}, created=2020-04-27T18:37:41.901793 by gdower}

Stacktrace:
org.apache.ibatis.exceptions.PersistenceException:
### Error updating database.  Cause: org.postgresql.util.PSQLException: ERROR: update or delete on table "name_usage_3" violates foreign key constraint "name_usage_3_parent_id_fk" on table "name_usage_3"
  Detail: Key (id)=(69035050-f853-410a-87d9-ba4f524afe1f) is still referenced from table "name_usage_3".
### The error may exist in life/catalogue/db/mapper/NameUsageMapper.xml
### The error may involve life.catalogue.db.mapper.NameUsageMapper.deleteBySector-Inline
### The error occurred while setting parameters
### SQL: DELETE FROM name_usage_3 WHERE sector_key = ?
### Cause: org.postgresql.util.PSQLException: ERROR: update or delete on table "name_usage_3" violates foreign key constraint "name_usage_3_parent_id_fk" on table "name_usage_3"
  Detail: Key (id)=(69035050-f853-410a-87d9-ba4f524afe1f) is still referenced from table "name_usage_3".
	at org.apache.ibatis.exceptions.ExceptionFactory.wrapException(ExceptionFactory.java:30)
	at org.apache.ibatis.session.defaults.DefaultSqlSession.update(DefaultSqlSession.java:199)
	at org.apache.ibatis.session.defaults.DefaultSqlSession.delete(DefaultSqlSession.java:212)
	at org.apache.ibatis.binding.MapperMethod.execute(MapperMethod.java:72)
	at org.apache.ibatis.binding.MapperProxy.invoke(MapperProxy.java:57)
	at com.sun.proxy.$Proxy125.deleteBySector(Unknown Source)
	at life.catalogue.assembly.SectorDelete.deleteSector(SectorDelete.java:84)
	at life.catalogue.assembly.SectorDelete.doWork(SectorDelete.java:42)
	at life.catalogue.assembly.SectorRunnable.run(SectorRunnable.java:89)
	at life.catalogue.assembly.SectorDelete.run(SectorDelete.java:25)
	at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
	at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
	at java.base/java.lang.Thread.run(Thread.java:834)
Caused by: org.postgresql.util.PSQLException: ERROR: update or delete on table "name_usage_3" violates foreign key constraint "name_usage_3_parent_id_fk" on table "name_usage_3"
  Detail: Key (id)=(69035050-f853-410a-87d9-ba4f524afe1f) is still referenced from table "name_usage_3".
	at org.postgresql.core.v3.QueryExecutorImpl.receiveErrorResponse(QueryExecutorImpl.java:2497)
	at org.postgresql.core.v3.QueryExecutorImpl.processResults(QueryExecutorImpl.java:2233)
	at org.postgresql.core.v3.QueryExecutorImpl.execute(QueryExecutorImpl.java:310)
	at org.postgresql.jdbc.PgStatement.executeInternal(PgStatement.java:446)
	at org.postgresql.jdbc.PgStatement.execute(PgStatement.java:370)
	at org.postgresql.jdbc.PgPreparedStatement.executeWithFlags(PgPreparedStatement.java:149)
	at org.postgresql.jdbc.PgPreparedStatement.execute(PgPreparedStatement.java:138)
	at com.zaxxer.hikari.pool.ProxyPreparedStatement.execute(ProxyPreparedStatement.java:44)
	at com.zaxxer.hikari.pool.HikariProxyPreparedStatement.execute(HikariProxyPreparedStatement.java)
	at org.apache.ibatis.executor.statement.PreparedStatementHandler.update(PreparedStatementHandler.java:47)
	at org.apache.ibatis.executor.statement.RoutingStatementHandler.update(RoutingStatementHandler.java:74)
	at org.apache.ibatis.executor.SimpleExecutor.doUpdate(SimpleExecutor.java:50)
	at org.apache.ibatis.executor.BaseExecutor.update(BaseExecutor.java:117)
	at org.apache.ibatis.session.defaults.DefaultSqlSession.update(DefaultSqlSession.java:197)
	... 13 common frames omitted

This is a different issue from the frontend bug report on sector deletion I opened earlier.
Frontend version: b7bf159 April 27, 2020 9:30 AM
Backend version: ae2da5a April 24, 2020 10:04 PM

@mdoering, I figured out why. @yroskov and I had used modify tree in assembly to add the superfamily Rhodacaroidea to Order Mesostigmata (sector 3072). After I manually deleted the name Rhodacaroidea, I was able to delete sector 3072.

Guess we need to block all edits while a sync is running then?

Ah, you added a taxon inside an existing sector? That might indeed not be checked properly, I need to verify. Should we allow that the CoL Management Classification is patchy and not connected to the root of the tree?

No, I don't think we should allow attaching Management Classification below GSD attachment points. We were trying to modify the sector mapping from being attached at the order level to the family level, but deleting the sector at order level deletes the classification below that point when we really just wanted to move the sector attachment point to a lower level.
It might be easier to discuss this on the call tomorrow.

It would probably be useful to mark the nodes without a sector in the assembly tree

we only delete species now and keep higher taxa without a sectorKey.


Gemfile.lock: update sorbet-runtime to match sorbet

[x] Have you followed the guidelines in our Contributing document?
[x] Have you checked to ensure there aren't other open Pull Requests for the same change?
[x] Have you added an explanation of what your changes do and why you'd like us to include them?
[ ] Have you written new tests for your changes? Here's an example.

[x] Have you successfully run brew typecheck with your changes locally?
[x] Have you successfully run brew tests with your changes locally?
[x] Have you successfully run brew man locally and committed any changes?

This normally would have happened automatically in #10532, but the vendor-gems workflow was disabled at the time.
#10586 covers this, but this PR will likely get merged much quicker since the new Sorbet version contains breaking changes (the plugin system we rely on is gone).

Review period will end on 2021-02-15 at 03:25:39 UTC.

Review period will end on 2021-02-15 at 03:25:39 UTC.

Review period skipped due to critical label.

Thanks @Bo98


[Translation] Official French Translation from Vue-FR

French Link (in this PR)
We proud to say the all basis are french translated and the https://fr.vuejs.org/ is referenced.
All material for beginners is in french so you can add the link to french version. That means the beginners (who are probably the person which not know well the english and cannot use others MVVM) can use easilly Vue with this documentation.
Others pages from Advanced are already under translation and API is 66% translated. The most important page, Comparison, is also translated to allows professional to be interested by Vue. Saddly, a lot of french people prefer use product with french translation (book, movie, game, documentation, etc.).
So we have also create a french chat support for Vue: https://gitter.im/vuejs-fr/vue
and we have requested a Forum part: https://forum.vuejs.org/t/create-a-francais-category-for-french-discussions-helps/ without success (could you help us for this point?).
All pages still in english have the mention (En) and a message saying :

Cette page est en cours de traduction française. Revenez une autre fois pour lire une traduction achevée ou participez à la traduction française ici.

that means the translation is in progress and ask to help us for translation.
I think add french translation from now under the official website link can offers visibility to french translation to allows more people to discover Vue and translate it.
Alphabetic Order (not in this PR)
We have re-order by alphabetic list the translation links because it's a french convention for list item to be order in this way. I'm not fully sure that is the same case for english but I suggest you re-order also your links in this way (so Russian link should be the last and the french list should appears above Portuguese) or the way you prefer (because currently I just added french link to the end).
Thx a lot for your great job !

Bravo! 😄


Allow to properly PATCH methods with JDK11+

Feature Request
This is a followup issue for https://github.com/kittinunf/Fuel/issues/274
Description
Currently PATCH methods are silently transformed to POST methods.
However, in java 11+ (https://stackoverflow.com/a/64048579/922584) you can use the HttpRequest class to do what you want:
val request = HttpRequest.newBuilder()
               .uri(URI.create(uri))
               .method("PATCH", HttpRequest.BodyPublishers.ofString(message))
               .build()

Proposed Solution
It would be great if it was possible to leverage possibilities of JDK11+ and do correct PATCH requests as some services ignore the x-http-method-override header

Sounds! Good, maybe it is a time for us to move to Java11 instead.

🙏 🙏 🙏

pretty please 🙏 🙏 🙏

may I expect any chnages on this?

For anyone who stumbles here – it can be hacked even without modifying current version of Fuel.
Two things need to be done:

Enable request.executionOptions.forceMethods = true
To allow for reflectively forcing PATCH to the string value on JDK11+, one must add JVM command line arguments: --add-opens java.base/sun.net.www.protocol.https=ALL-UNNAMED --add-opens java.base/java.net=ALL-UNNAMED


Fixed erroneous word

@jasonkylefrank : Thanks for your contribution! The author(s) have been notified to review your proposed change.

Looks good; thanks.


Tab height

Hi,
Sorry to post that here but i found no wiki or forums about that project.
Where can we change the tab height (standard 20px)? In the css it doesn't change the lm_headers height because it's hard coded. I almost lost myself and the only thing that I have found is in the src/js/controls/Header.js at line 18: layoutManager.config.dimensions.headerHeight
I could not reach this parameters in the compiled version and I did not found the value in the source
Sorry for my english.
Regards

I personally asked the same thing on StackOverflow some days ago in this thread Golden Layout: how to increase Header Tabs height](http://stackoverflow.com/questions/39534178/golden-layout-how-to-increase-header-tabs-height). I hope to receive an answer.
This would be also necessary in couple with another important and (for me) fundamental improvement asked here, Touch Support

I sincerely hope that Touch support combined with this feature could become the text priority of this wonderful plugin development...

This is related to #325. The layout in general seems to be far too unflexible.


Replace prettier by stylistic to lint JavaScript

In the latest versions of ESLint, more and more formatting rules were removed or declared deprecated. These rules have been integrated into the new Stylistic package (https://eslint.style/guide/why) and expanded.
Stylistic acts as a better formatter  for JavaScript as Prettier.
With this PR there are many changes that make the code more uniform, but it may be difficult to review due to the large amount. Even if I have no worries about the changes, perhaps this would be something for the release after next.
Let me know what you think.

Thanks! I'm fine with this.

I dont mind changing this and see how the stylistic package holds up during 2024 :-)
Cant we get rid of the whole prettier things then? Or why do these still stay in there?

Cant we get rid of the whole prettier things then? Or why do these still stay in there?

Prettiert makes other files formats (e.g. HTML, JSON, Markdown, YAML) pretty in our project. There are also formatter and linter or ESLint plugins for some of these formats, but at the moment I don't see us getting rid of prettier. And I think prettier does a pretty job for the non JavaScript formats.


Also annotate parameter defaults.

In numpy docstrings I often see
Parameters
----------
myparam : `Type`, optional (default: `None`)
    My param does things.

I prefer styling the parameter docs as definition list like numpydoc, where there is enough space for type and defaults:

myparam: Type, optional (default: None)
My param does things.

However, the defaults get lost when migrating to sphinx-autodoc-typehints. I know the defaults are in the function signature above the param docs, but for long signatures (and therefor long lists of params), it would be best to also have them in the param docs.
Ideally we would parse and use the source code for the defaults instead of going from python objects back to strings, but using repr to get OK representations for most defaults would also be OK.

The next release will add the following option:

document_defaults (default: None): If None, defaults are not added. Otherwise adds a default annotation:

'comma' adds it after the type, changing Sphinx’ default look to “param (int, default: 1) -- text”.
'braces' adds (default: ...) after the type (useful for numpydoc like styles).
'braces-after' adds (default: ...) at the end of the parameter documentation text instead.

@gaborbernat when are you planning to do a release? The last release broke scanpydoc, because it relied on a hack to make the defaults possible. If you release soon, I can fix scanpydoc by relying on this new feature.

@flying-sheep https://github.com/tox-dev/sphinx-autodoc-typehints/actions/runs/1662682295

wonderful, thank you!


Suggestion: Dark Pick & Grass Paths

Dark picks with the "Spoon" upgrade should turn grass into grass path as vanilla shovels do.

Thank you for your suggestion. It has been added to our list or possible enhancement.
This ticket will be closed because we want the list of open tickets to reflect known issues.


on branches that need exclusif use of list or mapping

In GitLab by @youldrouis on Feb 18, 2021, 15:06
I find it easier for non advanced users to be able to use lists/mappings indistinctly as much as possible when they are not preoccupied about the execution order. Alternatively, getting an informative error message when using the wrong type of subbranches could be a solution.

in set_value plugin mostly

Mostly the error messages should be improved


chore: add release PR flow

This adds an action to create release PRs based on commit messages

why are we not using the flow that also publishes to npm?
https://github.com/google-github-actions/release-please-action#automating-publication-to-npm

We need to disable 2FA for that (or use an automation token from a bot).
We can add the automated publish flow once we finish discussing https://github.com/netlify/engineering/issues/177.

why are we not using the flow that also publishes to npm?
https://github.com/google-github-actions/release-please-action#automating-publication-to-npm

We need to disable 2FA for that (or use an automation token from a bot).
We can add the automated publish flow once we finish discussing https://github.com/netlify/engineering/issues/177.

cool. +1 for using an automation token from me

cool. +1 for using an automation token from me

FYI, we have a wrong release and tag I'm going to remove (already pushed the correct tags):

FYI, we have a wrong release and tag I'm going to remove (already pushed the correct tags):


Changetracking doesn’t appear to be working correctly for inline editing

Module version(s) affected
5.3.0
Description
When inline editing elements, changetracking doesn’t appear to work. If you edit an element’s title/content, the “Save” & “Save and Publish” buttons don’t get highlighted, and navigating away from the page doesn’t open the warning alert about unsaved changes.
This appears to be a regression, as it functions as expected in 5.2
How to reproduce
Create a standard “Content” block, add some content, save & publish.
Edit the title or content, note that the save buttons aren’t highlighted.
Close the tab, refresh the page, or click a link to navigate away - note that the alert to warn about losing unsaved changes doesn’t appear.
Possible Solution
No response
Additional Context
No response
Validations

[X] Check that there isn't already an issue that reports the same bug
[X] Double check that your reproduction steps work in a fresh installation of silverstripe/installer (with any code examples you've provided)

Same story here.


Automation tool flutter version when running with QEMU

When using automation tool to run flutter_homescreen and others on AGL x86_64 QEMU Image (AGL-qemu) I'm getting the following SDK hash error
ERROR:flutter/shell/common/shell.cc(93)] Dart Error: Can't load Kernel binary: Invalid SDK hash.
[ERROR:flutter/runtime/dart_isolate.cc(143)] Could not prepare isolate.
[ERROR:flutter/runtime/runtime_controller.cc(385)] Could not create root isolate.
[ERROR:flutter/shell/common/shell.cc(604)] Could not launch engine with configuration.
if i recall it's probably because i'm running the wrong QEMU flutter version i need to change it
./setup_flutter_workspace.py --clean   --flutter-version xxx
Ques: How do i know what the correct QEMU flutter version is ?
please advise
regards

Please check this issue, it maybe relevant to you -
https://github.com/meta-flutter/meta-flutter/issues/232

@shoaibmerchant  thanks for that and looks like i need to set version 3.3.1  as I'm using AGL
./setup_flutter_workspace.py --flutter-version 3.3.1
@jwinarske - what's the protocol for bumping AGL's flutter version
regards

@bernardcraddock AGL is a downstream consumer of meta-flutter, so largely the roll is gated by Jan-Simon.  We have discussed planning around AGL changes in the last couple of production ready meetings.  AGL changes will happen post CES.

@jwinarske - ok post CES is fine with me
Can you bump the SRCREV in flutter-app-pumped-fuel-ped_git.bb (agl branch) to the latest i've just pushed my final change for the year.
One last thing the IVI production ready meetings are at your 9am my 4am, so i can never attend them and missing out so is there any chance you can change it to anytime your afternoon, so as i can attend?
regards

@bernardcraddock Jan-Simon is in Germany, Walt is in Nashville, Scott is in San Jose, and I'm in Seattle.  The time window was what Jan-Simon was willing to accept, any later and it would be the middle of the night for him.
Notice most of their meetings are earlier.  I occasionally attend the weekly 6AM dev call.

@jwinarske  weekly dev calls ok I'll start attending  if you're on it great if not no worries i'm sure Jan-Simon can provide enough to get me started


Typo

I signed it!
Christopher Hockley / CTO
<EMAIL_ADDRESS>CocoaSoft
putcocoa.in
On Wed, Jul 29, 2015 at 10:29 AM, googlebot<EMAIL_ADDRESS>wrote:

Thanks for your pull request.  It looks like this may be your first contribution to a Google open source project, in which case you'll need to sign a Contributor License Agreement (CLA).
:memo: Please visit https://cla.developers.google.com/ to sign.
Once you've signed, please reply here (e.g. I signed it!) and we'll verify.  Thanks.

If you've already signed a CLA, it's possible we don't have your GitHub username or you're using a different email address.  Check your existing CLA data and verify that your email is set on your git commits.
If you signed the CLA as a corporation, please let us know the company's name.

Reply to this email directly or view it on GitHub:
https://github.com/googledrive/ios-quickeditor/pull/3#issuecomment-125879341


Add test for istio.io task: Secure Ingress Gateway with SDS

Please provide a description for what this PR is for.
Automate task https://preliminary.istio.io/docs/tasks/traffic-management/ingress/secure-ingress-sds/, verified with kind
Tested via
go test ./... -p 1 --istio.test.env kube --istio.test.kube.config ~/.kube/kind-config-kind --log_output_level=tf:debug --istio.test.hub= --istio.test.tag= -timeout 30m --istio.test.nocleanup=false --istio.test.kube.minikube -v
And to help us figure out who should review this PR, please
put an X in all the areas that this PR affects.
[ ] Configuration Infrastructure
[ ] Docs
[ ] Installation
[ ] Networking
[ ] Performance and Scalability
[ ] Policies and Telemetry
[x] Security
[x] Test and Release
[ ] User Experience
[ ] Developer Infrastructure

I am thinking about passing parameter to newStepScript, so that we can run script with parameters. That will reduce the number of scripts. The current version strictly follows the task and adds one script for each step.

@JimmyCYJ: The following test failed, say /retest to rerun them all:

Test name
Commit
Details
Rerun command

istio-shellcheck-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-shellcheck-master

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@JimmyCYJ: The following tests failed, say /retest to rerun them all:

Test name
Commit
Details
Rerun command

istio-shellcheck-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-shellcheck-master

istio-lint-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-lint-master

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@JimmyCYJ: The following tests failed, say /retest to rerun them all:

Test name
Commit
Details
Rerun command

istio-shellcheck-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-shellcheck-master

istio-lint-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-lint-master

istio-unit-tests-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-unit-tests-master

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@JimmyCYJ: The following tests failed, say /retest to rerun them all:

Test name
Commit
Details
Rerun command

istio-shellcheck-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-shellcheck-master

istio-lint-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-lint-master

istio-unit-tests-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-unit-tests-master

integ-mixer-k8s-presubmit-tests-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test integ-mixer-k8s-presubmit-tests-master

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@JimmyCYJ: The following tests failed, say /retest to rerun them all:

Test name
Commit
Details
Rerun command

istio-shellcheck-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-shellcheck-master

istio-lint-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-lint-master

istio-unit-tests-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-unit-tests-master

integ-mixer-k8s-presubmit-tests-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test integ-mixer-k8s-presubmit-tests-master

istio-racetest-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-racetest-master

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@JimmyCYJ: The following tests failed, say /retest to rerun them all:

Test name
Commit
Details
Rerun command

istio-shellcheck-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-shellcheck-master

istio-lint-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-lint-master

istio-unit-tests-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-unit-tests-master

integ-mixer-k8s-presubmit-tests-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test integ-mixer-k8s-presubmit-tests-master

istio-racetest-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-racetest-master

istio-pilot-multicluster-e2e-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-pilot-multicluster-e2e-master

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@JimmyCYJ: The following tests failed, say /retest to rerun them all:

Test name
Commit
Details
Rerun command

istio-lint-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-lint-master

istio-unit-tests-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-unit-tests-master

integ-mixer-k8s-presubmit-tests-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test integ-mixer-k8s-presubmit-tests-master

istio-racetest-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-racetest-master

istio-pilot-multicluster-e2e-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-pilot-multicluster-e2e-master

istio-shellcheck-master
87da7d5fc9da9a0a5dfd0dea8d312f14c28866c8
link
/test istio-shellcheck-master

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@JimmyCYJ: The following tests failed, say /retest to rerun them all:

Test name
Commit
Details
Rerun command

istio-lint-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-lint-master

istio-unit-tests-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-unit-tests-master

integ-mixer-k8s-presubmit-tests-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test integ-mixer-k8s-presubmit-tests-master

istio-racetest-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-racetest-master

istio-pilot-multicluster-e2e-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-pilot-multicluster-e2e-master

istio-shellcheck-master
87da7d5fc9da9a0a5dfd0dea8d312f14c28866c8
link
/test istio-shellcheck-master

integ-new-install-k8s-presubmit-tests-master
87da7d5fc9da9a0a5dfd0dea8d312f14c28866c8
link
/test integ-new-install-k8s-presubmit-tests-master

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@JimmyCYJ: The following tests failed, say /retest to rerun them all:

Test name
Commit
Details
Rerun command

integ-mixer-k8s-presubmit-tests-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test integ-mixer-k8s-presubmit-tests-master

istio-racetest-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-racetest-master

istio-pilot-multicluster-e2e-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-pilot-multicluster-e2e-master

istio-shellcheck-master
87da7d5fc9da9a0a5dfd0dea8d312f14c28866c8
link
/test istio-shellcheck-master

integ-new-install-k8s-presubmit-tests-master
87da7d5fc9da9a0a5dfd0dea8d312f14c28866c8
link
/test integ-new-install-k8s-presubmit-tests-master

istio-unit-tests-master
87da7d5fc9da9a0a5dfd0dea8d312f14c28866c8
link
/test istio-unit-tests-master

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@JimmyCYJ: The following tests failed, say /retest to rerun them all:

Test name
Commit
Details
Rerun command

integ-mixer-k8s-presubmit-tests-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test integ-mixer-k8s-presubmit-tests-master

istio-pilot-multicluster-e2e-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-pilot-multicluster-e2e-master

istio-shellcheck-master
87da7d5fc9da9a0a5dfd0dea8d312f14c28866c8
link
/test istio-shellcheck-master

integ-new-install-k8s-presubmit-tests-master
87da7d5fc9da9a0a5dfd0dea8d312f14c28866c8
link
/test integ-new-install-k8s-presubmit-tests-master

istio-unit-tests-master
87da7d5fc9da9a0a5dfd0dea8d312f14c28866c8
link
/test istio-unit-tests-master

istio-racetest-master
87da7d5fc9da9a0a5dfd0dea8d312f14c28866c8
link
/test istio-racetest-master

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@JimmyCYJ: The following tests failed, say /retest to rerun them all:

Test name
Commit
Details
Rerun command

istio-pilot-multicluster-e2e-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-pilot-multicluster-e2e-master

integ-new-install-k8s-presubmit-tests-master
87da7d5fc9da9a0a5dfd0dea8d312f14c28866c8
link
/test integ-new-install-k8s-presubmit-tests-master

istio-unit-tests-master
87da7d5fc9da9a0a5dfd0dea8d312f14c28866c8
link
/test istio-unit-tests-master

istio-racetest-master
87da7d5fc9da9a0a5dfd0dea8d312f14c28866c8
link
/test istio-racetest-master

istio-shellcheck-master
018bbfb0a816191677c6749b548b6e2f0aacc025
link
/test istio-shellcheck-master

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@JimmyCYJ: The following tests failed, say /retest to rerun them all:

Test name
Commit
Details
Rerun command

istio-pilot-multicluster-e2e-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-pilot-multicluster-e2e-master

istio-unit-tests-master
87da7d5fc9da9a0a5dfd0dea8d312f14c28866c8
link
/test istio-unit-tests-master

istio-racetest-master
87da7d5fc9da9a0a5dfd0dea8d312f14c28866c8
link
/test istio-racetest-master

istio-shellcheck-master
018bbfb0a816191677c6749b548b6e2f0aacc025
link
/test istio-shellcheck-master

integ-new-install-k8s-presubmit-tests-master
018bbfb0a816191677c6749b548b6e2f0aacc025
link
/test integ-new-install-k8s-presubmit-tests-master

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@JimmyCYJ: The following tests failed, say /retest to rerun them all:

Test name
Commit
Details
Rerun command

istio-pilot-multicluster-e2e-master
61adcf02ae726cadc5169b3b77e88124ca7753e9
link
/test istio-pilot-multicluster-e2e-master

istio-shellcheck-master
018bbfb0a816191677c6749b548b6e2f0aacc025
link
/test istio-shellcheck-master

integ-new-install-k8s-presubmit-tests-master
018bbfb0a816191677c6749b548b6e2f0aacc025
link
/test integ-new-install-k8s-presubmit-tests-master

integ-security-k8s-presubmit-tests-master
018bbfb0a816191677c6749b548b6e2f0aacc025
link
/test integ-security-k8s-presubmit-tests-master

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@JimmyCYJ: The following tests failed, say /retest to rerun them all:

Test name
Commit
Details
Rerun command

integ-new-install-k8s-presubmit-tests-master
018bbfb0a816191677c6749b548b6e2f0aacc025
link
/test integ-new-install-k8s-presubmit-tests-master

integ-security-k8s-presubmit-tests-master
018bbfb0a816191677c6749b548b6e2f0aacc025
link
/test integ-security-k8s-presubmit-tests-master

e2e-dashboard-master
385f557e9a25f3dc27a215223eceae31df12c56d
link
/test e2e-dashboard-master

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@JimmyCYJ: The following tests failed, say /retest to rerun them all:

Test name
Commit
Details
Rerun command

e2e-dashboard-master
385f557e9a25f3dc27a215223eceae31df12c56d
link
/test e2e-dashboard-master

integ-security-k8s-presubmit-tests-master
385f557e9a25f3dc27a215223eceae31df12c56d
link
/test integ-security-k8s-presubmit-tests-master

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

/retest

@JimmyCYJ: The following test failed, say /retest to rerun them all:

Test name
Commit
Details
Rerun command

integ-security-k8s-presubmit-tests-master
385f557e9a25f3dc27a215223eceae31df12c56d
link
/test integ-security-k8s-presubmit-tests-master

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

/retest

@rlenglet Please take a look. Thanks.

OK, it seems you're testing https://preliminary.istio.io/docs/tasks/traffic-management/ingress/secure-ingress-sds/, as indicated in the test comments. You need to rename the directory to match that (security -> traffic-management/ingress).

@JimmyCYJ: The following test failed, say /retest to rerun them all:

Test name
Commit
Details
Rerun command

integ-new-install-k8s-presubmit-tests-master
5537f16d9d63fa4c6e4cdd3343702dfcb97a30be
link
/test integ-new-install-k8s-presubmit-tests-master

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

Overall, this is really good, thanks!
A couple minor things to fix before merging:

Rename the test's directory to match the directory in istio.io.
Replace the explicit echo commands in the scripts with set -x, to make it more readable.

Thanks for the advice. I have made changes accordingly. Please take a look.

@JimmyCYJ Small pro-tip 🙂: to reassign this PR to me for review, expand the x changes requested section, click on the ... icon on the right of the line saying rlenglet requested changes, then click Dismiss review. Then it will show up again as waiting for my review.

@JimmyCYJ: The following test failed, say /retest to rerun them all:

Test name
Commit
Details
Rerun command

integ-new-install-k8s-presubmit-tests-master
b44cde83207bf9351d4f111306244caea8b456a1
link
/test integ-new-install-k8s-presubmit-tests-master

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@nmittler Could you please take a look?

The placement of the tests are not right. These should go into istio/tests/..., not pkg/test/....
It should also have the right owners set at that folder.

@JimmyCYJ: PR needs rebase.

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

The placement of the tests are not right. These should go into istio/tests/..., not pkg/test/....
It should also have the right owners set at that folder.

I have moved all tests into /tests/istio.io/, and added code owners. Please take a look. Thanks.

@JimmyCYJ: The following test failed, say /retest to rerun them all:

Test name
Commit
Details
Rerun command

integ-new-install-k8s-presubmit-tests-master
87b8e72d534608563f4e30b24802b7c23c3feef4
link
/test integ-new-install-k8s-presubmit-tests-master

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.


SVD is flaky on new laptop

I'm getting frequent SVD did not converge errors after changing machines from curve_fit in scipy 1.5.2 from pip. The same fit will have an unpredictable outcome, although I am using the same environment, code, and data copied bit for bit.
The error of course originates in the svd routine:
https://github.com/scipy/scipy/blob/d866f8342a1c0f1fb8175460e520ea264bca1ca5/scipy/linalg/decomp_svd.py#L125-L129
Both gesdd and gesvd are returning info == 4 sometimes even while fitting the same data. The Jacobians I am dealing with have a condition number around 2000. Keep in mind the Jacobian svd always converges on the other machine with the same software. This does not happen on conda provided scipy with MKL blas.
Numpy config:
>>> np.show_config()
blas_mkl_info:
  NOT AVAILABLE
blis_info:
  NOT AVAILABLE
openblas_info:
    library_dirs = ['D:\\a\\1\\s\\numpy\\build\\openblas_info']
    libraries = ['openblas_info']
    language = f77
    define_macros = [('HAVE_CBLAS', None)]
blas_opt_info:
    library_dirs = ['D:\\a\\1\\s\\numpy\\build\\openblas_info']
    libraries = ['openblas_info']
    language = f77
    define_macros = [('HAVE_CBLAS', None)]
lapack_mkl_info:
  NOT AVAILABLE
openblas_lapack_info:
    library_dirs = ['D:\\a\\1\\s\\numpy\\build\\openblas_lapack_info']
    libraries = ['openblas_lapack_info']
    language = f77
    define_macros = [('HAVE_CBLAS', None)]
lapack_opt_info:
    library_dirs = ['D:\\a\\1\\s\\numpy\\build\\openblas_lapack_info']
    libraries = ['openblas_lapack_info']
    language = f77
    define_macros = [('HAVE_CBLAS', None)]

scipy config:
scipy.show_config()
lapack_mkl_info:
  NOT AVAILABLE
openblas_lapack_info:
    library_dirs = ['C:\\projects\\scipy-wheels\\scipy\\build\\openblas_lapack_info']
    libraries = ['openblas_lapack_info']
    language = f77
    define_macros = [('HAVE_CBLAS', None)]
lapack_opt_info:
    library_dirs = ['C:\\projects\\scipy-wheels\\scipy\\build\\openblas_lapack_info']
    libraries = ['openblas_lapack_info']
    language = f77
    define_macros = [('HAVE_CBLAS', None)]
blas_mkl_info:
  NOT AVAILABLE
blis_info:
  NOT AVAILABLE
openblas_info:
    library_dirs = ['C:\\projects\\scipy-wheels\\scipy\\build\\openblas_info']
    libraries = ['openblas_info']
    language = f77
    define_macros = [('HAVE_CBLAS', None)]
blas_opt_info:
    library_dirs = ['C:\\projects\\scipy-wheels\\scipy\\build\\openblas_info']

I happen to use threadpoolctl so that provides some nice information about blas:
>>> threadpoolctl.threadpool_info()
[{'filepath': 'C:\\Users\\...\\miniconda3\\envs\\flaky\\Lib\\site-packages\\numpy\\.libs\\libopenblas.NOIJJG62EMASZI6NYURL6JBKM4EVBGM7.gfortran-win_amd64.dll', 'prefix': 'libopenblas', 'user_api': 'blas', 'internal_api': 'openblas', 'version': '0.3.9.dev', 'num_threads': 8, 'threading_layer': 'pthreads'}, {'filepath': 'C:\\Users\\...\\miniconda3\\envs\\flaky\\Lib\\site-packages\\scipy\\.libs\\libopenblas.3HBPCJB5BPQGKWVZAVEBXNNJ2Q2G3TUP.gfortran-win_amd64.dll', 'prefix': 'libopenblas', 'user_api': 'blas', 'internal_api': 'openblas', 'version': '0.3.9', 'num_threads': 8, 'threading_layer': 'pthreads'}]

Might be related to hardware somehow so I've dumped the output of HWiNFO64
dell (flaky).LOG
lenovo (stable).LOG
And here is a test jacobian that failed: (it doesn't fail every time)
jacobian.zip

If you are mixing miniconda and pip installations, this can happen. Especially, the numpy and the scipy in the threadpool line are quite different. Make sure that the installations are compatible and use either conda environment or pip but not both.

Windows? What version? The 2004 (latest) version broke svg.

@charris indeed 2004 (Microsoft Windows 10 Home (x64) Build 19041.450 (2004/May 2020 Update)).  Can you link any other issues related to this? also, would users be expecting a fix from scipy, openblas, or from Microsoft?

Baah not that again...

@ilayn Thanks I'll just follow that issue then


hyper-visual autohide/collapse button

hyper-visual needs an option to autohide or a collapse button. It's very distracting because it floats behind the text whenever you run a command.

You might want to ask that on their repo instead: https://github.com/linonetwo/hyper-visual
We only list plugins and themes that Hyper users could be interested in.


Add Math Classes to the Coq Platform

Math Classes is a Coq project that provides abstract interfaces for mathematical structures based on type classes.
Since Math Classes is a general, useful, and well-known library used by large projects such as CoRN, I propose that it should be included in the Coq Platform. Math Classes has had consistent opam-packaged releases since Coq 8.8.
@spitters is the maintainer of Math Classes.

I already silently included it as prerequisite of CoRN (for which I took the request of @VincentSe as maintainer agreement), but I guess we should request the agreement of Bas Splitters, which I will do.

Yes, please add math-classes to platform.
On Sat, Sep 25, 2021 at 10:21 AM MSoegtropIMC @.***>
wrote:

I already silently included it as prerequisite of CoRN (for which I took
the request of @VincentSe https://github.com/VincentSe as maintainer
agreement), but I guess we should request the agreement of Bas Splitters,
which I will do.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/coq/platform/issues/14#issuecomment-927087096, or
unsubscribe
https://github.com/notifications/unsubscribe-auth/AABTNTQLKHFGEDC4GTQ23E3UDWA7TANCNFSM4PVH3UWQ
.
Triage notifications on the go with GitHub Mobile for iOS
https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675
or Android
https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

I included coq-math-classes.8.13.0 via (https://github.com/coq/platform/pull/143).
I plan to include it in 8.14+beta as well.


cache geometries for point-aggregated bins

Geometries are not currently exposed from the sharedstreets-js lib. Once this is enabled, add these to the geometry cached used in metrics.

🚢 'd
https://github.com/sharedstreets/sharedstreets-mobility-metrics/commit/084e2a057dfc3cb8939d2f85835250c344f36a2e
Availability and On-street now have higher coverage. On-street in particular, sometimes is found on streets with zero trips, which would previously have been dropped. Now we pull the geometries from the shst tileindex and cache them in the metrics geometry blob.


DioError [DioErrorType.DEFAULT]: FormatException: Unexpected character (at character 1)

DioError [DioErrorType.DEFAULT]: FormatException: Unexpected character (at character 1)

请求是成功的, 服务端返回的是一个Base64编码的字符串

请贴出错误栈及触发的源码

随便弄个get接口,然后返回一个base64的字符串不就行了吗,你这个库里默认做了json格式校验吧

只有当返回头content-type指明为json时默认才会自动转换，如果你不想以让自动转换，可以指定接收的responseType， 文档里都有。
:octocat: From gitme Android

when api is 500, content-type is text/html and using default responseType will cause same error @wendux

I have a similar issue when field name has a camelCase format. For instance:
 FormData.from({ "loginData": jsonEncode({           "phone": phoneNumber,           "zipcode": zipCode,           "device_id": deviceId,           "os_id": osId,         } })
It throws FormatException: Unexpected character. However, if I replace loginData by logindata, It works. I use PostMan, It works the request with loginData.

I had this issue and turns out I was already decoding json in my base options and tried decoding it again in my logic to handle the response data. Like this:
BaseOptions options = new BaseOptions(
    contentType: ContentType.json.toString(),
    responseType: ResponseType.json,
    followRedirects: false,
    validateStatus: (status) {
      return status < 500;
    },
  );

and I was still trying to decode it here
return jsonDecode(response.data);
instead of just
return response.data;

better use http :p


Doc Clarification on setting a global version

The docs say
** Do not activate fvm using flutter pub global activate** if you plan on using the --global flag.
But the only instructions we have for installing this is:
Usage

Install Dart.
Activate Fvm:

> pub global activate fvm

The warning command includes the word "flutter" in i , but I'm not sure if this is a typo or that if we run just pub global activate and we want to use the active fvm version globally, it's fine.
If it's a typo and you meant not to run pub global activate fvm, then what should we use instead? It would help if you specified the correct way to run this right after the warning

@ThinkDigitalSoftware I updated the doc to make it a bit clearer. You should not use the pub version that comes with flutter to install fvm.
The reason for that is that you will be switching the Flutter SDK and that will impact the pub cache.
Doc updated
Do not activate fvm using flutter pub global activate if you plan on using the --global flag. Only activate fvm using pub global activate.

Thanks. Now where do we find fvm's dart installation so I can add it to the path?

@ThinkDigitalSoftware you have to install dart as per the instructions.
https://dart.dev/get-dart
After that everything is the same.

Oh, OK. I'll just point to the old installation that was installed along-side flutter. Will that work?

Not sure I understand. It's important that flutter pub is not used to install fvm... since fvm will be used to change the flutter version.

Install dart sdk
Pub global activate fvm

And you should be ready to go.

The issue is that I came from a regular flutter installation to fvm, so I'm trying to avoid having to delete the existing installation. Currently, the dart from my old flutter installation is the one used when calling dart with no parameters. When I update Flutter using fvm, will FVM attempt to update the  dart version as well if there is an update that comes with it?

If you use fvm to change the main version when you call flutter on the terminal, most likely this will cause conflicts. That is why I suggest installing the standalone dart version.
With fvm you can use flutter as global but you can just use per project. The issue with using flutter pub as the way to install fvm , is that you have almost a cyclic conflict where you have flutter being used to install fvm, and fvm being used to install flutter.
Let me know if that makes sense. Maybe I am not explaining this that well.

My experience with fvm has been a bit tedious and it would guide me to receive advice ... I use linux ... and I had a regular flutter installation according to the documentation ... then I deleted that installation ... I installed dart standalone then fvm ... my doubt here it is: do i still need to install flutter sdk apart from fvm? I say it because the flutter commands do not work for me .. and when I try to create an app using fvm it gives me the following error ...
Usage Error: Flutter version null is not installed

@NestorDevs thanks for the feedback. The way I personally use is with the Flutter sdk installed and that becomes my global default version.
Then I use fvm for project specific.
I plan on releasing the brew version soon and that will make things much simpler.

you mean i need flutter sdk for fvm to work?

You do not. I understand your problem after chatting. Let me know any other suggestions to improve the docs.

Closed


feat: add get project info helper to overrides helper package

Adding getProjectInfo() helper function to the helpers package which would provide override and custom resource functions access to:

Project name
Current env name

This will enable customers to have conditional logic in code(override or custom-resources) per env.

Codecov Report

Merging #8620 (6bab1fc) into extOverrides2 (b51b44e) will not change coverage.
The diff coverage is n/a.

@@              Coverage Diff               @@
##           extOverrides2    #8620   +/-   ##
==============================================
  Coverage          56.26%   56.26%
==============================================
  Files                795      795
  Lines              45285    45285
  Branches            9073     9073
==============================================
  Hits               25478    25478
  Misses             18997    18997
  Partials             810      810

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update b51b44e...6bab1fc. Read the comment docs.


Add module to check image size

Codecov Report

Merging #151 (36ab2d3) into main (ab34697) will decrease coverage by 6.78%.
The diff coverage is 0.00%.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #151      +/-   ##
==========================================
- Coverage   60.97%   54.18%   -6.79%
==========================================
  Files          26       27       +1
  Lines        1112     1135      +23
  Branches      223      228       +5
==========================================
- Hits          678      615      -63
- Misses        356      451      +95
+ Partials       78       69       -9

Impacted Files
Coverage Δ

qgis_deployment_toolbelt/utils/check_image_size.py
0.00% <0.00%> (ø)

...loyment_toolbelt/jobs/job_environment_variables.py
41.17% <0.00%> (-37.26%)
:arrow_down:

qgis_deployment_toolbelt/utils/win32utils.py
44.00% <0.00%> (-36.00%)
:arrow_down:

qgis_deployment_toolbelt/profiles/shortcuts.py
45.25% <0.00%> (-23.36%)
:arrow_down:

qgis_deployment_toolbelt/constants.py
73.91% <0.00%> (-13.05%)
:arrow_down:


Create GeoIP plugin

Motivation
The reputation rules have been removed from the core.
Proposed solution
Create an optional plugin for GeoIP users.

What is this plugin supposed to do?

What is this plugin supposed to do?

I think the goal is to replace the "old" REQUEST-910-IP-REPUTATION.conf, which is no longer exists.

Exactly.
Recent experience with using ASN information in the assessment of false positives makes me think that full maxmind DB support could be beneficial, thus going beyond the original ModSecurity GeoIP Country feature.

Recent experience with using ASN information in the assessment of false positives makes me think that full maxmind DB support could be beneficial, thus going beyond the original ModSecurity GeoIP Country feature.

+1

Contrary to the previous implementation, I think it would be better to increase the score depending on certain blacklists and stick to the normal CRS blocking evaluation.

Properties to consider could be the following:

Country Code
Continent
ASN

Full MaxMind support could be complicated depending on the server technology.
For Apache httpd, it should be fairly straight-forward. You specify the database file, the value you want to look up based on IP, and the environment variable to store the looked-up value in.
mod_maxminddb
For nginx it should be simple as well for certain properties, as far as I can tell, but I have not worked with the MaxMind module for nginx. The module appears to be less flexible though. The names of the environment variables appear to be hard-coded and not all properties and database types are listed.
ngx_http_geoip_module
For Caddy there could be even more problems. It appears that the Caddy module does not expose the MaxMind environment variables as the other modules do but simply provides directives to restrict access by these values.
caddy-maxmind-geolocation

As a side-note with respects to SecGeoLookupDb, the database format for Caddy & Coraza is different than for ModSecurity:

https://coraza.io/docs/seclang/directives/#secgeolookupdb

Coraza relies on the free geolocation databases (GeoLite City and GeoLite Country) that can be obtained from MaxMind http://www.maxmind.com. Only .mmdb format is supported.

https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual-(v2.x)#secgeolookupdb

ModSecurity relies on the free geolocation databases (GeoLite City and GeoLite Country) that can be obtained from MaxMind http://www.maxmind.com/. Currently ModSecurity only supports the legacy GeoIP format. Maxmind's newer GeoIP2 format is not yet currently supported.

However, I would not expect this to be a problem in practice.

I wonder whether SecGeoLookupDb is the way to go here. At least on Apache, the MaxMind module is more flexible, helps to work around ModSec 2.9 not supporting the newer format etc. The Apache CRS plugin could then inspect env variables.

Or, if you have some other proxy sitting in front of ModSecurity to provide HA (e.g. HAProxy, etc.), add the geolocation info as request headers, evaluate in ModSec if needed, and the back end servers can record the geo data in the logs, too. Lots of flexibility, more so than using SecGeoLookupDb.

Agreed. I think there are many options to get the information into ModSec and the best is probably to provide rules to work on env variables. But I seriously doubt this works in nginx.

What about to create really GeoIP only plugin which then can be used by other plugins, like IP reputation?
For flexible GeoIP implementation, see my False Positive Plugin, rules 9599020 and 9599110:
https://github.com/azurit/modsecurity-false-positive-report-plugin/blob/9c9eec2881f486d970dc94d2ada859bfeb5e6b29/plugins/false-positive-report-config.conf#L60
https://github.com/azurit/modsecurity-false-positive-report-plugin/blob/9c9eec2881f486d970dc94d2ada859bfeb5e6b29/plugins/false-positive-report-after.conf#L27
I can split this into separate plugin.

https://github.com/azurit/modsecurity-geoip-plugin

@azurit Is this ready to be moved to the crs repository? What is needed here?

@fzipi I was talking with @dune73 about this and he thinks the plugin should be able to at least block requests based on GeoIP data, which it's currently not. My idea is that GeoIP plugin is only adding a unified way how to integrate and use GeoIP in CRS and it's going to be used by other plugins (or custom user rules) - and that 'other plugins' will do blocking and other things. This needs to be discussed.

Excellent, thanks for documenting this. Do you want to add it in the next meeting agenda?

@fzipi Done.

Looks like per the chat agenda, we are blocked here waiting on a comment from @dune73, is that right?


Need more useful information when a project cannot be opened

Is your feature request related to a problem? Please describe.
When I open a SQL project, it tells me that the project is failed to load, but there is no helpful information in the console.

Describe the solution or feature you'd like
I need more helpful information. And I need know what should I do to load the project. Because others projects can be loaded.
Describe alternatives you've considered
Give me step what changes are needed in the SQL project.
Additional context
Here is the extension id, microsoft.sql-database-projects. The version is v0.10.0.

Is this project able to be loaded in Visual Studio? If possible, can you share this project or one that repros this behavior?

Is this project able to be loaded in Visual Studio? If possible, can you share this project or one that repros this behavior?

Yes, it can be loaded in Visual Studio.
I'm sorry, I cannot share that project, it's an internal project. And I haven't got the same issue in other projects. ☹

Hmm ok. Based on the first error message, looks like the sql database projects extension is looking to read the nodeValue of something in the .sqlproj, but can't find it. From a quick look at the code, these are the different specific nodeValues being looked for, if you can check if any of those aren't present in the project with this issue:

ProjectGuid
DatabaseVariableLiteralValue for dacpac references
SuppressMissingDependenciesErrors for dacpac and project references
Name for project references

This is the file where the project is read and where the error would be coming from: https://github.com/Microsoft/azuredatastudio/blob/affe3a838bf240159c77a0771d9c4bf32932d97a/extensions/sql-database-projects/src/models/project.ts#L117

The .sqlproj file has all of the nodes you mentioned. And I compared it with another project that could be loaded, there were no differences.
But I found one thing, the .sqlproj which could not be loaded is a very big file, it has more than 20k lines. Would this be an issue?

It's possible, but I would expect an out of memory error if the file was too big. Would it be possible to share just the .sqlproj xml file? I should be able to test the parsing part throwing this error with just the .sqlproj.


Fix testCompile

This fixes tests not being able to compile during the testCompile phase by specifying the azure-core-tests artifact.

Can one of the admins verify this patch?

Closing as obsolete.


CkEditor plugins , how to add more ?

I am trying to integrate the following CKEditor plugin:
http://ckeditor.com/addon/codesnippet
The fork with the plugin added can be found here:
https://github.com/petzlux/djangocms-text-ckeditor
Now I am a bit at a loss as to how to integrate it into my DjangoCMS installation?
I tried simply adding the plugin int the config of my project as follows:
CKEDITOR_SETTINGS = {
    'language': '{{ language }}',
    'toolbar': 'CMS',
    'skin': 'moono',
    'extraPlugins': 'codesnippet',
}

But that doesnt add the functionality in the toolbar. What else needs to be done ?

I got it to work like this:
CKEDITOR_SETTINGS = {
  ...
  'extraPlugins': 'codesnippet',
  'toolbar_CMS': [
    ...
    ['CodeSnippet', ]
    ...
  ]
}

Codesnippet's dependencies appear to be widget and lineutils, which also (just like codesnippet) have to be copied to ckeditor's plugin dir (djangocms_text_ckeditor/ckeditor/plugins).


Allow downloading the source code from MC

Check if removing jitpack artifacts help

Discussion: https://github.com/WalletConnect/walletconnect-monorepo/discussions/1584?sort=old

The task is on hold.
Checked, but it did not help:

Added .version file to the META-INF of Chat SDK
Added the ext for @aar in the implementation when fetching dependency
Researched a bunch of errors: org.gradle.internal.resolve.ModuleVersionResolveException, org.gradle.api.internal.artifacts.ivyservice.DefaultLenientConfiguration$ArtifactResolveException, Task ':app:DownloadSources' is not up-to-date because: Task has not declared any outputs despite executing action

Updates:

Updated docs with new maven URLs (maven { url '[https://jitpack.io](https://jitpack.io/)' }, maven { url "https://repo1.maven.org/maven2/" })

Observation:
The problem occurs in both situations when the artifact is fetched from maven central and when an old artifact is fetched from jitpack.

Reported issue: https://github.com/WalletConnect/WalletConnectKotlinV2/issues/494


Target Mstery

PR Description 📜

this game is developed by html,css and js tech stacks and you can play it easily by moving your mouse to upward and hit the target!

Players take turns throwing or shooting projectiles, such as darts, arrows, or bullets, towards the target.

The projectiles are designed to hit the board, ideally landing as close to the bullseye as possible.

How to play? 🕹

Drag the cursor upward so that you are able to hit the target.
If you hit the target it gives you achievement note and if lose so you miss.
Enjoy this game.
Fixes # 225

Mark the task you have completed ✅

✅ I follow CONTRIBUTING GUIDELINE & CODE OF CONDUCT of this project.
✅ I have performed a self-review of my own code or work.
✅ I have commented my code, particularly in hard-to-understand areas.
✅My changes generates no new warnings.
✅I have followed proper naming convention showed in CONTRIBUTING GUIDELINE
✅ I have added screenshot for website preview in assets/images
✅ I have added entries for my game in main README.md
✅ I have added README.md in my folder
[x ] I have added working video of the game in README.md (optional)
✅I have specified the respective issue number for which I have requested the new game.

Add your screenshots(Optional) 📸

Thank you @Ks103 ,for creating the PR and contributing to our GameZone 💗
Review team will review the PR and will reach out to you soon! 😇
Make sure that you have marked all the tasks that you are done with ✅.
Thank you for your patience! 😀

@kunjgit please verify and merge my pull request if there are any changes let me know.

Code has no errors and game is running smothly but i'll request to @Ks103 please add a screanshort on asset section

I have added the ss , I request you to please approve my pr and merge it.

Hey @Ks103 Looks good just make sure during the time you make PR tag issue properly so ...
make sure you add your game entry on main README file and create PR again !!

Thank you  @Ks103 , for your valuable time and contribution in our GameZone 💗.
It’s our GameZone, so Let’s build this GameZone altogether !!🤝
Hoping to see you soon with another PR again 😇
Wishing you all the best for your journey into Open Source🚀


Case sensitivity still an issue with nuget packages

https://bugzilla.xamarin.com/show_bug.cgi?id=20630

I just changed the Bio.Tools solution to remove all the projects that depended on excel and change the packages.config file to refer to the case sensitive version.  This should work around this issue, but did we ever figure out why Nuget changes the name on upload?


Create a Mbed Crypto Secure Element driver calling Parsec Rust Client

This component would allow Parsec to be used where clients directly call Mbed Crypto through PSA Crypto API in C.
This task is about creating a C wrapper complying with the Mbed Crypto Secure Element Driver interface and calling the Parsec Rust Client in Rust (see parallaxsecond/parsec#127).
It might be needed to isolate this component into its own repository, if so please ask.
See an example of Secure Element Driver here.
Testing could be done using the Mbed Crypto tests with a Mbed Crypto library where Parsec is used via the SE driver. The PSA Developper APIs tests here might be useful for testing.

I did some more analysis on this task. In more details:

the C application using Mbed Crypto has to call the psa_register_se_driver function to register the SE element driver to use, before calling psa_crypto_init. See an example here of an application using the ATECC608A Secure Element Driver.
the psa_register_se_driver function takes a const psa_drv_se_t * parameter which is a structure of function pointers, containing pointers to the crypto and key management functions to implement.
this task is about creating a (static for now) library (parsec_tpm_se.a) and a header file (parsec_tpm_se.h) exposing a symbol parsec_tpm_se of type const psa_drv_se_t *. The library can be linked with the application which can use the symbol to call the register function.

About the execution:

a Rust library crate, in its own repo will be created. This crate will generate the static library, to be linked with C code. It will expose the parsec_tpm_se symbol through C FFI. It will have dependence on the Parsec Client. It will use direct authentication and the TPM provider.
the Rust driver will not implement all SE functions: only some of the key management (psa_drv_se_key_management_t) and asymmetric crypto (psa_drv_se_asymmetric_t: sign and verify) ones. Not all parameters will be supported as Parsec does not support all parameters for key attributes and algorithms.
For testing on the fly, a C application will be created that links with Mbed Crypto and the Parsec SE driver, it will register the Parsec driver and try some Mbed Crypto operations making sure it goes through Parsec (check with logs). This can be tested with the software TPM library (both on x86 and Aarch64) and on real hardware (raspberry pi with a hardware TPM).
For more complete testing, the PSA Developper APIs test will be used.
The Rust crate must compile on Linux on Aarch64 target. A usual CI combaination of GitHub actions and Travis can be set to test both architecture.

The repository has been created here. It contains a basic shell to be able to build the crate as a static library and link it to a C application.
A test/example of a C application using it is in c-tests. The ci.sh script details the steps needed to build the Mbed Crypto library, the Parsec SE driver, the C example and link all three together. To run it needs a Parsec service running on the system with the TPM provider.
This will be added on the CI.
To complete the key_management and asymmetric methods, there will need to be a way to translate between the PSA C structures (psa_key_attributes_t, psa_algorithm_t) to the Parsec Rust ones of the interface (KeyAttributes, Algorithm).
This step might be helped by the rust-psa-crypto crate under development.

The Secure Element Driver is functionally complete, in the same repository. Testing using the PSA Functionnal APIs has been tried in ARM-software/psa-arch-tests#220

Closing as done.


Errors in WebGL

Hey Keijiro - thanks so much for all these amazing repos! I tried building this one with the target set to WebGL, but I get errors in Chrome. Do you know if it is possible? Or does WebGL not work with compute shaders?

Or does WebGL not work with compute shaders?

As far as I know, Unity WebGL player doesn't support GPU compute.
You may have to modify the package to run the model with the CPU worker.

I'm closing this issue now. Please reopen it for further problems.


Update to Schema for Senzing V3

Pull requests:

https://github.com/Senzing/postgresql-client/pull/20


There is nothing here that restricts your freedom. You’re free to not use the composer, right? Someone’s regularly updates list of software alternatives on habr and even more — i’ve seen a whole online-table with a collection of companies, services, apps, packages, etc that dared to offend some of our fellow citizens and one’s can cry about it in appropriate column (it’s disgusting!). Also you’re shouldn’t use “propaganda” in this case — “information”, “agitation”, “advertising”. All the info I’ve seen there was a facts written in neutral form and your dirty words is inappropriate here. You’re free to stay coward trying to live in a fictional world made up of somehow and this is true too. But in the real world this small reminders of crimes committed “in the name of our flag” should be taken as a gift because barbarians would be throwing bombs, not words.
Please, change the mark of this topic. Be a fool is not a crime and topicstarter didn’t say anything even close to be nazi.

Please, change the mark of this topic. Be a fool is not a crime and topicstarter didn’t say anything even close to be nazi.

Respectfully, I disagree. The label is applied following duck typing principle. If one uses their freedom of speech to repeat the talking point of the terrorist propaganda, they match the pattern just like any passive bystanders do.

All I ask is how can I disable this. I just don't feel comfortable.  I am sure if someone put
#StandWithNonLGBT you would lose your mind right??.
Same here, just put an option to disable.
Something being free does not mean we have to support all political views of who sponsor this package..
With all due respect 🙏

I saw an answer you can use Chinese mirror... it didn't a trick, tho it will just start to cache everything and take a whole day...
But guys why can't we just put --ignore-political-message 😕
What if I am supporting oppressed Palestinians, do I have rights to do so... If you guys decide to put this package out of politics we would have not discussing this we would now fixing bugs and have peaceful coding.

The easiest way to disable it is to end the war against Ukraine.
The sooner the war ends -> the sooner banners get removed.


remove about office hour from README.md

We will abolish current office hour system. So We are going to remove go-to-meeting's link from everywhere. I've deleted the sentence about office hour in README.md.
Could you please review this?
/cc @jpsim @timanglade

lgtm! :)


Split export file into multiple files to allow github pages publishing

Moved to Backlog https://github.com/Praytic/youtd2/discussions/407


Getting "SyntaxError: Unexpected token ..."

Getting the following error from snoowrap.
/server/node_modules/snoowrap/node_modules/promise-chains/index.js:55
    construct: (target, args) => (wrap(target().then(result => (wrap(new result(...args))))))
                                                                                ^^^

SyntaxError: Unexpected token ...
    at exports.runInThisContext (vm.js:53:16)
    at Module._compile (module.js:374:25)
    at Object.Module._extensions..js (module.js:417:10)
    at Module.load (module.js:344:32)
    at Function.Module._load (module.js:301:12)

    at Module.require (module.js:354:17)
    at require (internal/module.js:12:17)
    at Object.<anonymous> (/server/node_modules/snoowrap/lib/snoowrap.js:7:22)
    at Module._compile (module.js:410:26)
    at Object.Module._extensions..js (module.js:417:10)
    at Module.load (module.js:344:32)
    at Function.Module._load (module.js:301:12)
    at Module.require (module.js:354:17)
    at require (internal/module.js:12:17)
    at Object.<anonymous> (/server/controllers/AuthController.js:10:16)
    at Module._compile (module.js:410:26)
    at Object.Module._extensions..js (module.js:417:10)
    at Module.load (module.js:344:32)
    at Function.Module._load (module.js:301:12)
    at Module.require (module.js:354:17)
    at require (internal/module.js:12:17)
    at module.exports (/server/routes.js:14:14)

Oh right, the promise-chains module uses the spread operator, which only works in node 5. I'll push a fix to that module so that it'll work with node 4 as well.

@not-an-aardvark awesome. Thanks for the quick reply.

Alright, I've just pushed<EMAIL_ADDRESS>which fixes this issue. I believe you should be able to upgrade to that by using npm upgrade promise-chains.

iam facing a problem..
when i used ng -v command
usr/local/lib/node_modules/@angular/cli/models/config/config.js:17
constructor(_configPath, schema, configJson, fallbacks = []) {
^
SyntaxError: Unexpected token =
at exports.runInThisContext (vm.js:53:16)
at Module._compile (module.js:374:25)
at Object.Module._extensions..js (module.js:417:10)
at Module.load (module.js:344:32)
at Function.Module._load (module.js:301:12)
at Module.require (module.js:354:17)
at require (internal/module.js:12:17)
at Object. (/usr/local/lib/node_modules/@angular/cli/models/config.js:3:18)
at Module._compile (module.js:410:26)
at Object.Module._extensions..js (module.js:417:10)
anybody can help me

Hi,
It looks like your syntax is invalid because you're using a default parameter for fallbacks.
This doesn't seem to be an issue with snoowrap, and this is not the best place to get help with JavaScript in general. I would recommend asking a question on StackOverflow if you're having trouble with syntax errors in your code.

It might look that way, but it's happening to me too and I have no code of my own yet.  This is not a user JavaScript problem, but something to do with "ng -v"  "ng new blahblah"
All result in the same result.

node index.js
/home/software/index.js:3
r.connect(( host: 'localhost',port: 8080 ), function(err, conn) {
^
SyntaxError: Unexpected token :
at exports.runInThisContext (vm.js:53:16)
at Module._compile (module.js:374:25)
at Object.Module._extensions..js (module.js:417:10)
at Module.load (module.js:344:32)
at Function.Module._load (module.js:301:12)
at Function.Module.runMain (module.js:442:10)
at startup (node.js:136:18)
at node.js:966:3

Running on the same problem as @chengjaun ... Is there any solution?


PULL_REQUEST_TEMPLATE.md should reference CONTRIBUTING

https://github.com/googleapis/nodejs-dlp/blob/master/.github/PULL_REQUEST_TEMPLATE.md should link to something which talks about conventionalcommits.org -- if only https://github.com/googleapis/nodejs-dlp/blob/master/CONTRIBUTING.md

I think it's fine to keep the template short. It's just an additional reminder and not a duplicate of https://github.com/googleapis/nodejs-dlp/blob/master/CONTRIBUTING.md


Workspace - Red dot appears without error message when changing currency to non-USD currency

If you haven’t already, check out our contributing guidelines for onboarding and email<EMAIL_ADDRESS>to request to join our Slack channel!

Version Number: 1.4.51-3
Reproducible in staging?: y
Reproducible in production?: y
Action Performed:
Precondition:

User is an owner of Collect workspace.
USD is the default currency for the workspace.
Bank account is not added to the Collect workspace.

Go to staging.new.expensify.com.
Go to workspace settings > Collect workspace.
Go to Workflows.
Toggle on "Make or track payments".
Go to workspace profile.
Click Currency.
Change it to a different currency.

Expected Result:
If there is an error, an error message will show up.
Actual Result:
Red dot appears next to Profile without error message and there is no way to dismiss it.
Workaround:
Unknown
Platforms:

Which of our officially supported platforms is this issue occurring on?

[x] Android: Native
[x] Android: mWeb Chrome
[x] iOS: Native
[x] iOS: mWeb Safari
[x] MacOS: Chrome / Safari
[x] MacOS: Desktop

Screenshots/Videos
Add any screenshot/video evidence
https://github.com/Expensify/App/assets/93399543/d2073698-9ca8-4270-a85c-a2b4386c8509
View all open jobs on GitHub

@sonialiap I haven't added the External label as I wasn't 100% sure about this issue. Please take a look and add the label if you agree it's a bug and can be handled by external contributors

Closing this in favour of https://github.com/Expensify/App/issues/38206 where we are going to handle other error messages too


Phoenix doesn't allow choice in BIP21 with BOLT11 in deep link

I use Phoenix (2.0.12) on Android, when I click on the button "Pay in Wallet" with a BIP21 having a lightning=, I am not presented with a choice as I would if I just scanned the QR Code.
You can check with the following,

Go on https://mainnet.demo.btcpayserver.org/apps/3Q3sWFpWkCEcsPoJnoB3k9x3qS3m/pos on mobile
Enter 1500 JPY
Click "Pay in Wallet"

Here a QR Code to open the app on mobile:

What you see: On-Chain payment without amount prefilled.
What I am expecting: Same experience as QR Code, ie, it should ask me to pay on lightning or on-chain, and prefill the sats amount.
First question: If on-chain payment is selected by default, why the sats amount isn't even prefilled.
Second question: on-chain payment shouldn't be selected at all, instead the app should give the choice to select lightning.
Link to: https://github.com/btcpayserver/btcpayserver/issues/5455

Thanks for reporting this. It's a bug in the logic forwarding the bitcoin uri to the scanner, hence the amount not being filled in the payment screen, and the dialog to choose a between on-chain/off-chain being missing.

This will be available in the next release. Thanks for your patience!


Specify TLS Version on Ingress level

Environmental Info:
K3s Version:

k3s version v1.19.3+k3s2 (f8a4547b)
Node(s) CPU architecture, OS, and Version:

Linux v22019068602391930 4.15.0-123-generic #126-Ubuntu SMP Wed Oct 21 09:40:11 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
Cluster Configuration:

One Server Master & Node
Describe the bug:

Unable to set the TLS minimal version of ingress.
Steps To Reproduce:

Installed K3s:

my ingress config:
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
annotations:
kubernetes.io/ingress.class: traefik
traefik.ingress.kubernetes.io/rule-type: "PathPrefixStrip"
ingress.kubernetes.io/ssl-redirect: "true"
ingress.kubernetes.io/tls-minimum-version: "1.2"
cert-manager.io/cluster-issuer: letsencrypt-prod
name: hello-world-ingress
namespace: default
spec:
rules:
- host: hello.mydomain.com
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: hello-world-service
port:
number: 80
tls:
- hosts:
- hello.mydomain
secretName: my-cert
Expected behavior:

ingress.kubernetes.io/tls-minimum-version: "1.2" should change the minimal tls version.

Actual behavior:

External scan showed that tls 1.0 & 1.1 is still enabled.
Additional context / logs:

I did more research and it looks like traefik V2 does support this annotation (probably set a bit different)

Do you know at what point k3s will switch to V2
How can I change the default configuration on v1?

Thank you

We don't currently have a timeline for going to traefik v2.
You can customize the chart using the values from the link I posted above: ssl.tlsMinVersion. The easiest way to do this would probably be to use a HelmChartConfig as documented here: https://rancher.com/docs/k3s/latest/en/helm/#customizing-packaged-components-with-helmchartconfig

And just another security input from my site.
Default SSL/  TLS settings should be adjusted to provide secure ingress connections out of the box.
Report of ssllabs

generated 2020-11-14, Mozilla Guideline v5.6, Traefik 1.7.22, intermediate configuration
https://ssl-config.mozilla.org/#server=traefik&version=1.7.22&config=intermediate&guideline=5.6
defaultEntryPoints = ["http", "https"]
[entryPoints]
[entryPoints.http]
address = ":80"
[entryPoints.http.redirect]
entryPoint = "https"
[entryPoints.https]
address = ":443"
[entryPoints.https.tls]
minVersion = "VersionTLS12"
cipherSuites = [
"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305"
]
  # due to Go limitations, it is highly recommended that you use an ECDSA
  # certificate, or you may experience compatibility issues
  [[entryPoints.https.tls.certificates]]
  certFile = "/path/to/signed_cert_plus_intermediates"
  keyFile = "/path/to/private_key"

I'm not sure what you've posted - are those traefik settings that worked for you?

The screenshot is taken from the site https://www.ssllabs.com/ssltest/analyze.html checking my private ingress to my kubernetes cluster. (not changing any default settings). This shows that tls settings should be tweaked (immediatly). For example disabling TLS 1.0 & 1.1 and disabling weak ciphers.
The second config is automatically generated by mozilla. They are providing secure and up to date configurations for many web servers. I just copy pasted their recommendation.
I think that k3s should apply the intermediate configuration by mozilla by default in traefik. I am going to test that configuration probably during this week.

@garrit-schroeder How did your test go?

So, how do we use k3s with bundled traefik and get a recent version of TLS?

Going to check tomorrow and the following days this week. Got a bit caught up in other stuff.
To change this behaviour you probably have to modify the traefik.toml. Going to post my results here later.

Ok, I managed to do it by editing the traefik.toml inside the traefik configmap according to https://doc.traefik.io/traefik/v1.7/configuration/entrypoints/ and then deleting the pod to trigger update.

That will probably get reverted when you restart, you may need to configure the helm chart to get it to stick.

We don't currently have a timeline for going to traefik v2.

Seeing as how Traefik 2 was merged 13 days ago you won't need to.

We don't currently have a timeline for going to traefik v2.

Seeing as how Traefik 2 was merged about two weeks ago you won't need to.

Note that this won't be in a release until v1.21

Is there an easy way to install k3s master branch?

When using the installer, you can set INSTALL_K3S_COMMIT to the value of any git commit hash that has been built by CI to install that version.

A default TLSOption is helpful to get grade A by Qualys SSL Check for all Ingress as described here
kind: TLSOption
metadata:
  name: default
  namespace: default
spec:
  minVersion: VersionTLS12
  cipherSuites:
    - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   # TLS 1.2
    - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305    # TLS 1.2
    - TLS_AES_256_GCM_SHA384                  # TLS 1.3
    - TLS_CHACHA20_POLY1305_SHA256            # TLS 1.3
  curvePreferences:
    - CurveP521
    - CurveP384
  sniStrict: true


Make it possible to disable userland proxy

Hi,
I think we don't need the userland proxy. Please correct me if I'm wrong.
I assume the userproxy is there because someone assumed that it's not possible to redirect traffic on the loopback interface to the container IPs on the bridge. I don't think that's the case and we basically just need to set route_localnet:
route_localnet - BOOLEAN
Do not consider loopback addresses as martian source or destination
while routing. This enables the use of 127/8 for local routing purposes.
default FALSE

Will verify that as soon as I find time.

I have narrowed down docker-proxy to be one of the (if not the single) largest cause of non-determinism for my multi-container deployments. I am all for this.

Ya we can't do it though because hairpin nat and 2.6.x kernels :( it was sooooo close

@jfrazelle I thought hairpin nat was added. What is the problem with 2.6.x kernels? We don't even support 2.6 anymore: https://docs.docker.com/installation/binaries/#check-kernel-dependencies
And even if we need it for some older kernels, can't we just introduce a global flag to disable the proxy?

@discordianfish See #9269 and #9134

:+1: for allowing hairpin NAT on kernels that support it.  I appreciate lowest common denominator is often necessary, but currently we have lots of traffic from one container going to another through the public interface <IP_ADDRESS> and this unnecessarily going through the Docker proxy.

Do we really need the proxy to be using 11MB of ram... per port!

The user land proxy is going to be removed.