Is it possible to have a property with 2 possible values for the length in a borsh-js(v.1.0.0) schema?

Is it possible to have a property with 2 possible values for the length in a borsh-js(v.1.0.0) schema?
For example, I want to have a class with a publicKey property of type Uint8Array that has a length of 32 or 65 bytes.
Basically what I'm trying to do is this: https://github.com/near/near-api-js/pull/985/files#diff-dfff95256a781858ca8cc28ea405fc0e61dee26055dd6544465040df364a6ea4R183 but I don't see how this can be done with borsh-js v1.0.0.
This is how we are using borsh-js v1.0.0 https://github.com/near/near-api-js/blob/master/packages/transactions/src/schema.ts#L90-L230
Tried removing len: 32 but that didn't help.

sounds like you need to use an enum

So, I will have to do something like that:
from this
export class PublicKey extends Assignable {
    keyType: KeyType;
    data: Uint8Array;
}

export const SCHEMA = new class BorshSchema {
    PublicKey: Schema = {
        struct: {
            keyType: 'u8',
            data: { array: { type: 'u8', len: 32 } },
        }
    };
}

to this:
class ED25519PublicKey { keyType: KeyType = KeyType.ED25519; data: Uint8Array; }
class SECP256K1PublicKey { keyType: KeyType = KeyType.ED25519; data: Uint8Array; }

export class PublicKey extends Enum {
    ed25519Key?: ED25519PublicKey;
    secp256k1Key?: SECP256K1PublicKey;
}

    ED25519_DATA: Schema = {
        struct: {
            keyType: 'u8',
            data: { array: { type: 'u8', len: 32 } },
        }
    };
    SECP256K1_DATA: Schema = {
        struct: {
            keyType: 'u8',
            data: { array: { type: 'u8', len: 64 } },
        }
    };
    PublicKey: Schema = {
        enum: [
            { struct: { ed25519Key: this.ED25519_DATA } },
            { struct: { secp256k1Key: this.SECP256K1_DATA } },
        ]
    };

right? @gagdiez

@gtsonevv that looks right, let me know if it doesn't work and we can think other solutions

@gagdiez Hey, I tried it but unfortunately it didn't work.

@gagdiez Hey, this is the test branch with enum changes https://github.com/near/near-api-js/tree/secp256k1-test.
After the changes some tests fail. To test you need to run:
pnpm i
pnpm build
pnpm test

@gtsonevv I check how things were made [1] and I am quite certain that you don't need the keyType for the schemas "ED25519_DATA" and "SECP256K1_DATA"
class ED25519PublicKey { data: Uint8Array; }
class SECP256K1PublicKey { data: Uint8Array; }

export class PublicKey extends Enum {
    ed25519Key?: ED25519PublicKey;
    secp256k1Key?: SECP256K1PublicKey;
}

    ED25519_DATA: Schema = {
        struct: {
            data: { array: { type: 'u8', len: 32 } },
        }
    };
    SECP256K1_DATA: Schema = {
        struct: {
            data: { array: { type: 'u8', len: 64 } },
        }
    };
    PublicKey: Schema = {
        enum: [
            { struct: { ed25519Key: this.ED25519_DATA } },
            { struct: { secp256k1Key: this.SECP256K1_DATA } },
        ]
    };

This way you are saying: A Public Key is either a ed25519Key or a secp256k1Key, which are arrays of different size. Then, the serialization automatically handles the "KeyType" that was previously being manually hardcoded in [1]
please check https://github.com/near/near-api-js/pull/1354/files to see if it is working now
IMPORTANT: There was a hardcoded value that needed to be modified, which I assume was the borsh representation, that now lost the "00" keytype... I do not know if this is right, please double check and merge at your own risk
[1] You can see in https://github.com/near/near-api-js/pull/985/files#diff-a300f87801fdf0e1d8db018ff4994a8c20a2bcc27152cb7d595f1f8bde52bcc9R77 that they were hardcoding the borsh serialization, since the previous version did not handle enums

@gagdiez Nice! I thought the keyType was required for the schema. Anyway, good job and thanks for the help!

yeah, but I saw it didn't work... I think the second error comes from when the key is deserialized, currently the classes
class ED25519PublicKey { keytype, data: Uint8Array; }
class SECP256K1PublicKey { keytype, data: Uint8Array; }

my PR did not change those, and I guess they will need to be changed and used accordingly to pass the other tests

amazing, very glad to hear! will close this issue then


type conversion exception occurs during  the variance query

Affected Version
The Druid version where the problem was encountered: 0.21.x,0.22.x,0.23.x
Description
When we query the variance of a field, the query result shows an unknown exception. The specific information is as follows:
Error: Unknown exception

java.util.concurrent.ExecutionException: java.lang.ClassCastException: [Ljava.lang.Object; cannot be cast to [Lorg.apache.druid.query.aggregation.variance.VarianceAggregatorCollector;

java.lang.RuntimeException

The following is used to demonstrate how to reproduce the issue. in the first place, we load some data into Apache Druid from a file using Apache Druid's native batch ingestion feature. the loading file spec like this:
{
    "type":"index_parallel",
    "spec":{
        "dataSchema":{
            "dataSource":"sample_data",
            "dimensionsSpec":{
                "dimensions":[
                ]
            },
            "timestampSpec":{
                "column":"timestamp",
                "format":"millis"
            },
            "metricsSpec":[
                {
                    "type":"longSum",
                    "name":"totalCount",
                    "fieldName":"count"
                },
                {
                    "type":"doubleSum",
                    "name":"valueSum",
                    "fieldName":"value"
                },
                {
                    "name": "resp_time_var",
                    "fieldName": "value",
                    "type": "varianceFold",
                    "inputType": "long"
                }
            ],
            "granularitySpec":{
                "type":"uniform",
                "segmentGranularity":"hour",
                "queryGranularity":"minute",
                "intervals":[
                    "2022-08-01/2022-08-23"
                ],
                "rollup":false
            }
        },
        "ioConfig":{
            "type":"index_parallel",
            "inputSource":{
                "type":"local",
                "baseDir":"/Users/junges/Downloads/",
                "filter":"sample_data.json"
            },
            "inputFormat":{
                "type":"json"
            },
            "appendToExisting":false
        },
        "tuningConfig":{
            "type":"index_parallel",
            "maxRowsPerSegment":1000000,
            "maxRowsInMemory":10000,
            "maxNumConcurrentSubTasks":1,
            "forceGuaranteedRollup":true,
            "partitionsSpec":{
                "type":"single_dim",
                "partitionDimension":"metric_key",
                "maxRowsPerSegment":1000000
            }
        }
    }
}

the sample data like this:
{"timestamp":1659286947472,"metric_key":"resp_time","state":"安徽省","city":"亳州","zipCode":"928061","country":"China","value":304,"count":38}

When data is ingested, variance calculation will be performed on the resp_time_var field.
druid query statement：
{
    "queryType": "groupBy",
    "dataSource": {
        "type": "table",
        "name": "sample_data"
    },
    "intervals": {
        "type": "LegacySegmentSpec",
        "intervals": [
            "2022-08-01T00:00:00.000Z/2022-08-10T00:00:00.000Z"
        ]
    }
    "granularity": {
        "type": "all"
    },
    "dimensions": [
        {
            "type": "default",
            "dimension": "country",
            "outputName": "country",
            "outputType": "STRING"
        }
    ],
    "aggregations": [
        {
            "type": "varianceFold",
            "name": "respTimeVar",
            "fieldName": "resp_time_var",
            "estimator": null,
            "inputType": "variance"
        }
    ]
}

Proposed solution
The following abnormal information was found by querying history.log.
{"itvl":"2022-08-09T23:00:00.000Z/2022-08-10T00:00:00.000Z","ver":"2022-08-23T03:18:53.232Z","part":0}]},"virtualColumns":[],"filter":null,"granularity":{"type":"all"},"dimensions":[{"type":"default","dimension":"country","outputName":"country","outputType":"STRING"},{"type":"default","dimension":"state","outputName":"state","outputType":"STRING"}],"aggregations":[{"type":"longSum","name":"valueSum","fieldName":"valueSum","expression":null},{"type":"varianceFold","name":"respTimeVar","fieldName":"resp_time_var","estimator":null,"inputType":"variance"}],"postAggregations":[],"having":null,"limitSpec":{"type":"NoopLimitSpec"},"context":{"applyLimitPushDown":false,"defaultTimeout":300000,"finalize":false,"fudgeTimestamp":"1659312000000","groupByOutermost":false,"groupByStrategy":"v2","maxQueuedBytes":5242880,"maxScatterGatherBytes":9223372036854775807,"queryFailTime":1661233899391,"queryId":"957339fa-1d52-427e-ae1a-f50fd8ca55a0","resultAsArray":true,"timeout":299983},"descending":false}, peer=<IP_ADDRESS>}
java.lang.RuntimeException: java.util.concurrent.ExecutionException: java.lang.ClassCastException: [Ljava.lang.Object; cannot be cast to [Lorg.apache.druid.query.aggregation.variance.VarianceAggregatorCollector;
	at org.apache.druid.query.groupby.epinephelinae.GroupByMergingQueryRunnerV2.waitForFutureCompletion(GroupByMergingQueryRunnerV2.java:385) ~[druid-processing-0.23.0.jar:0.23.0]
...
Caused by: java.lang.ClassCastException: [Ljava.lang.Object; cannot be cast to [Lorg.apache.druid.query.aggregation.variance.VarianceAggregatorCollector;
	at org.apache.druid.query.aggregation.variance.VarianceObjectVectorAggregator.aggregate(VarianceObjectVectorAggregator.java:70) ~[?:?]
	at org.apache.druid.query.aggregation.AggregatorAdapters.aggregateVector(AggregatorAdapters.java:200) ~[druid-processing-0.23.0.jar:0.23.0]
	at org.apache.druid.query.groupby.epinephelinae.HashVectorGrouper.doAggregateVector(HashVectorGrouper.java:301) ~[druid-processing-0.23.0.jar:0.23.0]
	at org.apache.druid.query.groupby.epinephelinae.HashVectorGrouper.aggregateVector(HashVectorGrouper.java:184) ~[druid-processing-0.23.0.jar:0.23.0]
	at org.apache.druid.query.groupby.epinephelinae.vector.VectorGroupByEngine$VectorGroupByEngineIterator.initNewDelegate(VectorGroupByEngine.java:409) ~[druid-processing-0.23.0.jar:0.23.0]
	at org.apache.druid.query.groupby.epinephelinae.vector.VectorGroupByEngine$VectorGroupByEngineIterator.hasNext(VectorGroupByEngine.java:316) ~[druid-processing-0.23.0.jar:0.23.0]
	at org.apache.druid.java.util.common.guava.BaseSequence.accumulate(BaseSequence.java:43) ~[druid-core-0.23.0.jar:0.23.0]

Through the above exception information, it can basically be determined that it is caused by this code:
org.apache.druid.query.aggregation.variance.VarianceObjectVectorAggregator
  @Override
  public void aggregate(ByteBuffer buf, int position, int startRow, int endRow)
  {
    # problem code
    VarianceAggregatorCollector[] vector = (VarianceAggregatorCollector[]) selector.getObjectVector();
    VarianceAggregatorCollector previous = VarianceBufferAggregator.getVarianceCollector(buf, position);
    for (int i = startRow; i < endRow; i++) {
      previous.fold(vector[i]);
    }
    VarianceBufferAggregator.writeNVariance(buf, position, previous.count, previous.sum, previous.nvariance);
  }

  @Override
  public void aggregate(
      ByteBuffer buf,
      int numRows,
      int[] positions,
      @Nullable int[] rows,
      int positionOffset
  )
  {
   # problem code
    VarianceAggregatorCollector[] vector = (VarianceAggregatorCollector[]) selector.getObjectVector();
    for (int i = 0; i < numRows; i++) {
      int position = positions[i] + positionOffset;
      int row = rows != null ? rows[i] : i;
      VarianceAggregatorCollector previous = VarianceBufferAggregator.getVarianceCollector(buf, position);
      previous.fold(vector[row]);
      VarianceBufferAggregator.writeNVariance(buf, position, previous.count, previous.sum, previous.nvariance);
    }
  }

Then I read the code and confirmed that the type conversion exception was caused by the returned object array type.
org.apache.druid.segment.column.ComplexColumn
  default VectorObjectSelector makeVectorObjectSelector(ReadableVectorOffset offset)
  {
    return new VectorObjectSelector()
    {
      final Object[] vector = new Object[offset.getMaxVectorSize()];

      private int id = ReadableVectorInspector.NULL_ID;

      @Override
      public Object[] getObjectVector()
      {
       ...
        return vector;
      }
     ...
    };
  }

So I modified this code of  org.apache.druid.query.aggregation.variance.VarianceObjectVectorAggregator and it solved the problem:
  @Override
  public void aggregate(ByteBuffer buf, int position, int startRow, int endRow)
  {
    VarianceAggregatorCollector current;
    VarianceAggregatorCollector previous = VarianceBufferAggregator.getVarianceCollector(buf, position);
    for (int i = startRow; i < endRow; i++) {
      # solution code
      current = (VarianceAggregatorCollector) selector.getObjectVector()[i];
      previous.fold(current);
    }
    VarianceBufferAggregator.writeNVariance(buf, position, previous.count, previous.sum, previous.nvariance);
  }

  @Override
  public void aggregate(
      ByteBuffer buf,
      int numRows,
      int[] positions,
      @Nullable int[] rows,
      int positionOffset
  )
  {
    VarianceAggregatorCollector current;
    for (int i = 0; i < numRows; i++) {
      int position = positions[i] + positionOffset;
      int row = rows != null ? rows[i] : i;
      VarianceAggregatorCollector previous = VarianceBufferAggregator.getVarianceCollector(buf, position);
      # solution code
      current = (VarianceAggregatorCollector) selector.getObjectVector()[row];
      previous.fold(current);
      VarianceBufferAggregator.writeNVariance(buf, position, previous.count, previous.sum, previous.nvariance);
    }
  }

Thanks for your finding. Could you open a PR to help resolve this problem?

Thanks for your finding. Could you open a PR to help resolve this problem?

ok i'm doing this


Adding lcow and docker-nigthly. Currently this enables docker on windows without vms

Nice idea loading the image via scoop prefix lcow 👍

@rasa fixed https://github.com/lukesampson/scoop/commit/3fa214d0e1fa3ebef406eaddaa1c6115a186971a

@r15ch13 thank you


Unable to install/run b-drats locally

Hi,
I tried to follow the instructions to run the acceptance test but failed to install all depependencies correctly. If I try to run the script I get
[xxxx@yyyy disaster-recovery-acceptance-tests]$scripts/_run_acceptance_tests.sh
dep: WARNING: branch, version, revision, or source should be provided for "github.com/onsi/ginkgo"
dep: WARNING: branch, version, revision, or source should be provided for "github.com/onsi/gomega"
The following errors occurred while deducing packages:
  * "code.cloudfoundry.org/routing-api/models": unable to deduce repository and source type for "code.cloudfoundry.org/routing-api": unable to read metadata: go-import metadata not found
  * "code.cloudfoundry.org/routing-api": unable to deduce repository and source type for "code.cloudfoundry.org/routing-api": unable to read metadata: go-import metadata not found

validateParams: could not deduce external imports' project roots

I tried to install routing api with
go get -insecure code.cloudfoundry.org/routing-api package code.cloudfoundry.org/trace-logger: unrecognized import path "code.cloudfoundry.org/trace-logger" (parse https://code.cloudfoundry.org/trace-logger?go-get=1: no go-import meta tags ())
but it fails . The repo for routing-api also does not give a hint how to properly install the component in  a go environment. Maybe you can give me (and others) a hint how to install all the dependencies?
Thanks, Jochen

Hi @damzog
We're not sure why you are hitting an issue with dependencies. Currently b-drats does not have a dependency on code.cloudfoundry.org/routing-api, did you add it locally? We tried running go get code.cloudfoundry.org/routing-api and it succeeded. We also tried dep ensure -add code.cloudfoundry.org/routing-api and it succeeded. Perhaps there was a temporary failure?
Also, scripts/_run_acceptance_tests.sh does not run dep ensure since we commit the vendor folder. So it should be possible to run the acceptance tests with a fresh clone of the repo after exporting INTEGRATION_CONFIG_PATH and BBR_BINARY_PATH. Does this work for you?
Best,
Mirah & @jamesjoshuahill

Hi @MirahImage,
thanks for your answer. For some reason go get github.com/cloudfoundry-incubator/disaster-recovery-acceptance-tests did not checkout the vendor folder. I deleted the repo in $GOPATH/src/... and checked out manually. Then it works.
The test still does not run but I will check out the next problems tomorrow.
Bye, Jochen

Hi @damzog
Sorry, we should have mentioned that whilst we were trying to reproduce your issue yesterday we found a bug in the readme. We fixed it in https://github.com/cloudfoundry-incubator/bosh-disaster-recovery-acceptance-tests/commit/c52c758343ec330525a8a9cce855de6a80c9d2de.
If you want the BOSH Director disaster recovery acceptance tests (b-drats) please run:
$ go get github.com/cloudfoundry-incubator/bosh-disaster-recovery-acceptance-tests

If you want to run the Cloud Foundry disaster acceptance tests then there is a different repo them: https://github.com/cloudfoundry-incubator/disaster-recovery-acceptance-tests.
Best wishes
Josh

Hi @jamesjoshuahill ,
I made it run successfully. Here are some things I stumbled across:

The bosh cli command is assumed to be called bosh-cli while usually it is simply bosh
Temporary files and directories in /tmp are not cleaned up correctly if the test fails to run properly
When using go get the /vendor directory was not checked out correctly.  I am not an expert in go so I can't tell why that is.

At the end my original question was if the test had failed if the credhub backup was not done correctly. I am not sure if this is true. After backing up - do you delete credhubs database (and directors database)?
Best wishes Jochen

Hi @damzog,
Thank you for this feedback.

I renamed bosh-cli to bosh in https://github.com/cloudfoundry-incubator/bosh-disaster-recovery-acceptance-tests/commit/26aca22fd380216c0e63b02d2b7fe6a365236b6a.
I can see there is a temporary directory for the test artifact path created here: https://github.com/cloudfoundry-incubator/bosh-disaster-recovery-acceptance-tests/blob/cef68815c7b34c4b461d7f37aa8bb1a96f70e8b8/acceptance/acceptance_suite_test.go#L24. Is this what you mean? Are there any others?
Sorry, I cannot reproduce the problem you are having with go get.

After backup the test runner does not change any state. It is up to each test case to delete or change the state they use. For example the deployment test case deletes the deployment it creates: https://github.com/cloudfoundry-incubator/bosh-disaster-recovery-acceptance-tests/blob/cef68815c7b34c4b461d7f37aa8bb1a96f70e8b8/testcases/deployment_testcase.go#L37. Then after restore each test suite can check that the state has been restored. Does that make sense?
Best wishes
Josh

Hi @jamesjoshuahill,
Thanks josh for your support. Some more comments

regarding the temporary files: Yes it is the most probably the line you pointet at and https://github.com/cloudfoundry-incubator/bosh-disaster-recovery-acceptance-tests/blob/79e27d8c44b63df6bda5553857ecfc1bb47deafa/acceptance/config.go#L27
regarding the go get issue: Could not reproduce either
regarding credhub: I guess then there should be a test case that deletes credhub contents and one that deletes bosh metadata in director's database.  This is somewhat tricky because the director might not work as expected afterwards and the credhub encryption key must be safed separatly.

Ultimately you should have a testcase for installing a plain bosh directory and trigger the restore of a backup into this new director because that is most likely the scenario you will see in real life.
This way you would also plainly see that there is a flaw in the bbr backup strategy: You need to safeguard the encryption key of credhub in addition to the bbr export because the export only contains the encrypted contents of the credhub database. This data is useless unless you have the encryption key.
Regards, Jochen

Hi @damzog
I agree it would be helpful to delete the temporary directory created for the test artifact path. Would you be willing to make a pull request?
Currently B-DRATS has one test case for deployments. We hope that the BOSH, UAA, and CredHub teams will contribute more test cases to increase coverage. This is the pattern we followed for Cloud Foundry components in DRATS.
DRATS supports the destroy and redeploy scenario you outlined with the DELETE_AND_REDEPLOY_CF config. When this is enabled, after the AfterBackup hooks have run for each test case the runner deletes  and redeploys the Cloud Foundry deployment before bbr restore. Do you think having this option in B-DRATS would surface the issue with the CredHub encryption key? Have you manually confirmed this issue?
Best wishes
Josh

Hi @jamesjoshuahill,
regarding the test cases: I think the situation for b-drats is a little bit different than for drats (shouldn't it be cf-drats?).   Better way would probably be to deploy another bosh (lets call it b2) on the bosh you require and then do

setup b2
do test case setup (e.g. do dummy deployment)
do backup
destroy b2
setup b2 from scratch
do restore
do test case validation
tear down b2

This is quite a change I understand (in our environment it even would be difficult because of firewall setup).
Regarding the pull request: Unfortunately I will be on leave for some time now but if  you leave I might consider it being back. I would be my first development in go though.
:)
Regards, Jochen

Closing due to lack of activity


Adds zC and zO folding commands

Hi!
I love the folding methods and I was in need of zC and zO (specially zO). So I saw that it was very straightforward to add them and went ahead and do it. I tested this on a dev environment. Please let me know your thoughts.
Cheers!

I have no objection to adding this to the source code, and I think this makes sense given the commands are there and the bindings exist in Vim.  But as a workaround in the meantime, you can just add to your ~/.ideavimrc:
nnoremap zC :action CollapseRegionRecursively<CR>
nnoremap zO :action ExpandRegionRecursively<CR>

It's been in my .ideavimrc for a while now :) I use it all the time.

@pbu88 Thanks for your pull request!


allow > in directive

In some circumstances, ">" characters are allowed in directives.
This allows them to round trip. A better solution would be to check
that the directive is well formed before allowing it, but this quick fix
should do for now.

:+1: LGTM

:+1: with a suggestion to add a comment and short explanation why the test is skipped


replaying events does not use custom 'stored_event_model'

When using a custom StoredEvent model (and correct setup in the config), while replaying Events, it will still use the (hard coded) Spatie\EventProjector\Models\StoredEvent class.
I was using a custom class for auto encrypting / decrypting of the payload, which fails during replay when the default StoredEvent is trying to unserialize the encrypted data.
Spatie\EventProjector\Console\Concerns\ReplaysEvents.php should check the config and use the class that is setup in there instead of using 'Spatie\EventProjector\Models\StoredEvent.php'

Feel free to submit a PR that fixes this!

Quickly fixed it myself in v1.0.4


Add simple example

Hey @mederka, I merged #4 which is based off this change of yours. I think you can close this.

Thank you, @drochetti! 🙏


Why an Environment can only have resources like Kubernetes or a Virtual Machine?

Hi
what if my env is only a single web app or multiple web apps?
Shouldn't i write my pipeline as code(not only build but also release stages)?
What if my Staging env was composed by multiple web apps?
It would be nice to have full history divided by resource.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 77d95db6-9983-7346-d0eb-4b7443e4e252
Version Independent ID: 0a22cccc-318d-592f-d1ab-09ec01d88087
Content: Environment - Azure Pipelines
Content Source: docs/pipelines/process/environments.md
Product: devops
Technology: devops-cicd-process
GitHub Login: @juliakm
Microsoft Alias: jukullam

@MACEL94 It looks like you have a question or suggestion for the product itself, rather than an issue with the documentation. To make sure it gets in front of the right people, please submit your bug here.
If there's changes we need to make for the article, we can reopen this issue.

Ok , thank you


Update variable names to work with intended example

Changers to some example field names to clarify intentions

Awesome, thanks!


Logging the sync with Rancher Catalog every 5 minutes fills up your logs.

Provide a UI way of being able to update the sync with the rancher catalog.
Also, make it so we don't log it in the docker logs rancherserver as it fills up your logs even if you haven't done anything.

We're worried about ~100 bytes every 5 minutes ≈ 10MB/year?

It just looks like something is wrong in the logs. Someone already posted saying that they see that line fill up their logs after 7 hours and think that it's a bug.

@deniseschannon can you add more to this?  I assume this is not a normal thing  but something that caused the logs to fill up.

Nope, the default is to sync with catalog every 5 minutes and log that we are syncing. So yoru logs will quickly fill up with this...
time="2015-12-29T03:56:46Z" level=info msg="Pulling the catalog library from the repo to sync any new changes to ./DATA/library"
time="2015-12-29T04:01:46Z" level=info msg="Pulling the catalog library from the repo to sync any new changes to ./DATA/library"
time="2015-12-29T04:06:46Z" level=info msg="Pulling the catalog library from the repo to sync any new changes to ./DATA/library"
time="2015-12-29T04:11:46Z" level=info msg="Pulling the catalog library from the repo to sync any new changes to ./DATA/library"
time="2015-12-29T04:16:46Z" level=info msg="Pulling the catalog library from the repo to sync any new changes to ./DATA/library"
time="2015-12-29T04:21:46Z" level=info msg="Pulling the catalog library from the repo to sync any new changes to ./DATA/library"
time="2015-12-29T04:26:46Z" level=info msg="Pulling the catalog library from the repo to sync any new changes to ./DATA/library"
time="2015-12-29T04:31:46Z" level=info msg="Pulling the catalog library from the repo to sync any new changes to ./DATA/library"
time="2015-12-29T04:36:46Z" level=info msg="Pulling the catalog library from the repo to sync any new changes to ./DATA/library"

I mean we can move it to debug instead of info if nothing changed, but again, 10MB/year.

Personally I can't stand this one.  The message should be logged at debug.

https://github.com/rancher/rancher-catalog-service/pull/37


Adds Access protocol support for Range.t selectors

This is a nice addition!
Thanks again for the contribution


xbee.wait_read_frame() has no time protection

What steps will reproduce the problem?
1. Distant ZigBee (or, open a virtual (non-conected) serial port
2. Open a ZigBee object and run wait_read_frame()
3. The program will not respond anymore

What is the expected output? What do you see instead?
The output could be a integer, or anything else.

What version of the product are you using? On what operating system?
Gentoo Linux. python-xbee 2.0.0

Please provide any additional information below.
I did an implementation, but I would like you take a look on it.

Original issue reported on code.google.com by<EMAIL_ADDRESS>on 10 Mar 2012 at 2:09
Attachments:

base.py

Im getting this error when i try to set a timeout:
ser = serial.Serial('COM5', 9600, timeout=1)
xbee = DigiMesh(ser)
data = xbee2.wait_read_frame(timeout=1)
Traceback (most recent call last):
File "<pyshell#16>", line 1, in
data = xbee2.wait_read_frame(timeout=1)
TypeError: wait_read_frame() got an unexpected keyword argument 'timeout'
if i run without the timeout in wait_read_frame() it blocks.
any ideas?


.Net Framework 3.5 (offline) installation failure is not detected

I am using Windows Server 2016 and AutoSPInstaller 3.99.60 and have configured it for offline installation of .Net Framework 3.5. If the installation fails, AutoSPInstaller does not detect the failure and continues. For example:
--------------------------------------------------------------
--------------------------------------------------------------
 - Installing Prerequisite Software:
  - .Net Framework 3.5.1 from "C:\Install\2016\SharePoint\PrerequisiteInstallerFiles\sxs"...
Deployment Image Servicing and Management tool
Version: 10.0.14393.0

Image Version: 10.0.14393.0

Enabling feature(s)
[==========================100.0%==========================]

Error: 0x800f081f

The source files could not be found.
Use the "Source" option to specify the location of the files that are required to restore the feature. For more information on specifying a source location, see http://go.microsoft.com/fwlink/?LinkId=243077.

The DISM log file can be found at C:\Windows\Logs\DISM\dism.log
Done.
  - Running Prerequisite Installer (offline mode)......................

Would it be correct for AutoSPInstaller to stop on failure?

I just got a similar error with Windows Server 2019, SP2019 and AutoSPInstaller 3.99.60.
` - Installing Prerequisite Software:

.Net Framework 3.5.1 from "\ctadev03\devteam\SP19\2019\SharePoint\PrerequisiteInstallerFiles\sxs"...
Deployment Image Servicing and Management tool
Version: 10.0.17763.1

Image Version: 10.0.17763.316
Enabling feature(s)
[==========================100.0%==========================]
Error: 0x800f081f
The source files could not be found.
Use the "Source" option to specify the location of the files that are required to restore the feature. For more information on specifying a source location, see http://go.microsoft.com/fwlink/?LinkId=243077.
The DISM log file can be found at C:\Windows\Logs\DISM\dism.log
Done.`
I had dotnetfx35sp1setup.exe in the 2019\SharePoint\PrerequisiteInstallerFiles\sxs\ folder, but this doesn't appear to be the version that Windows Server 2019 wants.  If I run it manually, it says to use PowerShell or the Server Manager.
When I run from ServerManager, it want's a path to the install file(s) and looking at the Windows Server 2019 install media, it's looking for something quite different:
microsoft-windows-netfx3-ondemand-package~31bf3856ad364e35~amd64~~.cab Microsoft-Windows-NetFx3-OnDemand-Package~31bf3856ad364e35~amd64~en-US~.cab

Yep if you want to be covered for both Win2016 and Win2019 make sure these are in your \sxs\ folder:
microsoft-windows-netfx3-ondemand-package.cab microsoft-Windows-NetFx3-OnDemand-Package~31bf3856ad364e35~amd64~en-US~.cab microsoft-windows-netfx3-ondemand-package~31bf3856ad364e35~amd64~~.cab
Brian

Yep if you want to be covered for both Win2016 and Win2019 make sure these are in your \sxs\ folder:
microsoft-windows-netfx3-ondemand-package.cab microsoft-Windows-NetFx3-OnDemand-Package~31bf3856ad364e35~amd64~en-US~.cab microsoft-windows-netfx3-ondemand-package~31bf3856ad364e35~amd64~~.cab
Brian

This is exactly what I was looking for to make it a Full offline Install.
Thank You


Many Transaction already Captured Messages in Log

Hello,
we use the Saferpay plugin in our shop and so far it looks like it is working fine.
However, we have noticed that there are a lot of "TRANSACTION_ALREADY_CAPTURED" messages in the transaction log.
We are not sure if this is the correct behaviour.
Until now I can't track them down why they are happening.
So any advice why there are so many errors and how we can prevent them?

Hello again, @revoltek-daniel. I've not been able to reproduce this bug. Is there any possibility you could find out more details about this issue? Thanks in advance! 🖖

Hi,
not really, i try to reproduce the behavior on my local machine but I don't get the error there.
Could be the "heavy traffic" that causes the issues but, I can't find an schema. Or could the multi server setup be a problem? The lock is handled by "flock", but the load balancer should redirect the user back to the origin server.
Here are  screenshots from today, in the first the overview this transaction all are "already captured", the second screenshot shows the response (i have redacted the ids)

I've invested some more debugging on this. It seems that this orders are handled by the webhook in the background so the payment is already captured in the capure action.
But this is a ErrorResponse so its get handled as an "Failure" and the status field in the payment details is set to "FAILED" this leads to an redirect to the sylius_shop_order_show route which displays an error because the order is already paid.
https://github.com/CommerceWeavers/SyliusSaferpayPlugin/blob/main/src/Payum/Action/CaptureAction.php#L40
Correct should be an redirect to the sylius_shop_order_thank_you route if the name in the ErrorResponse field is TRANSACTION_ALREADY_CAPTURED
My not so perfect fix:
https://github.com/revoltek-daniel/SyliusSaferpayPlugin/blob/feature/improve-logging/src/Payum/Action/CaptureAction.php#L44 we will try it in production and report if this works properly


Use libp11 from meta-oe upstream

Remove local recipe (older than the one in meta-oe) and fix the missing opensc dependency (pkcs11-tool) by making it part of the softhsm-testoken rdepends.
libp11 itself shouldn't rdepend on opensc as it can be used without it.

Nice, this looks good. I'm testing it now.


rework legacy tests for maintainability

Coverage decreased (-0.3%) to 98.033% when pulling d292539bf0d73c3c5c1e53ca9304e055e0b9c91a on c-harris:testRework into 5c67c4871f2460ae0ec1bc6b544e9d7ef482b929 on Algo-Web:master.


[5.3] Check for valid JSON in Request

Fix for long standing issue #5022
To make this possible in createFromBase this was removed:
$request->request = $request->getInputSource();
To me it looked redundant because the request was already set in the parent Symfony Request, and in this class getInputSource is always called to access the request anyway. However please check I haven't missed something.
With this removed, JSON parsing is now delayed until it is needed which may be more efficient and also allows an exception to be thrown on invalid JSON. The exception is now handled correctly since at the time $request->json() is accessed, the request will have been finished being created which is why this was not possible before.

I just don't see a point in making this change. If the JSON is invalid you will get null when you use the json function to access a value. It seems like your validation will catch any problems with the request.

Alright happy to help you see the point. Imagine you are receiving input that you are going to use to fill a model, hence you don't have a key to access a value with. Then it is impossible to differentiate between invalid and null.

I have similar problem, there is no way if backend can check for json validity, I ended up with following code in my controller:
    if ($request->isJson()) {
        if (is_null(json_decode($request->getContent()))) {
            abort(400, 'Invalid JSON');
        }
    }

However I think Laravel should have thrown some exception by default.


Set max width for bar chart labels #141

Changes:

Bar chart label text is limited to 50 characters (plus “. . .”
for those strings that exceed 50 and are therefore abbreviated).
Particularly noticeable (at least on “zlib-1.2.11” test scan)
for the “Copyright Statements” selection.
Tooltip is displayed on mousing over the bar for all bar chart
selections.
Tooltip displays the label text plus the count in parentheses.
Replace '<' with '<' before calling tooltip -- for some reason
the open angle-bracket interrupts the tooltip display (the close
angle-bracket seems to display OK as is).
Chart dropdown no longer has a visible focus outline/border after
a selection is made.

Open issues:

Adding a tooltip for the bar chart labels would be helpful since
on some display scales, the bar chart bar for some items is small
and triggering the tooltip requires precise placement.  (I
researched and experimented extensively but could not figure out
how to accomplish this.)
The “Copyright Authors” selection is displayed on launch but not
shown as selected in the dropdown’s default display.  (This
behavior existed before adding the tooltip.)
The margin/whitespace between the top of the vertical axis and
the top-most item increases as the number of displayed items
increases.  Similar behavior for the bottom of the axis.  This is
most pronounced (on the “zlib-1.2.11” test scan) for the
“Copyright Statements” selection (73 items displayed).  (This
behavior existed before adding the tooltip.)

Signed-off-by: John M. Horan<EMAIL_ADDRESS>

@jdaguil   Just pushed my refactoring/cleaning based on your comments.  There's one item that may still be open.
You asked whether we need to retain this line of code: $( ".toolTip" ).remove();.  As I noted in my reply to your comment, on my Windows 10 machine, without this code, a new toolTip div is generated each time the user selects a different attribute for display, like this:

I added this code to prevent the unwanted div growth, and placing it just before we define the tooltip variable limits the toolTip div to a single instance, like this:

What do you see on your Mac when you comment out the line of code?

@johnmhoran regarding https://github.com/nexB/aboutcode-manager/pull/149#issuecomment-322852635 I misunderstood the issue in the code comment. I understand what you were trying to accomplish now, and it's fine.

LGTM! 👍


Fixtures

This proposal is to simplify development process.
git submodules in my opinion are too strict, more flexible solution is to manually manage (git clone/checkout/branch commands) external control repo project. In this way we can easy choose what version of repo project we want to use for our fixtures. For example if we have different control repo for different puppets (4.x, 5.x) or if we want to use branches to manage different control's repo configuration (basic, simple, medium complex, very complex).

Looks like Travis doesn't like me, I will fix it tomorrow, but I would like @dylanratcliffe  what do you think about it.

I close PR, I will create new one when it will work.


In-memory engine: fix save point empty assertion fail

What is changed and how it works?

Issue Number: Close #17630 Ref #16141

What's Changed:
fix save point empty assertion fail

Save point empty assertion can fail. For simplifity, does not release evicted region's buffer (it is intended to release memory quickly so that the next region have chances not to be evicted due to memory limit) as eviction during write is rare.
Related changes

[ ] PR to update pingcap/docs/pingcap/docs-cn:
[ ] Need to cherry-pick to the release branch

Check List
Tests

[ ] Unit test
[ ] Integration test
[ ] Manual test (add detailed scripts or steps below)
[ ] No code

Side effects

[ ] Performance regression: Consumes more CPU
[ ] Performance regression: Consumes more Memory
[ ] Breaking backward compatibility

Release note

None

Could you add a test?

Test what? This PR fixes a assertion fail by removing the related code without add anything new.

PTAL thansk @zhangjinpeng87


[Bug]: StorageState not working on headless mode

Playwright version
1.13.0
Operating system
Windows, Linux
What browsers are you seeing the problem on?
Chromium
Other information
No response
What happened? / Describe the bug
setStorageState is working perfect without headless, but looks like is not working on headless mode activated.
Code snippet to reproduce your bug
browser.newContext(new Browser.NewContextOptions().setStorageStatePath(Paths.get(mypath)).setAcceptDownloads(true)
						);

Relevant log output
No response

Can you share more details about you scenario and what exactly is not working?

Ok looks like I found the problem, the app was working weirdly, and sometimes navigating to the login page with the storage session was working and other times the app was logging out the user.
I tested on other web apps and is working so I found that is not really a playwright bug.
thx


The default dashboard "last used" field is very expensive and should be removed

In dashboard.rb, RailsAdmin does the following for every table by default:
@most_recent_changes[t.model.name] =
  t.first(sort: "#{t.table_name}.updated_at").try(:updated_at)

This is an ENORMOUSLY expensive call for any table that is not indexed on updated_at. For example, on my app:
coderpad-rails=# EXPLAIN SELECT  "pads".*  I don't want to add an index just to service this dashboard, either. I'm going to turn off statistics entirely because there doesn't seem to be a way to disable just this behavior, but I'd recommend either adding a flag or just showing something much easier, like the created_at time on the last row in the table.

@vincentwoo I'm having the exact same problem in both old versions of rails_admin and new versions.  It's super expensive to load the stats page and often my app will timeout for 2-4min at a same.
Is there any way to disable the stats to avoid these expensive calls?

@vincentwoo @shakycode The stats bar can be disabled (more on that here):
RailsAdmin.config do |c|
  c.actions do
    dashboard do
      statistics false
    end
  end
end

You could also build your own custom dashboard in app/views/rails_admin/main/dashboard.html.erb (or .haml, depending on your project)

I did that as well, but I think it is not a good default for rails_admin to have.

What should we do instead?
Is the sorting important?
If not, maybe you can provide a pull request sorting by id?

I can. Are you open to that idea?

Sure!
We'll call it "last entries" instead of "last updates" I guess. :dancers:


Fix cluster struct to allow pasue/start a cluster

Proposed changes
Breaking change
Currently if you want to pause or restart a cluster you can only send the Paused property and nothing else or you'll get errors like "Can't pause and update a cluster at the same time"
Having some internal structs as non-pointers were making go serialize them so we could never do this kind of operation
Sadly this may be a breaking change as we are changing the type of the struct and those depending on it may need to update after this change
Checklist

[x] I have added tests that prove my fix is effective or that my feature works
[x] I have added any necessary documentation (if appropriate)
[x] I have run make fmt and formatted my code

@themantissa tagging you in advance as this may be a breaking change but sadly is a bug that we may need to fix sooner than later (this came from a customer that wants to pause/restart clusters with the cli)

Thank you for the alert @gssbzn - makes sense for the CLI.  We haven't yet supported in Terraform since Atlas auto unpauses, which doesn't quite mesh w/ the Terraform philosophy.
@PacoDw and @marinsalinas (and @thetonymaster) I assume this will impact both Terraform and CloudFormation so we'll need to schedule the work to coordinate with the next release of the go-client?

yes @themantissa, it will, but it won't be a breaking change for terraform

@PacoDw can you also just submit a review?

Thank yall for the review


release 230912

@nicolevasilevsky and @twhetzel
This is the first step of the release.
I noted that there are a lot of changed definitions: 508. (see src/ontology/reports/mondo_release_diff.md)
I am reviewing them. it looks like it is mostly typos, but I don't remember updated so many typos.
@nicolevasilevsky is it something you remember doing?
DO NOT MERGE until we are sure that things are ok with these high number of changed definitions.

maybe some definitions were Americanized? I see some "characterized" instead of "characterise" or "disk" instead of "disc"?
I also see ".." updated to "."

I have convinced myself (with Nicole's confirmation) that these changes were part of the British standardization work.


Allow connection strings to be set via Secret or ConfigMap reference that is not referenced from the deployment

Currently, KEDA resolves environment variables by pulling all literals, secretrefs, and configmaprefs from the target deployment's environment variables. KEDA should also be able to take in a secret ref or config map ref without referencing the container's env/envfrom fields at all.

@jeffhollan double checked on this after our conversation yesterday & it looks like this is not possible (also not in the docs). KEDA resolves secret refs/config map refs in the container spec, but cannot resolve a secret ref handed to it as far as I can tell.

That is my understanding as well and agree that it would be great to have option to decouple this

Ah thank you - I failed to realize that often the secret spec I've been using has been added as config to the deployment.  Yes this is a good feature.

@priyaananthasankar was brought up that you may be working on this? Can I assign it to you and you can share details on how you are looking to implement.  @ahmelsayed had a few questions in our standup

Yes. I am looking into this and will share some details after one week hack.

Let's take this along with the AAD Pod Identity discussion as this is very similar and should be taken along.

Closing as this is possible via TriggerAuthentication


[Enhancement] Friendlier JSON in Preview mode

It looks like Insomnia always escapes the forward slash:
\/
Can this be an option in the response window, or the IDE as global option?
This bit us, as a very long encoded value was behaving one way in Insomnia (escaping the forward slash), but was different in another REST client (Postman: it doesn't escape forward slashes).
Thanks!

Where are you seeing the forward slash being escaped?

In the response. Thanks!

Just trying Insomnia for the first time. Gorgeous -- nice work! We're having this issue as well. We return links in our payload in relative form (no scheme or authority). All forward slashes are rendered as escaped making them not clickable.

The same issue for me. Option for disabling of escaping all forward slashes would be very nice.

I think having the Preview show more friendly JSON could be a good idea

Any progress on this?

Hello everyone, will this be fixed?
I am still getting escape URL/links.
Will it be possible to not show these escaped?

Almost a year and no progress on this ?

Adding label for investigation / verification. Testing locally I do not get escaped slashes, can someone who is encountering this document the steps, request body, request headers and response headers along with the response body they receive with screenshots? Seems like an edge-case or misconfigured settings.

There is no misconfiguration at all.
I even have installed Insomnia on a brand new PC and without have setting anything URLs are all escaped.
Do a request to an API that is reponding an URL and you will see it escaped. Simple as that.
The content-type I was using was a simple application/json and probably the most common out there.

@K2ouMais I hear you but without proper steps to replicate and exact information it makes it difficult to work on. What version of Insomnia are you running and what is the url you are requesting, as I cannot replicate the issue.

Ok, it is really late here. I will try to give you a proper example tomorrow.

maybe http://mockbin.org/ will be useful in simulating such a response

Here is a good example:
GET https://api.gleif.org/api/v1/entity-legal-forms
Escaped URLs:

Preferences using the newest Insomnia version:

Have you take a look on this thread or will it die for another year?
Thanks

Having the same issue :( still no fix?

Nope. They wanted me to show them the problem and since then nothing.
It has been a month.

Nope. They wanted me to show them the problem and since then nothing.
It has been a month.

Sad, i really like Insomnia over Postman but this...

I've the same issue. Postman works fine for same API. Insomnia please fix it.

Same here, spent several hours to undestand why the token I requests from my api is not valid with but It is witj Postman. It was just because forward slash is escaped :

@sgostanyan very sorry to hear that you lost time due to this.  I've asked internally if we can get this prioritized in some way.
@K2ouMais sorry on the dealyed response.  A bot to mark issues got enabled which flooded my inbox with 600+ issues from insomnia and your response here got lost in the shuffle.
I think I understand what's going on.
So first off, the response you gave includes the escapes
Here's an example with just curl

Here's an example from chrome:

And, indeed, here's an example from Postman:

The difference here is that in our "Preview" mode, which is sorta like a pretty print, we use the JSON.stringify behavior.
For example,

For this behavior to change, we'd need to update something around here: https://github.com/Kong/insomnia/blob/develop/packages/insomnia-app/app/ui/components/codemirror/code-editor.tsx#L634
I made a mockbin we can use for this: http://mockbin.org/bin/6f5df8ac-8fa4-4aa0-8961-d01ed9f29d7a

Any progress on this? I could take a stab at a PR, but, not being at all familiar with the codebase, I'd probably do it wrong.

Still no progress ?

Is there any chance this issue can be prioritised? I'm really not sure why forward slashes in network responses are being escaped in the Preview tab.

i think someone has addressed this kind issue long ago and it has been closed 🤔 pls check this @jvukovich link-issue

Thanks, I wasn't aware of the other closed issue.
Well, there looks like there are quite a few recent follow-ups on that closed issue, too, particularly mrjimhubbard's suggestion:

Should we not leave this issue open if enough people are rallying around making this clearer/easier/user-friendly?


{"status":13,"value":{"error":"unknown error","message":"Failed to locate opened application window with appId:

Hi All -
I am trying to launch a windows based application using WinAppDriver latest version. Application launches successfully but the test keeps on failing because of the following error:
OpenQA.Selenium.WebDriverException: Failed to locate opened application window with appId: C:\XXX\XXX.exe, and processId: 18368
Any insight or help would be highly appreciated.
I have tried following solutions:

Options.AddAdditionalCapability("ms:waitForAppLaunch", "25");
Adding Thread
Invoking exe as a admin

skotian2 Do you have a splash screen in your app?

Nope - I do not have any splash screen. I am trying to launch Cisco Jabber messenger app if that helps.

Try this approach https://github.com/microsoft/WinAppDriver/issues/1323#issuecomment-1022542052

@Shakevg - I have tried the approach and still having the same error. I also tried with changing the path type by adding quotes no luck still.
System.Diagnostics.Process.Start("C:\Program Files (x86)\Windows Application Driver\WinAppDriver.exe");
AppiumOptions Options = new AppiumOptions();
Options.AddAdditionalCapability("app", "C:\Program Files (x86)\Cisco Systems\Cisco Jabber\CiscoJabber.exe");
Options.AddAdditionalCapability("deviceName", "WindowsPC");
Options.AddAdditionalCapability("isHeadless", true);
Options.SetLoggingPreference(OpenQA.Selenium.LogType.Server, OpenQA.Selenium.LogLevel.All);
Options.AddAdditionalCapability("ms:waitForAppLaunch", "25");
CiscoJabberSession = new WindowsDriver(new Uri(DriverUrl), Options);
{"status":13,"value":{"error":"unknown error","message":"Failed to locate opened application window with appId: C:\Program Files (x86)\Cisco Systems\Cisco Jabber\CiscoJabber.exe, and processId: 18020"}}

@Shakevg - This approach is working now Reference : Launching application using application parameters #1323
System.Diagnostics.Process.Start("C:\Program Files (x86)\Windows Application Driver\WinAppDriver.exe");
System.Diagnostics.Process.Start("C:\Cisco Systems\Cisco Jabber\CiscoJabber.exe");
Thread.Sleep(15000);
        // Create a session for Desktop
        AppiumOptions Options = new AppiumOptions();
        Options.AddAdditionalCapability("app", "Root");
        desktopSession = new WindowsDriver<WindowsElement>(new Uri(DriverUrl), Options);
        Assert.IsNotNull(desktopSession);

        //WindowsElement CortanaWindow = desktopSession.FindElementByName("Cisco Jabber");
        WindowsElement ACDLaunch = desktopSession.FindElementByName("Cisco Jabber");

skotian2 Instead of Thread.Sleep(15000); better to use wait
WebDriverWait wait = new WebDriverWait(desktopSession, TimeSpan.FromSeconds(15000));
wait.Until(ExpectedConditions.ElementExists(By.Name("Cisco Jabber")));
WindowsElement ACDLaunch = desktopSession.FindElementByName("Cisco Jabber");


nixos/mastodon: enable hardening mode

Motivation for this change
Enable hardening mode.
cc @erictapen
Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
[x] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[ ] Fits CONTRIBUTING.md.

Fixed video preview, need RestrictAddressFamilies = [ "AF_NETLINK" ];

Result:
systemd-analyze security mastodon-web

  NAME                                                        DESCRIPTION                                                                                EXPOSURE
✗ PrivateNetwork=                                             Service has access to the host's network                                                                0.5
✓ User=/DynamicUser=                                          Service runs under a static non-root user identity
✓ CapabilityBoundingSet=~CAP_SET(UID|GID|PCAP)                Service cannot change UID/GID identities/capabilities
✓ CapabilityBoundingSet=~CAP_SYS_ADMIN                        Service has no administrator privileges
✓ CapabilityBoundingSet=~CAP_SYS_PTRACE                       Service has no ptrace() debugging abilities
✗ RestrictAddressFamilies=~AF_(INET|INET6)                    Service may allocate Internet sockets                                                                   0.3
✓ RestrictNamespaces=~CLONE_NEWUSER                           Service cannot create user namespaces
✓ RestrictAddressFamilies=~…                                  Service cannot allocate exotic sockets
✓ CapabilityBoundingSet=~CAP_(CHOWN|FSETID|SETFCAP)           Service cannot change file ownership/access mode/capabilities
✓ CapabilityBoundingSet=~CAP_(DAC_*|FOWNER|IPC_OWNER)         Service cannot override UNIX file/IPC permission checks
✓ CapabilityBoundingSet=~CAP_NET_ADMIN                        Service has no network configuration privileges
✓ CapabilityBoundingSet=~CAP_SYS_MODULE                       Service cannot load kernel modules
✓ CapabilityBoundingSet=~CAP_SYS_RAWIO                        Service has no raw I/O access
✓ CapabilityBoundingSet=~CAP_SYS_TIME                         Service processes cannot change the system clock
✗ DeviceAllow=                                                Service has a device ACL with some special devices                                                      0.1
✗ IPAddressDeny=                                              Service does not define an IP address allow list                                                        0.2
✓ KeyringMode=                                                Service doesn't share key material with other services
✓ NoNewPrivileges=                                            Service processes cannot acquire new privileges
✓ NotifyAccess=                                               Service child processes cannot alter service state
✓ PrivateDevices=                                             Service has no access to hardware devices
✓ PrivateMounts=                                              Service cannot install system mounts
✓ PrivateTmp=                                                 Service has no access to other software's temporary files
✓ PrivateUsers=                                               Service does not have access to other users
✓ ProtectClock=                                               Service cannot write to the hardware clock or system clock
✓ ProtectControlGroups=                                       Service cannot modify the control group file system
✓ ProtectHome=                                                Service has no access to home directories
✓ ProtectKernelLogs=                                          Service cannot read from or write to the kernel log ring buffer
✓ ProtectKernelModules=                                       Service cannot load or read kernel modules
✓ ProtectKernelTunables=                                      Service cannot alter kernel tunables (/proc/sys, …)
✗ ProtectProc=                                                Service has full access to process tree (/proc hidepid=)                                                0.2
✓ ProtectSystem=                                              Service has strict read-only access to the OS file hierarchy
✓ RestrictAddressFamilies=~AF_PACKET                          Service cannot allocate packet sockets
✓ RestrictSUIDSGID=                                           SUID/SGID file creation by service is restricted
✓ SystemCallArchitectures=                                    Service may execute system calls only with native ABI
✓ SystemCallFilter=~@clock                                    System call deny list defined for service, and @clock is included
✓ SystemCallFilter=~@debug                                    System call deny list defined for service, and @debug is included
✓ SystemCallFilter=~@module                                   System call deny list defined for service, and @module is included
✓ SystemCallFilter=~@mount                                    System call deny list defined for service, and @mount is included
✗ SystemCallFilter=~@raw-io                                   System call deny list defined for service, and @raw-io is not included (e.g. ioperm is allowed)         0.2
✓ SystemCallFilter=~@reboot                                   System call deny list defined for service, and @reboot is included
✓ SystemCallFilter=~@swap                                     System call deny list defined for service, and @swap is included
✗ SystemCallFilter=~@privileged                               System call deny list defined for service, and @privileged is not included (e.g. chown is allowed)      0.2
✓ SystemCallFilter=~@resources                                System call deny list defined for service, and @resources is included
✓ AmbientCapabilities=                                        Service process does not receive ambient capabilities
✓ CapabilityBoundingSet=~CAP_AUDIT_*                          Service has no audit subsystem access
✓ CapabilityBoundingSet=~CAP_KILL                             Service cannot send UNIX signals to arbitrary processes
✓ CapabilityBoundingSet=~CAP_MKNOD                            Service cannot create device nodes
✓ CapabilityBoundingSet=~CAP_NET_(BIND_SERVICE|BROADCAST|RAW) Service has no elevated networking privileges
✓ CapabilityBoundingSet=~CAP_SYSLOG                           Service has no access to kernel logging
✓ CapabilityBoundingSet=~CAP_SYS_(NICE|RESOURCE)              Service has no privileges to change resource use parameters
✓ RestrictNamespaces=~CLONE_NEWCGROUP                         Service cannot create cgroup namespaces
✓ RestrictNamespaces=~CLONE_NEWIPC                            Service cannot create IPC namespaces
✓ RestrictNamespaces=~CLONE_NEWNET                            Service cannot create network namespaces
✓ RestrictNamespaces=~CLONE_NEWNS                             Service cannot create file system namespaces
✓ RestrictNamespaces=~CLONE_NEWPID                            Service cannot create process namespaces
✓ RestrictRealtime=                                           Service realtime scheduling access is restricted
✓ SystemCallFilter=~@cpu-emulation                            System call deny list defined for service, and @cpu-emulation is included
✓ SystemCallFilter=~@obsolete                                 System call deny list defined for service, and @obsolete is included
✗ RestrictAddressFamilies=~AF_NETLINK                         Service may allocate netlink sockets                                                                    0.1
✗ RootDirectory=/RootImage=                                   Service runs within the host's root directory                                                           0.1
✓ SupplementaryGroups=                                        Service has no supplementary groups
✓ CapabilityBoundingSet=~CAP_MAC_*                            Service cannot adjust SMACK MAC
✓ CapabilityBoundingSet=~CAP_SYS_BOOT                         Service cannot issue reboot()
✓ Delegate=                                                   Service does not maintain its own delegated control group subtree
✓ LockPersonality=                                            Service cannot change ABI personality
✗ MemoryDenyWriteExecute=                                     Service may create writable executable memory mappings                                                  0.1
✗ RemoveIPC=                                                  Service user may leave SysV IPC objects around                                                          0.1
✓ RestrictNamespaces=~CLONE_NEWUTS                            Service cannot create hostname namespaces
✗ UMask=                                                      Files created by service are group-readable by default                                                  0.1
✓ CapabilityBoundingSet=~CAP_LINUX_IMMUTABLE                  Service cannot mark files immutable
✓ CapabilityBoundingSet=~CAP_IPC_LOCK                         Service cannot lock memory into RAM
✓ CapabilityBoundingSet=~CAP_SYS_CHROOT                       Service cannot issue chroot()
✓ ProtectHostname=                                            Service cannot change system host/domainname
✓ CapabilityBoundingSet=~CAP_BLOCK_SUSPEND                    Service cannot establish wake locks
✓ CapabilityBoundingSet=~CAP_LEASE                            Service cannot create file leases
✓ CapabilityBoundingSet=~CAP_SYS_PACCT                        Service cannot use acct()
✓ CapabilityBoundingSet=~CAP_SYS_TTY_CONFIG                   Service cannot issue vhangup()
✓ CapabilityBoundingSet=~CAP_WAKE_ALARM                       Service cannot program timers that wake up the system
✗ RestrictAddressFamilies=~AF_UNIX                            Service may allocate local sockets                                                                      0.1
✗ ProcSubset=                                                 Service has full access to non-process /proc files (/proc subset=)                                      0.1

→ Overall exposure level for mastodon-web.service: 1.6 OK 🙂

cc @erictapen @aanderse @Mic92


groupBy returns different value for each run

If a group by query returns aggregated value more than 1 billion, results are not consistent.
e.g. I am running following query on our data set
{
"aggregations": [
{
"fieldName": "metric_1",
"name": "metric_1",
"type": "longSum"
}
],
"dataSource": "dataSource_1",
"dimensions": [
"dimension_1"
],
"filter": {
"type": "or",
"fields": [
{
"type": "selector",
"dimension": "dimension_2",
"value": ""
},
{
"type": "selector",
"dimension": "dimension_2",
"value": "1"
}
]
},
"granularity": {
"origin": "2014-07-01T00:00:00",
"period": "P32D",
"timeZone": "Etc/GMT",
"type": "period"
},
"intervals": [
"2014-07-01T00:00:00/2014-07-31T23:59:59"
],
"queryType": "groupBy"
}
When I run it for smaller data range and sum is less than 1 billion, results are consistent. But when sum crosses 1 billion, I see result varies by +/- 25 for every run.
It could be related to https://github.com/metamx/druid/issues/372 where druid returns different result for timeseries and groupby query.

I am closing this issue. Please reopen if it has not been resolved in the latest Druid versions.


#141409231 Configure Eslint

What does this PR do?
Configure eslint
Description of Task to be completed?
update the eslint configuration file for Hound Ci
How should this be manually tested?
it could be tested manually uisng
eslint file-name
Any background context you want to provide?
NA
What are the relevant pivotal tracker stories?
#141409231 Configure Eslint
Screenshots (if appropriate)
NA
Questions:
NA

Changes eslintrc config file and its extension.


comma fix / make docx build

I changed the repo settings to enable BUILD_DOCX & am making one small change (typo fix! woo!) to get a docx to build.

DOCX did not build on the PR - let's hope it builds on main 🤞


plugin(tekton): upgrade to PatternFly V6

Hey, I just made a Pull Request!
This PR:

updates the Tekton plugin to use PatternFly V6
upgrades aonic-ui/pipelines dependency to the latest version

:heavy_check_mark: Checklist

[x] A changeset describing the change and affected packages. (more info)
[ ] Added or updated documentation
[ ] Tests for new functionality and regression tests for bug fixes
[ ] Screenshots attached (for UI changes)
[x] All your commits have a Signed-off-by line in the message. (more info)

Note: I still need to visually confirm by running the plugin.

Visual comparisons
V5 page:

V6 page:

Side-by-side (v5 left, v6 right)
Dropdown toggled:

Logs:

@karthikjeeyar

Everything looks good. However, I did notice one thing. It may not necessarily be an issue. In V6 of PF, the tooltip background color is white, whereas in V5, the tooltip background color is dark.


Unmatched names

replaces #213

Pull Request Test Coverage Report for Build 825

2 of 30 (6.67%)  changed or added relevant lines in 2 files are covered.
1 unchanged line in 1 file lost coverage.
Overall coverage decreased (-1.1%) to 59.859%

Changes Missing Coverage
Covered Lines
Changed/Added Lines
%

scripts/unmatched_legislators.py
0
28
0.0%

Files with Coverage Reduction
New Missed Lines
%

scripts/to_database.py
1
53.33%

Totals

Change from base Build 823:
-1.1%

Covered Lines:
932

Relevant Lines:
1557

💛  - Coveralls


New CW test display: Now characters are displayed in variable width regardless of half/full-widthness

My ASCII Games kata relies on displaying ASCII board on logs, which relies on every character being rendered at the same width (and half-width width is strictly half the width of full-width width) to be read properly.
But after the change:

It becomes pretty much unreadable.

Which kata is this?

These two:
https://www.codewars.com/kata/ascii-games-dance-dance-evolution-i
https://www.codewars.com/kata/ascii-games-warning-ice

Sorry but it's not fully fixed yet:

The font in the display is still in variable width. If in fixed width the ^ should point at the relevant character like this:

I forgot about STDERR. I've got a fix bto preview now


How do I get this.$strapi to point to my live api rather than local?

this.$strapi works fine when my local Strapi backend is running. I'm recently hosted my Strapi API online, and I'm unsure how to connect my frontend to it.

Nevermind... it's the URL option https://strapi.nuxtjs.org/options#url


API: Delete container can return 409, but that isn't documented.

API: Delete container can return 409, but that isn't documented. #29796
Signed-off-by: Daniel Zhang<EMAIL_ADDRESS>

Did a quick check, and this was added in https://github.com/docker/docker/pull/9583, which was part of the 1.5.0 rebase (https://github.com/docker/docker/blob/v1.5.0/daemon/delete.go#L61).
Older docs for the API have this mentioned (https://github.com/docker/docker/blob/master/docs/api/v1.24.md), but it probably got lost during the translation to swagger.


Update v9 references to v10

I also added some minor changes. Let me know if you think those should be changed in any way or are not needed.

This change is

Thanks @vfonic!


 If they get focus (e.g., on Linux where focus stealing isn't always handled properly) then doing something like hitting "f" will cause the "fly" (I assume?) callback to occur and the brain goes away, ruining the movie. It would be nice if we could block / skip / ignore both mouse and keyboard inputs to the window during the save_movie loop.
cc @GuillaumeFavelier

Would it work if you set pyvista.OFF_SCREEN = True to avoid having the windows opening in the first place?

I doubt this would work with time_viewer=True / traces

Alternatively, I was thinking about a dedicated offline thread with disabled interaction. In theory, this could build the movie in the background without blocking interactions on the main thread.

That sounds a lot more complicated code-wise (threads always are). I'm also not sure it will work because the rendering thread will for example need the camera in one fixed position and the user could be moving it, so somehow there have to be two states. I'm not sure it would really even end up being usable since the rendering thread will not release the GIL very often and could be CPU intensive.
To "disable interaction" I was really just thinking to override the event handlers/listeners of PyVista+VTK, and once rendering is complete (via try/finally) restore them. Ideally this would mean making some private PyVista attributes public, or just living with modifying some private things to be no-ops, and modifying them. At the VTK level I think we can just iterate over all renderer layers, disable their interaction, then at the end, reenable their interaction -- so the question is what do we need to do to disable all PyVista shortcuts...

so the question is what do we need to do to disable all PyVista shortcuts...

AFAIK those are bound to vtk KeyPressEvent


LC0003 Do not use an Object ID for properties - False positive on AccessByPermission = TableData

Hi @StefanMaron,
It seems like rule LC0003 gives a false positive on the AccessByPermission for the following sample:
action("Reservation Entries")
{
    AccessByPermission = TableData Item = R;
    ApplicationArea = Reservation;
    Caption = 'Reservation Entries';
    Image = ReservationLedger;
    ToolTip = 'View all reservations that are made for the item, either manually or automatically.';

    trigger OnAction()
    begin
        Rec.ShowReservationEntries(true);
    end;
}

Could you have a look?
Thank you for the code analyzer and extension! :)

LC0005 raises a warning at the same time, which also seems to be a false positive.
The warnings raised on this line:
Do not use an Object ID for properties or variables declaration. Use TableData Item = R instead.AL(LC0003)
Wrong casing detected! Use TableData Item = R instead.AL(LC0005)


[Snyk] Upgrade next-themes from 0.3.0 to 0.4.3

Snyk has created this PR to upgrade next-themes from 0.3.0 to 0.4.3.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 6 versions ahead of your current version.

The recommended version was released on a month ago.

Release notes

Package name: next-themes

0.4.3 - 2024-11-04What's Changed

Pass nonce to inline style tag when using disableTransitionOnChange

Full Changelog: v0.4.2...v0.4.3

0.4.3-beta.0 - 2024-11-04

0.4.2 - 2024-11-04What's Changed

Re-export types from next-themes by @ cschroeter in #321

New Contributors

@ cschroeter made their first contribution in #321

Full Changelog: v0.4.1...v0.4.2

0.4.1 - 2024-11-04What's Changed

fix: support multiple attributes in the injection script by @ Julian24Design in #310
docs: update docs on how to use with tailwindcss >3.4.1 by @ trm217 in #290
chore: use corepack instead of pnpm setup action in ci by @ trm217 in #291
Add dynamic loading as a way to avoid hydration mismatch in README by @ Judge-Paul in #249
Add scriptProps prop to prevent Cloudflare Rocket Loader deferring script by @ andreacassani in #156

New Contributors

@ Julian24Design made their first contribution in #310
@ Judge-Paul made their first contribution in #249
@ andreacassani made their first contribution in #156

Full Changelog: v0.4.0...v0.4.1

0.4.0 - 2024-11-04What's Changed

Improved inline script minification by @ pacocoursey in #262
fix: manually type ThemeProvider to fix type errors by @ BlankParticle in #263
mention next-themes is react agnostic by @ dimaMachina in #268
fix: make children optional by @ Innei in #276
feat: Allow Multiple Attributes by @ trenaryja in #275
fix: setTheme now works correctly when a function is passed. by @ trm217 in #286
feat: add react v19 to peer deps by @ Yonom in #315

New Contributors

@ Hahlh made their first contribution in #255
@ Unsleeping made their first contribution in #229
@ Innei made their first contribution in #276
@ trenaryja made their first contribution in #275
@ lloydrichards made their first contribution in #256
@ Yonom made their first contribution in #315

Full Changelog: v0.3.0...v0.4.0

0.4.0-beta.0 - 2024-11-04

0.3.0 - 2024-03-13What's

"use client" was added to the library output so that you can use it as a React Client component without creating a wrapper.

New Contributors

@ MaxLeiter made their first contribution in #120
@ gnoff made their first contribution in #135
@ WITS made their first contribution in #168
@ dimaMachina made their first contribution in #186
@ amrhassab made their first contribution in #192
@ BekzodIsakov made their first contribution in #241
@ BlankParticle made their first contribution in #253

Full Changelog: v0.2.0...v0.3.0

    from next-themes GitHub release notes

[!IMPORTANT]

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:

🧐 View latest project report
📜 Customise PR templates
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs

already accomodated at https://github.com/sensasi-apps/sensasi-pos/pull/188


Looking for maintainers

As it is obvious from the state of issues and pull-requests, I don't have the bandwidth to maintain the repo along with webpack-bundle-tracker. So, I'd like to give maintenance rights to others who might be interested and have experience maintaining OSS libs. I'd like to eventually transfer the repo to a new permanent maintainer whether an individual or an org. Please feel free to email me at<EMAIL_ADDRESS>if this is something you'd like to help with. Thanks.

Thanks so much for you work on the project!

Moved the project to JazzBand (https://jazzband.co). Help needed to set everything up and maintain the project.
https://github.com/jazzband/django-webpack-loader/issues/248

Anyone interested in helping maintain the project can join JazzBand and start contributing. Hopefully over time we can find a new leader for the project.


add step to change owner of code-workspace file

Hi,
This PR fixes issue with permission on workspace file - issue #114 .
I added step to change owner for RobotTest.code-workspace. It ensures that user have permission to update workspace.
Referent build for this PR: https://github.com/test-fullautomation/RobotFramework_AIO/actions/runs/5219911236
Thank you,
Ngoan

Hi Holger,
Hi Thomas,
As our discussion, I updated the behavior when workspace folder RobotTest is existing:

Force to update tutorial and documentation folders
Check existence of RobotTest.code-workspace file before updating (user should responsible for his workspace file)
Fix issue due to previous installer as Holger's findings in issue #122

Thank you,
Ngoan


GUACAMOLE-359: Add required links to ASF resources.

From Dave Fisher:

Hello Guacamole,
I volunteered to shepherd your report for the IPMC. It does look like you are near graduation. Congratulations!
I did notice something that you should correct on your website. You don't have good links back the ASF.
Please see https://www.apache.org/foundation/marks/pmcs#navigation
Regards,
Dave

Specifically, from the link referenced above:

WEBSITE NAVIGATION LINKS POLICY
Whatever main navigation system your project website uses, it must feature certain text links back to key pages on the main www.apache.org website. These links can appear in whatever main navigation system your site uses on all top level pages for the project or subproject.

"License" should link to: http://www.apache.org/licenses/
"Sponsorship" or "Donate" should link to: http://www.apache.org/foundation/sponsorship.html
"Thanks" should link to: http://www.apache.org/foundation/thanks.html
"Security" should link to either to a project-specific page detailing how users may securely report potential vulnerabilities, or to the main http://www.apache.org/security/ page
All projects must feature some prominent link back to the main ASF homepage at http://www.apache.org/

Link back to www.apache.org: All project and subproject homepages must include a prominent link to the main http://www.apache.org homepage. This may either be a featured link in your main navigation system, or may be a text link in your Main homepage text. A best practice is to include a short sentence or paragraph on the homepage noting that this project is an Apache project, and is part of a larger community of developers and users.
If you have alternate suggestions for the text for links pointing back to the main ASF pages that better fit with your project's web presence, please let trademarks@ know.
Including "Thanks" links to third parties - if your project has typically companies that donate software licenses or support to project committers, please follow the Corporate Recognition Guidelines. It is important to ensure any such pages are presented publicly in a manner that is distinctly different than the formal Sponsorship program.

This change refactors the navigation menu of the Apache Guacamole website, adding support for nested menus, and reorganizing things such that there can be a submenu containing links to required ASF resources:

The submenus are controlled through JavaScript (simplified a bit via jQuery) and open/close through clicks:

The required ASF links are within the far right menu, with the exception of the "Security" link (which should probably be as obvious as possible to avoid security issues being reported using inappropriate public channels):

Looks good - nothing obvious jumps out at me.

Feeling mergy?

Done!


Create Meta Runner for TeamCity

https://github.com/JetBrains/meta-runner-power-pack

I am going to close this out, as this isn't really something that I personally need anymore.  If anyone is interested in picking this up, please feel free to reach out.


test(mssql-cdc): enrich tests and small refactor

I hereby agree to the terms of the RisingWave Labs, Inc. Contributor License Agreement.
What's changed and what's your intention?
Add tests for

INCLUDES
Automatically retrieve upstream table schema
More data types, mainly, binary types.

Refactor:

Change SELECT * FROM {} WHERE 1 = 0 to INFORMATION_SCHEMA.COLUMNS-based SQL.

Checklist

[ ] I have written necessary rustdoc comments
[ ] I have added necessary unit tests and integration tests
[ ] I have added test labels as necessary. See details.
[ ] I have added fuzzing tests or opened an issue to track them. (Optional, recommended for new SQL features #7934).
[ ] My PR contains breaking changes. (If it deprecates some features, please create a tracking issue to remove them in the future).
[ ] All checks passed in ./risedev check (or alias, ./risedev c)
[ ] My PR changes performance-critical code. (Please run macro/micro-benchmarks and show the results.)

[ ] My PR contains critical fixes that are necessary to be merged into the latest release. (Please check out the details)

Documentation

[ ] My PR needs documentation updates. (Please use the Release note section below to summarize the impact on users)

Release note
If this PR includes changes that directly affect users or other significant modifications relevant to the community, kindly draft a release note to provide a concise summary of these changes. Please prioritize highlighting the impact these changes will have on users.

Shall we pick this PR to release-2.0?

Shall we pick this PR to release-2.0?
Yes, I think so. I'll confirm with jianwei.


TestVMTelemetry flaky, regression

https://prow.istio.io/view/gs/istio-prow/logs/integ-basic-arm64_istio_postsubmit/1602452972141285376
https://prow.istio.io/view/gs/istio-prow/logs/integ-basic-arm64_istio_postsubmit/1602470402729185280
https://prow.istio.io/view/gs/istio-prow/logs/integ-distroless_istio_postsubmit/1602470402125205504
https://prow.istio.io/view/gs/istio-prow/logs/integ-cni_istio_postsubmit/1602470420903104512
First failure was after https://github.com/istio/istio/pull/42397. Areound the same time envoy bumped as well, changing:
* 55554dfa28 "phlax"<EMAIL_ADDRESS>2 days ago
| ci: Skip build/release jobs if only mobile or docs changed (#24383)
* e05fd7253c "Ali Beyad"<EMAIL_ADDRESS>2 days ago
| mobile: Allow passing a Bootstrap override to BaseClientIntegrationTest (#24432)
* b5fc518f04 "Bence Béky"<EMAIL_ADDRESS>2 days ago
| [balsa] Call ParserCallback::onMessageBegin() early. (#24157)
* ad6ae0d93f "Rafał Augustyniak"<EMAIL_ADDRESS>2 days ago
| mobile: disable some virtual cluster stats (#24470)
* 5db6783dbd "dependabot[bot]"<EMAIL_ADDRESS>2 days ago
| build(deps): bump openpolicyagent/opa from 0.47.1-istio to 0.47.2-istio in /examples/ext_authz (#24474)
* fde8327760 "Loong Dai"<EMAIL_ADDRESS>3 days ago
| docs: fix some typos (#24484)
* ad7817904f "Adam Kotwasinski"<EMAIL_ADDRESS>3 days ago
  kafka: add upstream-kafka-consumer (#24431)

2022-12-13T02:11:03.139942Z	warn	cannot reach the Google Instance metadata endpoint dial tcp <IP_ADDRESS>:80: i/o timeout
2022-12-13T02:11:03.143308Z	info	Pilot SAN: [istiod.istio-system.svc]
2022-12-13T02:11:03.144582Z	error	failed to initialize envoy agent: failed to generate bootstrap config: unable to process Stackdriver tracer: missing GCP Project
2022-12-13T02:11:03.144563Z	info	Status server has successfully terminated

on server...

  dnsConfig:
    nameservers:
    - "<IP_ADDRESS>"
    searches:
    - "com"
    options:
    - name: "ndots"
      value: "1"

is the config, so it ends up with something like metadata.google.internal.com. Doh


Add diff to DataLabeler column

diff() implemented for DataLabeler column to compare the predicted labels.

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.1 out of 2 committers have signed the CLA.:white_check_mark: andrew-yin:x: Andrew YinAndrew Yin seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.You have signed the CLA already but the status is still pending? Let us recheck it.


SQL editor border color does not properly set with connection type

System information:

Operating system (distribution): MacOS 10.14.6
DBeaver version: 6.3.5
Additional extensions:

Connection specification:

Database name and version: MariaDB 10.3
Driver name: JDBC
Do you use tunnels or proxies (SSH, SOCKS, etc)? Yes. SSH

Describe the problem you're observing:
When a new SQL editor is created for a color-coded connection type, the sql editor borders do not get set with the connection type color. see enclosed photo
Steps to reproduce, if exist:
open a SQL editor with a connection type color set.

hi @rotorboy ,
unfortunately, cannot reproduce an issue. Is it still actual against the recent version?

Yes still occurring in current release. The upper panel does not have the color of the profile for that connection.
-Avi

On Apr 23, 2020, at 07:36, uslss<EMAIL_ADDRESS>wrote:

hi @rotorboy ,
unfortunately, cannot reproduce an issue. Is it still actual against the recent version?
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub, or unsubscribe.

Also, screen shot
You can see sql editor frame is still grey, while resultset frame is proper color..

On Apr 23, 2020, at 7:36 AM, uslss<EMAIL_ADDRESS>wrote:
hi @rotorboy https://github.com/rotorboy ,
unfortunately, cannot reproduce an issue. Is it still actual against the recent version?
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub https://github.com/dbeaver/dbeaver/issues/8052#issuecomment-618351023, or unsubscribe https://github.com/notifications/unsubscribe-auth/AIJ4HKGF5E3SAPTG3EWMTODROAR4PANCNFSM4K7L6PNA.

Can be fixed together with https://github.com/dbeaver/dbeaver/issues/10724

Can be fixed together with https://github.com/dbeaver/dbeaver/issues/10724

Duplicate of https://github.com/dbeaver/dbeaver/issues/15971


Update _caa-records-added-by-cf.md

Added information about Cloudflare not creating CAA records if the customer creates their own

New information just came along.
Please disregard this edit.


util: Typescriptify encounter_tools

This is the first in a series of changes to our timeline generation/testing ecosystem that will (or at least we hope) unify those utilities with the rest of the project. Rather than using naively re-implemented Python parsing for log lines, we can just drop the existing Typescript definitions in and use those to implement make/test_timeline.
I'm still not completely sure what I'm doing with Typescript here, but I did at least manage to clear the lint errors. I was mostly trying to convert the existing encounter_tools.js prototype for this particular PR. This isn't in any way intended to be final or polished, simply at a point where I've changed what I can and now need some input for what might need further changes and additions before an actual release.
I'm a little annoyed that we have to import ZoneInfo for just one check, but I'm not sure there's a better way to ensure "yes, we are in a combat instance".

I did run a basic test with split_log. It dumped a whole bunch of 41 lines that it correctly didn't know how to handle, but the split function seemed okay. I'll definitely want to consider how we might move some of that functionality over to encounter_tools, since it really shouldn't live directly inside a specific utility!


Drawing Classifier: Added USE_CPP flag + bugfixes throughout

Also, skipped DC tests that are throwing some error when used with the C++ implementation. Will resolve those in future PRs.

Internal tests passed.

Waiting on #2561 before merging this.

Internal tests passed.


Vision port

Changelog
How does a target go from the Rasberry pi to GoalTrack?

generateUpdate() in VisionServer pulls data from SmartDashboard and stores it in a TargetInfo.
The target is passed to GoalTracker through addVisionUpdate.
Inside GoalTracker, the target is turned into a Pose2d.
The conversion to Pose2d is where the camera offsets are implemented.
The Pose2d is passed to update, which is the final step in the life of a target.
Datastructures inside GoalTracker maintain lists of targets.

What is a TargetInfo

A TargetInfo is a melding of 254's VisionMessage and TargetInfo. Because our implementation of Vision requires much less processing robot-side, they were turned into the same object.
It has an x, y, z, and timestamp.
The timestamp of the target is the clock value posted by the RasberryPi at the time of capture.
The y and z values in the TargetInfo are equal to x and y in RasberryPi cords. I have chosen to not modify the variable names in TargetInfo, because they represent the change from a 2D plane (Pi) to a 3D plane (Robot)
The TargetInfo data structure is subject to be renamed, because it does NOT serve the same purpose in 254's codebase.

What is GoalTracker?

GoalTracker is the mirror of GoalTrack
Both classes are responsible for the tracking of all vision targets discovered through the match
I don't 100% understand how GoalTracker and GoalTrack 'weights' particular targets, and how the tracking system works

How are vision updates generated?

Vision updates are generated in VisionServer (Registered as a loop)
The function generateUpdate() pulls the x,y, status, and timestamp posted by the Pi. The x, y, and timestamp is pushed into a TargetInfo
Currently, generateUpdate() only returns a non-null TargetInfo if the following conditions are true:
x is not equal to 0
y is not equal to 0
timestamp is not equal to 0
The aforementioned logic IS VERY SHADY. Subject to change.

Is there compensation for a potential camera offset?

Yes!
All the geometry and trig is done in GoalTracker, which is pulling 6 main constants about the cameras position in relation to the robot.
It is very important that the constants are updated properly once a robot model becomes clear, so the target tracking system works properly.

What are the new constants?

There are 6 new constants, one for pitch, yaw, and roll, and 3 for x, y, and z of the camera in relation to the robot chassis.
The 3 responsible for pitch, yaw and roll I understand, I don't understand the geometry behind the x, y, and z values.
kCameraFrameRate is used in GoalTrack to weight a specific observation. (I.E: An observation measured at a low frame rate is likely to be incorrect)
Two new constants were added to control goal weighting.
There are some misc. constants for 2017's Steamworks. These will change for the 2019 game. They are used in GoalTrack to determine intersection with the Boiler (Or in our case, any objective).
As mentioned above, it is very important to update and maintain the new constants.

Why is VisionServer a loop?

254 wrote VisionServer as a CrashTrackingRunnable, due to their method of communication.
254's communication relied on a JSON reading generated by the phone, and was received over ADB. Because of this, their code would often block waiting for input.
Blocking code as a loop is VERY BAD. Each of the registered loops(Subsystems, Drive, Controls(?) ) is called every iteration of looper, and if one of them stops to run a large chunk of code waiting for input (I.E A JSON reading), then all the other loops are delayed until the blocking code is finished.
However, our vision solution is not nearly as complicated, and requires no blocking code. Thus, a loop!

I'm a little confused by the diffs here.  They seem to overlap with many changes already present in the mainline.  Perhaps @pietroglyph can clarify?

I ran format document in VScode on Robot, all the new vision files, and Constants


Image does not displace from parent view

I'm facing a problem with the image viewer using the following configuration:
let configuration: GalleryConfiguration = [
            /// presentation style
            GalleryConfigurationItem.presentationStyle(.displacement),
            GalleryConfigurationItem.statusBarHidden(true),

            /// top buttons
            GalleryConfigurationItem.thumbnailsButtonMode(.none),
            GalleryConfigurationItem.closeLayout(.pinRight(30, 30)),
            GalleryConfigurationItem.closeButtonMode(.custom(closeButton)),

            /// displacement technique
            //GalleryConfigurationItem.displacementKeepOriginalInPlace(false),
            GalleryConfigurationItem.displacementInsetMargin(20),
            GalleryConfigurationItem.displacementDuration(0.5),
            GalleryConfigurationItem.displacementTimingCurve(.easeInOut),
            GalleryConfigurationItem.reverseDisplacementDuration(0.5),

            /// disable fade and blur
            GalleryConfigurationItem.overlayBlurOpacity(0),
            GalleryConfigurationItem.itemFadeDuration(0),

        ]

When I press the close button, I want my image to be displaced into its original position of the parent view. However, this is not happening. The image viewer simply closes and shows the parent view abruptly without any kind of animation.
I have disabled fade and blur on purpose to show only the image displacement when closing the viewer.
Am I missing something here?

Seems to be the same as issue #73.
You can close this one and I'll leave my comment there.


Add basic standalone example for how to just analyze model structure

Some people might not be interested in the histogram features, and just want to look at their model interactively. It should be explicitly said how to do this.

Closed by https://github.com/spfrommer/torchexplorer/commit/2a1eb0322b084920342749e0a9396dce04c73efc


Guides on writing an addon for ember-light-table

Referencing:

#432: Feature Roadmap
#456: valuePath as array
#357: Edit mode

All addons should include ember-light-table-addon (and ember-addon) as a keyword in their package.json. This way we, users and aggregators like Ember Observer can automatically query them. Authors should not add ember-light-table as a keyword, as this also lists some weird auto generated packages and to adhere more closely to the ember-addon semantics.
We should add an Addons section to the README, so that users can easily find addons. Authors should be encouraged to submit PRs for adding their addon to that list.

is there a way to leverage the ember-light-table generators to make an addon generator or something?

No, but we should be able to create a blueprint.
ember addon ember-light-table-cell-type-multi-value -b ember-light-table-addon

ember-light-table-addon has to be a valid npm package. Example: ember-module-unification-blueprint
But we should base it on the addon blueprint.

On second thought, a generator could be used after the addon was first created with ember addon ember-light-table-cell-type-multi-value and then ember-light-table was installed as a dependency...
But I think a proper blueprint would still be nicer.

I created a blueprint called ember-light-table-addon and published the first version to npm.
You can try it out by running:
ember addon my-elt-addon -b ember-light-table-addon --yarn

You don't need to prepare anything or even install ember-light-table-addon. ember-cli takes care of all that. :grinning:
The repository is at buschtoens/ember-light-table-addon. I added you as collaborators. You just have to accept the invitation.
I also pushed an exemplary addon generated by this blueprint to buschtoens/ember-light-table-example-addon.


Initial state for new server objects should be PRE_PROD

Currently, default state for new servers is OFFLINE. Perhaps PRE_PROD is more appropriate?

I'm not sure what is appropriate. You want to start a discussion at<EMAIL_ADDRESS>

just for a little context

^^ maybe that could be configurable. i.e. you can decide which state "new" servers are initially set to....or actually, maybe the easiest thing to do is just make that drop down enabled.

I'm +1 on enabling the drop down.


Broken images in exports after release 12.9.6 (including)

Preflight Checklist

[x ] I agree to follow the Code of Conduct that this project adheres to.
[x ] I have searched the issue tracker for a feature request that matches the one I want to file, without success.

Describe the bug
When using the self-hosted version of draw.io. The PNG export of a diagram that contains external images results in those images being displayed as a white box with an X in the exported file.
To Reproduce
Steps to reproduce the behavior:

Download any version release 12.9.6 onwards and host the static JS app behind a web server.
Create a new blank diagram.
Go to: Arrange -> Insert -> Image and paste that URL "https://cdn3.iconfinder.com/data/icons/brands-applications/512/PDF-128.png"
Save the draw.io document on local filesystem.
Go to: File -> Export As... -> PNG and save the file on local filesystem.
Open the locally saved PNG file. The inserted image will show as a white box with an X.

Expected behavior
I would expect the inserted image to show (correctly) as in the draw.io document before the export operation.
Screenshots

draw.io version (In the Help->About menu of the draw.io editor):
[12.9.6] onwards, when self-hosted.
Desktop (please complete the following information):
N/A
Smartphone (please complete the following information):
N/A
Additional context
A plain diff between the previous working release (12.9.5) and the reported one (12.9.6) shows that the "diagramly" component had been updated, which may have caused this behaviour.

👍 Same problem

Please do not "me too" in thread. Use the thumbs up to up-vote the original post.

That wouldn't be expected to work. Images hosted on third-party domains won't render on canvas when the image is generated client side, so they have to go via a proxy on the server to make them same domain.
Just the static JS alone cannot support this.

@davidjgraph, thanks for your answer. If this wouldn't be expected to work as you say, why does it work on earlier versions of draw.io and it is only broken only after the 12.9.6 release? We are using draw.io hosted in MediaWiki for several years now and we are impressed by its capabilities and user friendliness but this particular issue is blocking us from upgrading further than the 12.9.5 release.

Could you look at the network traffic please for generating an client-side image containing cross images for both .5 and .6 and post the output please?

Could you look at the network traffic please for generating an client-side image containing cross-domain images for both .5 and .6 and post the output please?

I have tried .5 and .6 but still output the same. I also tried nginx redirection but has no luck.
It fetches SERVER/proxy?url=....jpg instead of the actual image url when exporting. I'm pretty sure, it can be fixed.

OK, I'll reopen. Please submit the fix.

I'm not that good at JS, so not sure if I can fix it or not.

"I'm pretty sure, it can be fixed." You don't know the code, don't know JS but you're pretty such it can be fixed?

If you can fetch code from external sources why can't it be done?

Why this issue is closed? Isn't this a basic function? Like @samartzidis said, if previous version works, why not the later version? If you don't have the ability to figure out the solution, you should at least warn people what's not working or remove static app functionality altogether.

I stated the problem "Images hosted on third-party domains won't render on canvas when the image is generated client side, so they have to go via a proxy on the server to make them same domain.".