DROP_ALL not working for ingress from host to endpoint with no labels.

I start a docker container without labels so that the endpoint state is always “waiting-for-indentity"
docker run -dt --net=cilium-net tgraf/netperf
vagrant@runtime:~$ docker ps
CONTAINER ID        IMAGE                        COMMAND                  CREATED             STATUS              PORTS                                                                                NAMES
889c3d887a17        tgraf/netperf                "/usr/bin/netserver …"   5 minutes ago       Up 5 minutes                                                                                wizardly_tesla
250845cdc9ef        quay.io/coreos/etcd:v3.1.0   "etcd -name etcd0 -a…"   6 minutes ago       Up 6 minutes        <IP_ADDRESS>:2379-2380->2379-2380/tcp, <IP_ADDRESS>:4001->4001/tcp                             cilium-etcd
1152518bbea4        consul:0.8.3                 "docker-entrypoint.s…"   6 minutes ago       Up 6 minutes        8300-8302/tcp, 8400/tcp, 8301-8302/udp, 8600/tcp, 8600/udp, <IP_ADDRESS>:8500->8500/tcp   cilium-consul
18d19d503c69        registry:2                   "/entrypoint.sh /etc…"   2 weeks ago         Up About an hour    <IP_ADDRESS>:5000->5000/tcp                                                               registry

root@runtime:/var/run/cilium/state/38939# cilium endpoint list
ENDPOINT   POLICY (ingress)   POLICY (egress)   IDENTITY        LABELS (source:key[=value])   IPv6                 IPv4           STATUS
           ENFORCEMENT        ENFORCEMENT
29898      Disabled           Disabled          4488            reserved:health               f00d::a01:0:0:74ca   <IP_ADDRESS>    ready
38939      Unknown            Unknown           <no label id>   no labels                     f00d::a01:0:0:981b   <IP_ADDRESS>   waiting-for-identity
56326      Disabled           Disabled          60863           container:id.app              f00d::a01:0:0:dc06   <IP_ADDRESS>    ready
                                                                container:id.service1

The bpf DROP_ALL program is in place for endpoint 38939
bpf_lxc.asm  bpf_lxc.c  bpf_lxc.o  geneve_opts.cfg  lxc_config.h
root@runtime:/var/run/cilium/state/38939# cat lxc_config.h
#define DROP_ALL
#define LXC_MAC { .addr = { 0x8a, 0x89, 0x43, 0xbd, 0xed, 0x6e } }
#define LXC_IP 0xf0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x98, 0x1b
#define LXC_IPV4 0xbdfa010a
#define NODE_MAC { .addr = { 0x56, 0x7e, 0x4a, 0x86, 0xff, 0x14 } }
#define GENEVE_OPTS { 0xff, 0xff, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0 }
#define LXC_ID 0x981b
#define LXC_ID_NB 0x1b98
#define SECLABEL 0
#define SECLABEL_NB 0x0
#define POLICY_MAP cilium_policy_38939
#define CALLS_MAP cilium_calls_38939
#define CT_MAP_SIZE 1000000
#define CT_MAP6 cilium_ct6_global
#define CT_MAP4 cilium_ct4_global
#define LB_L3
#define LB_L4
#undef CONNTRACK_LOCAL
#undef POLICY_INGRESS
#define DROP_NOTIFY
#undef POLICY_EGRESS
#define CONNTRACK_ACCOUNTING
#define CONNTRACK
#define DEBUG
#undef LB_DEBUG
#define TRACE_NOTIFY
#undef ENABLE_NAT46
#define LXC_PORT_MAPPINGS
root@runtime:/var/run/cilium/state/38939#

I now try to ping from cilium-host to the endpoint
vagrant@runtime:~$ ping <IP_ADDRESS> -c 15
PING <IP_ADDRESS> (<IP_ADDRESS>) 56(84) bytes of data.
^C
--- <IP_ADDRESS> ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms

vagrant@runtime:~$ ip addr | grep <IP_ADDRESS>
    inet <IP_ADDRESS>/32 scope link cilium_host
vagrant@runtime:~$

Start cilium monitor in parallel:
vagrant@runtime:~$ cilium monitor
Listening for events on 2 CPUs with 64x4096 of shared memory
Press Ctrl-C to quit
<- host flow 0x933bc49d identity 1->0 state new ifindex 0: <IP_ADDRESS> -> <IP_ADDRESS> EchoRequest
-> endpoint 38939 flow 0x933bc49d identity 1->0 state established ifindex lxc38217: <IP_ADDRESS> -> <IP_ADDRESS> EchoRequest
<- endpoint 38939 flow 0x933bc49d identity 0->0 state new ifindex 0: <IP_ADDRESS> -> <IP_ADDRESS> EchoReply
xx drop (Policy denied (L3)) flow 0x933bc49d to endpoint 0, identity 0->0: <IP_ADDRESS> -> <IP_ADDRESS> EchoReply
<- host flow 0x933bc49d identity 1->0 state new ifindex 0: <IP_ADDRESS> -> <IP_ADDRESS> EchoRequest
-> endpoint 38939 flow 0x933bc49d identity 1->0 state established ifindex lxc38217: <IP_ADDRESS> -> <IP_ADDRESS> EchoRequest
<- endpoint 38939 flow 0x933bc49d identity 0->0 state new ifindex 0: <IP_ADDRESS> -> <IP_ADDRESS> EchoReply
xx drop (Policy denied (L3)) flow 0x933bc49d to endpoint 0, identity 0->0: <IP_ADDRESS> -> <IP_ADDRESS> EchoReply
<- host flow 0x933bc49d identity 1->0 state new ifindex 0: <IP_ADDRESS> -> <IP_ADDRESS> EchoRequest
-> endpoint 38939 flow 0x933bc49d identity 1->0 state established ifindex lxc38217: <IP_ADDRESS> -> <IP_ADDRESS> EchoRequest
<- endpoint 38939 flow 0x933bc49d identity 0->0 state new ifindex 0: <IP_ADDRESS> -> <IP_ADDRESS> EchoReply
xx drop (Policy denied (L3)) flow 0x933bc49d to endpoint 0, identity 0->0: <IP_ADDRESS> -> <IP_ADDRESS> EchoReply
<- host flow 0x933bc49d identity 1->0 state new ifindex 0: <IP_ADDRESS> -> <IP_ADDRESS> EchoRequest
-> endpoint 38939 flow 0x933bc49d identity 1->0 state established ifindex lxc38217: <IP_ADDRESS> -> <IP_ADDRESS> EchoRequest
<- endpoint 38939 flow 0x933bc49d identity 0->0 state new ifindex 0: <IP_ADDRESS> -> <IP_ADDRESS> EchoReply
xx drop (Policy denied (L3)) flow 0x933bc49d to endpoint 0, identity 0->0: <IP_ADDRESS> -> <IP_ADDRESS> EchoReply
<- host flow 0x933bc49d identity 1->0 state new ifindex 0: <IP_ADDRESS> -> <IP_ADDRESS> EchoRequest
-> endpoint 38939 flow 0x933bc49d identity 1->0 state established ifindex lxc38217: <IP_ADDRESS> -> <IP_ADDRESS> EchoRequest
<- endpoint 38939 flow 0x933bc49d identity 0->0 state new ifindex 0: <IP_ADDRESS> -> <IP_ADDRESS> EchoReply
xx drop (Policy denied (L3)) flow 0x933bc49d to endpoint 0, identity 0->0: <IP_ADDRESS> -> <IP_ADDRESS> EchoReply
<- endpoint 38939 flow 0x205e3c46 identity 0->0 state new ifindex 0: 8a:89:43:bd:ed:6e -> 56:7e:4a:86:ff:14 ARP
-> lxc38217: 56:7e:4a:86:ff:14 -> 8a:89:43:bd:ed:6e ARP

I expected the ingress from host i.e <IP_ADDRESS> to fail, but looks like we allow ingress but reject the egress echo reply correctly.
Is this correct behavior? Is host treated specially for ingress DROP_ALL?

I don't know the answer, but verified that I see the same behavior on my system.

I verified this with TCP as well. We currently allow ingress traffic from host to a container even if the policy is DROP_ALL

Checked the bpf code, we handle the DROP_ALL case only in egress (section "from-container", entry point handle_ingress()). So given the source the behavior is not surprising. I guess we need to special case DROP_ALL also in ingress to container.

I also checked with endpoint to endpoint traffic
start another endpoint with labels.
vagrant@runtime:~$ cilium endpoint list
ENDPOINT   POLICY (ingress)   POLICY (egress)   IDENTITY        LABELS (source:key[=value])   IPv6                 IPv4           STATUS
           ENFORCEMENT        ENFORCEMENT
173        Disabled           Disabled          62463           container:id.service1         f00d::a01:0:0:ad     <IP_ADDRESS>   ready
29898      Disabled           Disabled          4488            reserved:health               f00d::a01:0:0:74ca   <IP_ADDRESS>    ready
38939      Unknown            Unknown           <no label id>   no labels                     f00d::a01:0:0:981b   <IP_ADDRESS>   waiting-for-identity
56326      Disabled           Disabled          60863           container:id.app              f00d::a01:0:0:dc06   <IP_ADDRESS>    ready
                                                                container:id.service1
vagrant@runtime:~$ docker exec -it 6f440902f8d9 bash
root@6f440902f8d9:/usr/local/apache2# ping <IP_ADDRESS>
PING <IP_ADDRESS> (<IP_ADDRESS>): 56 data bytes
^C--- <IP_ADDRESS> ping statistics ---
205 packets transmitted, 0 packets received, 100% packet loss
root@6f440902f8d9:/usr/local/apache2# exit
exit
vagrant@runtime:~$ docker exec -it 6f440902f8d9 bash -- ping <IP_ADDRESS>
/bin/ping: /bin/ping: cannot execute binary file
vagrant@runtime:~$ docker exec -it 6f440902f8d9 bash -- -c "ping <IP_ADDRESS>"
bash: -c: No such file or directory
vagrant@runtime:~$ docker exec -it 6f440902f8d9 sh -- -c "ping <IP_ADDRESS>"
sh: 0: Can't open -c
vagrant@runtime:~$ docker exec -it 6f440902f8d9 bash
root@6f440902f8d9:/usr/local/apache2# ping <IP_ADDRESS>
PING <IP_ADDRESS> (<IP_ADDRESS>): 56 data bytes
^C--- <IP_ADDRESS> ping statistics ---
4 packets transmitted, 0 packets received, 100% packet loss


Do you support ESP32 devices?

Is it possibile to use this library on a ESP32 S2 device with arduino-esp32

After some tests I can confirm that it's working also on ESP32, however you have to download this repo manually, because the latest stable release (1.0.0) available in ArduinoIDE library manager is not working, because too old.
Could you create a new version and release it in Arduino IDE library manager?

Hello,
I'm very sorry to have kept you waiting so long.
I've tested it and it's currently possible to download the library with Arduino version 2.3.2.
The management address of the development board I am using is https://raw.githubusercontent.com/espressif/arduino-esp32/gh-pages/package_esp32_index.json

Hello,
I'm going to close this issue, feel free to re-open it if you have any other questions.
[Autocommentary]


Duplicated metrics in multiple endpoints

Example: The metric client_slow_subscriber is used in ClientSlowSubscriber, ClientStats and ClientMessageSpoolStats.
TODO:

add logic to filter duplicated metrics on the fly.

For this exact problem, i decided to remove client_slow_subscriber from ClientMessageSpoolStats
And for the other both i added y couple of lines into README.md how to handle this problem.
https://github.com/solacecommunity/solace-prometheus-exporter/blob/master/README.md#metric-collisions
I added as well code to deal with duplicated metrics by and configuration like:
[endpoint.my-sample]
QueueStats.0=|internal/
QueueStats.1=|bridge/foo//grr
Where 2 query's will return overlapping metrics.


Issue on Config / Setup - Missing Parameter

Hi,
Great integration, I encountered an issue when adding the integration for my device.  I was getting "Unknown Error"
Log file pointed to a missing parameter on line 171 of config_flow.py.
Looking through history it appears that there is now a 'delay' parameter required for BLEDOMInstance - I noticed this has been updated elsewhere in the codebase but looks like config_flow.py was missing still.
I verified by passing a hard-coded parameter by directly editing the file and was then able to continue to with the setup and now the integration works well.

Ive had the same issue

can you share your config_flow.py modified file?

Issue solved in version 1.0.6.
Sorry, my mistake.


Proxy works unstable while closing connections in multi-threaded mode

Looks like deadlock because sockets are on different event loops.

Merged core/pull-requests/31


Windows-Pop transparence

Hi,
First of all, to tell you that your topic seems to me the best by far.
But as I use it, I run into a problem:
I use the browser_mod for the pop-up window:
https://github.com/thomasloven/hass-browser_mod
And I find a problem in the transparency of that pop:

Of course, the problem may be with the mod, but it only happens to me with your theme, to have transparencies.
Can you remove transparency from pop windows? Or do I tell the creator of the browser_mod?
Regards

I'll take a look
Maybe I'll just lower the opacity or add a variant of the theme

@LeidenSpain Fixed the issue. I made all popups and cards have a slight blur effect to them, so they should blur everything behind them, and make the text readable even on top of the transparent card.
It's implemented as a different integration (will be available on HACs soon) so people can decide if they want to opt-in or out regardless of the theme.
Here are some examples:

Hope this helped!
I'm closing the issue but if the problem keeps happening, let me know!

Here's the pop up specifically:

I will try it, thanks

Frosting doesn't work for me on HA 2021.11.2


ion-range makes the whole component dissapear

When using an ion-range within any step it dissapears

Solved I had an ion-list and an ion item wrapping the ion-stepper so when i added the ion range within it broke, god knows why

Could someone close this?


Added a new way to add items to collections

Closes #819
Add functionality to /collections route to receive and add a list of items to a list of collections inside the new next DataTable for samples

pre-commit.ci autofix

pre-commit.ci run

pre-commit.ci run

pre-commit.ci autofix

pre-commit.ci autofix


Next JS simple onboarding for app router

🚀 Deployed on https://66d25ee075f6ce773d5b88be--cozy-fox-0defec.netlify.app


ABAC support

Thank you for making the casbin-ex library. I see that ABAC is not explicitly mentioned in the readme. Does it mean that it is not supported? I am sorry, I am a newbie in ABAC, so maybe misjudging it.

Nevermind, I realize that ABAC can be easily added. Thanks for linking the blog post.


How's the ImageNet training

I'm trying to train this model on ImageNet, but the loss seems to converge slowly after 60k iterations and the loss value is approximately 2.5.
Do you have lower loss value or the similar phenomena above?
I just want to check that I train this model correctly.
Thanks.

Sorry for the late reply. I've trained on TinyImageNet-200 and the loss was very small after converging. On ImageNet, I stopped the training because I was very busy doing my exams. However, I think the loss should have a smaller value than 2.5. When I finish training on ImageNet, I will upload the weights ASAP.

The loss looks fine now and keeps decreasing. Thanks.

hi what is your val_accuracy based on TinyImageNet-200?

@MaKiTann  Hi， how about the imagenet result ？

@MG2033 Hi，I want to know how to train my own data set. Is there any reference code?

@MaKiTann Have you trained your own data set?

@MG2033 When I run your code, the following question arises: what is the reason?
FileNotFoundError: [Errno 2] No such file or directory: 'weights.pkl'

ASAP.

Hi, Thank you for your work.
Could you please share the weights on ImageNet?
Thanks again.


VX - Security Fix

Security warnings fix
Sprintf fix

@kiritigowda I'm seeing the same errors as before with this PR.

@paveltc this pr is ready to test, needs to run all the tests as core OpenVX functionality has been touched.

@hansely can you test this branch and do a quick code review?

@kiritigowda Verified that the library is building without errors on Ubuntu22.04 rocm5.5.
But there is one warning :
lto-wapper: warning: using serial compilation of 8 LTRANS jobs

The code looks good as well.

@kiritigowda Verified that the library is building without errors on Ubuntu22.04 rocm5.5. But there is one warning :
lto-wapper: warning: using serial compilation of 8 LTRANS jobs

The code looks good as well.

Can you send me the warning log for U22.04 ?

@kiritigowda Verified that the library is building without errors on Ubuntu22.04 rocm5.5. But there is one warning :
lto-wapper: warning: using serial compilation of 8 LTRANS jobs

The code looks good as well.

Can you send me the warning log for U22.04 ?

lto-wapper: warning: using serial compilation of 8 LTRANS jobs
This is all the warning message I got.

@kiritigowda NN tests pass with this PR.

Thanks @paveltc I will merge this into develop.


!carsh,  at GPUImageOutput.m:63

i add a GPUImageMovieWriter to the camera， it carsh when startRecording

With that little detail, I'm afraid I can't help you. You're going to need to provide sample code and a better indication of where this is crashing.

Same problem I have Also while writing movie Submitted an issue #2295
Input saved mov Video and get Output as Filtered mov file
https://github.com/BradLarson/GPUImage/issues/2295


Bug: only the chat command seems to be working

All the commands such as Create new chat from template or Create new chat from highlighted text, only results in an error in the console:
app.js:1 Uncaught (in promise) Error: File name cannot contain any of the following characters: \ / :
    at Be (app.js:1:248617)
    at t.checkPath (app.js:1:964939)
    at t.<anonymous> (app.js:1:966824)
    at app.js:1:235927
    at Object.next (app.js:1:236032)
    at app.js:1:234948
    at new Promise (<anonymous>)
    at v (app.js:1:234693)
    at t.create (app.js:1:966712)
    at ChatTemplates.onChooseSuggestion (plugin:chatgpt-md:1182:39)

Ony, I don't have any special chars in my paths, and / can't really be removed as that is the standard separator :-)

I seem to have the same issue. The plugin throws the same error and will not create new files in any folder I specify in the configuration, including top level folders (i.e. no slashes in path)


Fix "TypeError: Expected int32, got list containing Tensors of type…

… '_Message' instead"
Fix type error occurred because of tensorflow
fixes issue #3548
Refer to:
http://stackoverflow.com/questions/35374958/reshape-tensor-using-placeholder-value

LGTM


cross-link group policies and users, so you can edit one from the other

Describe the solution you'd like
It would be nice if you could edit a group from a user's "roles" tab on the user's edit page, and be able to see all users that are in a group from a group's edit page.
On the user page, linking the group names to their edit pages would probably more enough, for the groups it would probably make sense to add a "see all users in this group" on the group overview page rather than putting something on a group's edit page, with the page that points to being a list of user names that link to their user edit pages.

The second half of this exists already, as the "View users in this group" button in the top right of the group edit page - added in #5854.

ah, yes so it does


changes for shallow copy

Pull request checklist

Pull request type

Please check the type of change your PR introduces:

[ ] Bugfix
[x] Feature Enhancement
[ ] Test Automation
[ ] Code Refactoring (no functional changes, no api changes)
[ ] Build related changes
[ ] Community Operator listing
[ ] Other (please describe):

What is the current behavior?

What is the new behavior?

How risky is this change?

[ ] Small, isolated change
[x] Medium, requires regression testing
[ ] Large, requires functional and regression testing

Design doc: https://ibm.ent.box.com/file/1385848485070
Image: quay.io/hemalatha_gajendran/driver_shallowcopy_feature_latest:latest


Add opaque modifier

Once opaque has been merged into gobra, it may be useful to add opaque to specific functions.
Candidates

Pow(x, e int) int in math/math.gobra
Pow2(e int) int in math/math.gobra

It may also make sense to see which functions Dafny has marked as opaque.

I am no longer sure if we need to have a closed keyword. In particular when we implement the access modifiers in Gobra, we might opt for never revealing the definition of all imported functions. Instead, all that is known about a function is the properties that are exposed via public lemmas. If that is the case, then the closed modifier becomes trivially unnecessary.

In particular when we implement the access modifiers in Gobra, we might opt for never revealing the definition of all imported functions.

What happens to pure functions where we actually do want to reveal the definitions by default? From what I understand, this used to be the way it works but was ultimately dropped because adding the body of those functions as a specification was a bit annoying.
Additionally, I think closed only becomes unnecessary for packages that are being imported while still being useful for times where we do not import packages: from what we learned from the experiments, I think it is fair to say that we want to hide proofs of lemmas. At the moment, this is achieved using opaque, but nothing is stopping the user to simply reveal the proof in the same package. This makes opaque feel a bit like a hack in situations like this. With this argument, the question boils down to whether it is worth implementing closed such that the idea of "this body can never be revealed" can be nicely expressed in Gobra (in contrast to opaque's "this body may be revealed, but not by default").

I'm still thinking about what the best design would be. The comments here state my current position, which might easily change in the future.

What happens to pure functions where we actually do want to reveal the definitions by default?

I'm not too concerned with those. The user can always introduce a lemma that states that the function is equal to its body. We can even have syntactic sugar for that (an open function :D). What concerns me at the moment is that there is no clear way of separating, in a function, what is an implementation detail, and what are the properties that any implementation of the function will always uphold. Because of that, proofs in clients tend to be too coupled with the specific way a function is implemented (for example, the fact that we traverse some data structure in a given order instead of another totally different but acceptable order). Obviously, with closed, we could essentially hide unnecessary details but the question here is what would be the best default. My gut feeling is that, in large developments, it is better to have a more restrictive default which hides more information and open functions on a per-need basis, rather than opening all functions by default and close-ing the body on a "I need to make this faster" basis.

From what I understand, this used to be the way it works but was ultimately dropped because adding the body of those functions as a specification was a bit annoying.

I'm not sure I understand this. At the moment, Gobra reveals (and essentially checks) the body of all imported functions.

Additionally, I think closed only becomes unnecessary for packages that are being imported while still being useful for times where we do not import packages: from what we learned from the experiments, I think it is fair to say that we want to hide proofs of lemmas. At the moment, this is achieved using opaque, but nothing is stopping the user to simply reveal the proof in the same package. This makes opaque feel a bit like a hack in situations like this. With this argument, the question boils down to whether it is worth implementing closed such that the idea of "this body can never be revealed" can be nicely expressed in Gobra (in contrast to opaque's "this body may be revealed, but not by default").

I am not sure I agree with this. I don't think that the ability to state "this body can never be revealed" is necessary or useful inside a package, especially considering that reveal-ing is not the default - the user is explicitly opting in to reveal a function.

I'm not sure I understand this. At the moment, Gobra reveals (and essentially checks) the body of all imported functions.

If I understood correctly, this was not always the case. However, I might be misremembering and at the end of the day probably boils down on what the better defaults are.
Either way, thanks for the clarification!


Quote all dict keys

target needs quoting :)

@symroe hey hey matey. Eagle eyes there..! Thanks for letting me know. :-)


Label Prediction with Confidence score

I have noticed some good improvements in version 0.3 of Anomalib. I wondered if there is any way to get a Label as prediction along with the confidence score in inference as we get in the testing after the training?
P.S. Referring to fitting a PaDiM model and inference from it.

Hi @ngadhvi, there is curently a PR for this. See #298

Thank you for the update @samet-akcay. Looking forward to it.


Make sure to switch credentials if needed

In GitLab by @arcln on Feb 21, 2020, 00:37

In GitLab by @arcln on Mar 11, 2020, 04:54
mentioned in merge request !16

In GitLab by @paul.laffitte on Oct 8, 2020, 20:20
mentioned in commit 490649820e2e155a0f8799a23d0b6a309bd2e424


Use atpublic

https://pypi.org/project/atpublic/ is a neat way to deal with automatically setting up which names are to be imported when doing a * import.
If it works nicely, consider doing the same for friendly.

Decided not to use it as I want to keep the number of dependencies minimal.


IPS: Add promisc mode / physical interface selection

For netmap to function correctly on vlan interfaces, it needs to be able to capture data from the physical interface.
We should add two features here:

add physical interfaces to the interface list
provide the option to set disable-promisc to no

reference https://forum.opnsense.org/index.php?topic=3017

In the contextual help, there is this sentence "this is required to actually capture data on the physical interface".
Do you mean that if we have em0 and em0_vlan10, we need to enable promiscuous mode in order to be able to capture data  on em0? I'm asking because traffic was captured just fine on VLANs without that option, so maybe it should be explained that this is to capture traffic on the parent interface.

This seems to shift from driver to driver, from logical interface to logical interface. We know that e.g. PPPoE doesn't work in netmap mode although it has been added for pcap listening during 3.0 development. It's overly weird, and we really need to move on and let upstream take care of this accordingly.
If it works for you, that's great. Help share that knowledge. :)

This seems to shift from driver to driver, from logical interface to logical interface.

Ah, OK, makes sense then. Upstream should really provide an auto switch for that setting.

If it works for you, that's great. Help share that knowledge. :)

I've enabled netmap on re0 only and can monitor all its VLANs without enabling promiscuous mode, but I can only use it for testing as Suricata doesn't work with software netmap and because the netmap patches for Realtek drivers are broken.

Some of this may change with 10.3. The master branch for src.git is 10.3 now and there is a 16.7 config in tools for easy build. ASLR backport pending, otherwise all in.

I'm not too hopeful since I've tested both netmap and the re driver from 11, but maybe some other changes in the kernel make it so that the interrupt don't pile up when the queue is full.
I'll check it out once ASLR is in.

ok, thanks for mentioning. I really thought that netmap would shape up now with native suricata support. :/

One problem is that there is a big divergence between the FreeBSD netmap and the official netmap. The official one crashes the kernel and I don't know what to cherry-pick to make it work as I'm not a driver hacker.
The other problem is in the hands of the Suricata team. If they can make it work with software netmap, then everybody could use IPS, at the cost of more CPU use.

Well we know from #940 that not using the wan interface and just the LAN interface we get IPS alerts, so in that sense to me it makes sense to select the vlan interfaces and LAN and see what happens. Also do we have any update on #940?


vec256 type declaration

Hi,
I am trying to build ntt part of sppark as independent C/C++ project for a project. However, the type declaration/definition for vec256  is no where to be found under sppark/ project. I even search into the codebase of [blst](https://github.com/supranational/blst/tree/master) and still I couldn't find it either.
Building sppark from cargo is no problem at all. However, as I mentioned that I am trying to build the ntt portion independently as C/C++/Cuda project and the type declaration for vec256 is no where to be found which would enable me to be able to successfully build.
I would greatly appreciate your response

Hello,
The parameter files in ntt/parameters/ should be included only on the host side, which we accomplish with an #ifndef __CUDA_ARCH__ guard, like this. We do this because vec256 is not defined on the device side, so the CUDA compiler complains if it's made visible to the device side. This might be the cause of your issue.
I can also provide a basic C++ test program if you'd like.

Hi,
If you can provide a basic C test program as well as perhaps a short script to independently build the ntt portion of project, I would great appreciate it.
Thanks

Hi,
Thanks for your informative response. However one question
INCLUDES="-Isppark/ -Iblst/src/" LIBS="-Lblst/ -lblst"
Is -Lblst/ a typo, don't you mean something along lines of -llibntt??
Please check

Thank you very much for your informative response. I will try this in a shortwhile.

What's the distinction between these two and when one should use the fp_t over fr_t?

This is kind of a text-book question, it's a reflection of common terminology, or established lingo if you wish. Unfortunately we don't do text-book questions here, because this is not an educational project:-(

What's the purpose [of this and that]

You leave no other choice but to conclude that you ask these questions for self-educational purposes. This regretfully falls beyond the scope of the project. In other words, we simply don't have time to spare to go into these kinds of details upon arbitrary requests. I'm sorry:-(

Well I've figured out the answers to my earlier question. Thanks for your support and you guys have been more than helpful.


"Before" notification matcher modifier doesn't seem to work

I'm trying to test that an execute resource notifies a file resource with the :before timer, but my unit test doesn't seem to recognize the notification at all when it's implemented with :before.
In the real code I have a guard clause in the execute resource and am doing some stubbing in the test, but for simplicity of illustrating the problem I've stripped down the test to this:
  context 'when it should notify' do
    it 'notifies' do
      command = chef_run.execute('change-admin-user-password-from-default')
      expect(command).to notify('file[splunk-user-password-file]').before
    end
  end

And the stripped-down implementation:
execute 'change-admin-user-password-from-default' do
  command  "my_command"
  notifies :delete, 'file[splunk-user-password-file]', :before
end

Set up this way, the test raises a NoMethodError:
undefined method 'before' for #<ChefSpec::Matchers::NotificationsMatcher:0x7289b08>
If I remove the .before modifier in the test, the test runs but fails, saying that there was no notification. If I change :before to :immediately in the implementation (again without the .before modifier), the test passes.

@davidcpell What version of ChefSpec are you running?

@tas50 sorry for not including this info before. Output of chef -v is:
ChefDK: 0.17.17
chef-client 12.13.37
delivery version: master
berks version: 4.3.5
kitchen version: 1.11.1

The before syntax support came out in ChefSpec 5.0, which we released yesterday. That will ship with the next ChefDK in a few weeks. Hang tight.

@tas50 thanks for pointing that out. What about just using the notify matcher without the before syntax at the end? I'm finding that ChefSpec isn't able to pick up on the notification at all, even without specifying the timer. Does the matcher default to looking for :immediately?


add plotting fuctions

Code for the following two diagnostic plots.

These look really great, Christina! One suggestion is it to make the output file names for the plots as descriptive as possible (maybe with some added suffixes) so it will be easy to pull them out?

Good idea! The histogram should now have a suffix = "input_ast_histogram.png" and the source density map should have a suffix = "source_den_map_plot.png".

lgtm! thanks!


Fix options not merging nested default options

Hello!
I think it would be expected as a user to create a Frisbee object like so:
new Frisbee({ stringify: { arrayFormat: "repeat" } });

without needing to pass the other default options included in stringify
Submitting this PR to fix this!

I think we should use https://github.com/jonschlinkert/defaults-deep instead on the options, and then we can do a major version bump.

Could you adjust your PR to use this package?

@niftylettuce here's the change but I get an issue https://travis-ci.org/niftylettuce/frisbee/jobs/587049093#L253 with the linting on defaults-deep added in the dist folder
Should the dist folder really be linted?

sorry for the ping, but any news on that @niftylettuce ?

I am working on this now

I am re-opening this because I am not merging in defaults-deep into the package just yet.  I think we need to be selective about which properties get deeply merged versus all options as this PR had.  Feel free to share thoughts.  I also looked into using https://www.npmjs.com/package/deepmerge.


System unavailable: https://ci.adoptopenjdk.net/computer/test-aws-rhel76-armv8-5/

https://ci.adoptopenjdk.net/computer/test-aws-rhel76-armv8-5/ is offline, and cannot be restarted

Being decomissioned as per #1843

Being decomissioned as per #1843


V3 error detecting is difficult

A number of public API's return errors, which is very useful, however it is difficult or impossible to match on errors without importing lots of packages or often is only possible with string parsing. Visually the errors are fine, but I'd like to programatically detect things and respond accordingly.
I wish I had an exhaustive list, but I don't. The latest example was:
_, err := MemberRemove(context.Background(), mID)

err is NOT a
etcdserver/membership ErrIDNotFound

as I would have expected. I also tried a
etcdserver/api/v3rpc/rpctypes ErrGRPCMemberNotFound

after I searched through the code.
Turned out %T says it's an
rpctypes.EtcdError

I eventually had to
e, ok := err.(rpctypes.EtcdError)
e.Code() == codes.NotFound ...

I really hope there is a better way, or that someone could consider something for the code base. Some other types of errors are actually private, therefore matching is actually impossible without string parsing.
I'm also happy to contribute some code to this effort if someone wants to help guide it.
Thanks!

@purpleidea
I am wondering if you read the doc here: https://github.com/coreos/etcd/blob/master/clientv3/README.md#error-handling?

Also the doc here: https://godoc.org/github.com/coreos/etcd/etcdserver/api/v3rpc/rpctypes#pkg-variables
listed all possible client-side errors.

@xiang90 I've seen this, however it's not clear at least to me how to match on any of those errors. Only on the codes. Maybe I could submit a doc update if you could let me know?

(Perhaps those only apply to KV, in my example I was using the MemberRemove API for example, which didn't seem to match on rpctypes.Foo...)

@purpleidea I do not quite understand actually. Why do not want to match the code instead of doing a direct match like err == rpctypes.ErrEmptyKey. For your case, why not do err == ErrMemberNotFound? The codes are from gRPC. For our client library, we want to hide gRPC details as much as possible.

Ah, I'm sorry, I somehow missed the wrapped client versions of the gPRC errors. My bad for hacking at 2am. Perhaps this is a bad example. I'll close and make a new issue next time I hit a private error.

@xiang90 Is this type of error worthy of a new issue?
*errors.errorString: listen tcp <IP_ADDRESS>:2386: bind: address already in use
not public API afaict. many others that are *errors.errorString too.

All errors defined with Go built-in error type will have that errorString type. And bind already use error is not an etcd error.

@gyuho Good point, sorry.
How about this one: still type: *errors.errorString
error text is: "rpc error: code = 13 desc = raft: stopped"
What is the recommended way to match on it?

@purpleidea No problem.
Regarding raft: stopped, try https://github.com/coreos/etcd/blob/master/raft/node.go#L35?

Thanks! I was starting to get the hang of this until... one more...
grpc.rpcError: rpc error: code = 13 desc = etcdserver: server stopped

This doesn't match etcdserver.ErrStopped unfortunately.

For that I think you need to grpc.ErrorDesc(err) == etcdserver.ErrStopped.String()

@gyuho That didn't work since there isn't a .String() method for error, but this did work (similar error):
grpc.ErrorDesc(err) == fmt.Sprintf("%s", grpc.ErrClientConnClosing)

So the rule I have in my head is if it's a grpc type error, wrap it in the ErrorDesc method, and then string compare...
If there's a better way to do this, please let me know! Also, perhaps this grpc wrapping rule should be added to the docs section. If you agree, let me know and I'll send a patch.

@purpleidea Right. I meant .Error() method https://golang.org/pkg/builtin/#error


Correct dataweave mapLeafValues example

Thanks for the heads up: Handling this via https://github.com/mulesoft/docs-mule-runtime/pull/1793


Metrics Interface

Fixes #303
Follow-up to #971 to introduce a simplified interface to interact with custom metrics, as well as accompanying docs to show how to use them.

Hey @sashman!
This PR introduces a simple interface to register and interact with custom metrics. It would be great to get your thoughts on this one ;)

Looking sweet @adriangonz ! Couple of questions:

Under the hood, metrics logged through the {func}mlserver.log method will get
exposed to Prometheus as a Histogram.

Would it be possible to expose a Counter as well? Or override the type somehow?
Speaking of histograms specifically, would it be possible to control the bucket config for the metric? We currently have some of the default metrics capped at 10 as max value which is not ideal for monitoring.

From https://github.com/prometheus/client_python#histogram,

The default buckets are intended to cover a typical web/rpc request from milliseconds to seconds. They can be overridden by passing buckets keyword argument to Histogram.

Unfortunately, our "typical" requests vary hugely in duration :)

Hey @sashman ,
That's a great point.
Fully agree that Histograms are not a great fit for many cases. We've already got some ideas to introduce support for other types of custom metrics. However, this will most likely get tackled under a diff issue (see #1030).
There're a few other things on the backlog though, so it's not 100% clear whether that one will be tackled in time for 1.3.0 or will need to wait until 1.4.0.


fix: Rewrite log level change without Go 1.19 features

atomic.Bool is only available in Go 1.19 and users on older versions
of Go won't be able to download the SDK because of that. Since
atomic.Bool is not crucial for a correct implementation, we can revert
it this time.
Signed-off-by: Charith Ellawala<EMAIL_ADDRESS>

Do we need to change Go version in the go.mod?

Do we need to change Go version in the go.mod?

Good catch! Didn't realise that Renovate changed it to 1.19.


Added Othello Game

PR Description 📜
As a GSSOC '23 contributor added othello game
Fixes #2680

Mark the task you have completed ✅

[x] I follow CONTRIBUTING GUIDELINE & CODE OF CONDUCT of this project.
[x] I have performed a self-review of my own code or work.
[x] I have commented my code, particularly in hard-to-understand areas.
[x] My changes generates no new warnings.
[x] I have followed proper naming convention showed in CONTRIBUTING GUIDELINE
[x] I have added screenshot for website preview in assets/images
[x] I have added entries for my game in main README.md
[x] I have added README.md in my folder
[x] I have added working video of the game in README.md (optional)
[x] I have specified the respective issue number for which I have requested the new game.

Add your screenshots(Optional) 📸

Thank you soo much for contributing to our repository 💗

Thank you @sujanrupu ,for creating the PR and contributing to our GameZone 💗
Review team will review the PR and will reach out to you soon! 😇
Make sure that you have marked all the tasks that you are done with ✅.
Thank you for your patience! 😀

@gurjeetsinghvirdee please review the PR

Thank you  @sujanrupu , for your valuable time and contribution in our GameZone 💗.
It’s our GameZone, so Let’s build this GameZone altogether !!🤝
Hoping to see you soon with another PR again 😇
Wishing you all the best for your journey into Open Source🚀

Hey @sujanrupu,
You can't work on a closed issue 👀!
Follow the proper guideline and make a new PR again 😀.
Happy Hacking 💗


Missing records for frontend translations

I tried to translate this module to Dutch. After fixing the translations in nl.js and nl.yml some strings were still in English. It looks like these are used in the frontend code (bundle.js) but are not present in en.js or en.yml:
 "MFARegister.REGISTER_WITH": "Register with {method}",
  "MFARegister.NEXT": "Register with {method}",
  "MFARegister.BACK": "Register with {method}",
  "MFARegister.RECOVERY_HELP": "Learn more about recovery codes.",
  "MFARegister.TITLE": "Multi-factor authentication",
  "MFARegister.SETUP_COMPLETE_DESCRIPTION": "You will be able to edit these settings later from your profile area.",
  "MFARegister.SETUP_COMPLETE_CONTINUE": "Continue",
  "MFARegister.HELP": "Find out more.",
  "MFABackupCodesRegister.DESCRIPTION": "Recovery codes enable you to log into your account in the event your primary authentication is not available. Each code can only be used once. Store these codes somewhere safe, as they will not be viewable after leaving this page.",
  "MFABackupCodesRegister.PRINT": "Print codes",
  "MFABackupCodesRegister.DOWNLOAD": "Download",
  "MFABackupCodesRegister.COPY": "Copy codes",
  "MFABackupCodesRegister.FINISH": "Finish",
  "MFABackupCodesVerify.NEXT": "Next",
  "MFABackupCodesVerify.DESCRIPTION": "Use one of the recovery codes you received",
  "MFABackupCodesVerify.LABEL": "Enter recovery code",
  "MFAMethodTile.UNAVAILABLE": "Unsupported: ",
  "MFAVerify.MORE_OPTIONS": "More options",
  "MFAVerify.METHOD_UNAVAILABLE": "This authentication method is unavailable",
  "MFAVerify.VERIFY_WITH": "Verify with {method}",
  "MFAVerify.TITLE": "Log in",
  "MFAVerify.BACK": "Back",
  "MFAVerify.LAST_RESORT_MESSAGE": "Contact your site administrator if you require your multi-factor authentication to be reset.",
  "MFASelectMethod.UNAVAILABLE": "unavailable",
  "MFAVerify.OTHER_METHODS_TITLE": "Try another way to verify",
  "MultiFactorAuthentication.MORE_OPTIONS_IMAGE_ALT": "Graphic depicting various MFA options",
  "MFALogin.SOMETHING_WENT_WRONG": "Something went wrong!",
  "MFALogin.TRY_AGAIN": "Try again"

These are defined in the src js files using the _t() function which includes a parameter for a default strings
e.g.
https://github.com/silverstripe/silverstripe-mfa/blob/4/client/src/components/Register/MethodTile.js#L113
Regards
Steve

These are defined in the src js files using the _t() function which includes a parameter for a default strings
e.g.
https://github.com/silverstripe/silverstripe-mfa/blob/4/client/src/components/Register/MethodTile.js#L113
Regards
Steve

Hi Steve,
They are indeed defined in source. But I think it would be nice to include these defaults in en.js or en.yml as well along with the ones that are already there. The current situation, in my opinion, discourages usage of this module on non English locales because developers have to search the source to collect all the default texts. This is very time consuming and error prone. Besides that, the presence of the lang and client/lang folders suggests that translating those texts is what has to be done to translate this module. Doing so results in a partially English experience.
Regards,
Sander

Hi Steve,
They are indeed defined in source. But I think it would be nice to include these defaults in en.js or en.yml as well along with the ones that are already there. The current situation, in my opinion, discourages usage of this module on non English locales because developers have to search the source to collect all the default texts. This is very time consuming and error prone. Besides that, the presence of the lang and client/lang folders suggests that translating those texts is what has to be done to translate this module. Doing so results in a partially English experience.
Regards,
Sander


avalanchego: 1.11.7 -> 1.11.8

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://github.com/ava-labs/avalanchego/releases.
meta.description for avalanchego is: Go implementation of an Avalanche node
meta.homepage for avalanchego is: https://github.com/ava-labs/avalanchego
meta.changelog for avalanchego is: https://github.com/ava-labs/avalanchego/releases/tag/v1.11.8
Updates performed

Golang update

To inspect upstream changes

Release on GitHub

Compare changes on GitHub

Impact
Checks done

built on NixOS
The tests defined in passthru.tests, if any, passed
found 1.11.8 with grep in /nix/store/2qhs1imgw2360w8zd6zjy553pi6ls02h-avalanchego-1.11.8
found 1.11.8 in filename of file in /nix/store/2qhs1imgw2360w8zd6zjy553pi6ls02h-avalanchego-1.11.8

Rebuild report (if merged into master) (click to expand)

2 total rebuild path(s)

2 package rebuild(s)

First fifty rebuilds by attrpath

avalanchego

Instructions to test this update (click to expand)

Either download from Cachix:
nix-store -r /nix/store/2qhs1imgw2360w8zd6zjy553pi6ls02h-avalanchego-1.11.8 \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.
Or, build yourself:
nix-build -A avalanchego https://github.com/r-ryantm/nixpkgs/archive/22ccc86bfb44bbc276bff7cbf76f3877dc52e3cb.tar.gz

Or:
nix build github:r-ryantm/nixpkgs/22ccc86bfb44bbc276bff7cbf76f3877dc52e3cb#avalanchego

After you've downloaded or built it, look at the files and if there are any, run the binaries:
ls -la /nix/store/2qhs1imgw2360w8zd6zjy553pi6ls02h-avalanchego-1.11.8
ls -la /nix/store/2qhs1imgw2360w8zd6zjy553pi6ls02h-avalanchego-1.11.8/bin

Pre-merge build results
We have automatically built all packages that will get rebuilt due to
this change.
This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.
Result of nixpkgs-review --extra-nixpkgs-config '{ allowInsecurePredicate = x: true; }' run on x86_64-linux 1

1 package built:

avalanchego

Maintainer pings
cc @urandom2 @qjoly for testing.

Result of nixpkgs-review pr 319454 run on aarch64-darwin 1

1 package built:

avalanchego


⚠ Bofrost.fr has degraded performance

In 8eefd11, Bofrost.fr (https://www.bofrost.fr) experienced degraded performance:

HTTP code: 200
Response time: 1205 ms

Resolved: Bofrost.fr performance has improved in d1fc674 after 20 minutes.


Optimize replaceSummarizingStep from CommonUtils

When filling up missing steps, we simplify the transition formula directly, no need to assert equalities to the solver.

Resolved in 2f2f74b


Review Scorecard Data - Add additional fields?

These are the fields currently available in the scorecard data extract. All values are boolean (true/false).
Currently in Use

openssf.scorecard.raw.active
openssf.scorecard.raw.ci-tests
openssf.scorecard.raw.code-review
openssf.scorecard.raw.contributors
openssf.scorecard.raw.frozen-deps
openssf.scorecard.raw.fuzzing
openssf.scorecard.raw.packaging
openssf.scorecard.raw.pull-requests
openssf.scorecard.raw.sast
openssf.scorecard.raw.security-policy
openssf.scorecard.raw.signed-releases
openssf.scorecard.raw.signed-tags

Available, but not used right now:

openssf.scorecard.raw.automatic-dependency-update
openssf.scorecard.raw.cii-best-practices
openssf.scorecard.raw.token-permissions

I think we pulled cii-best-practices out since we already have that data direct, but should we include the other two?

As a follow up to this, we have several unused metrics in the criticality and best-practices data. Thoughts on which should be included?
Unused metrics in criticality:

Commit frequency
Closed issues count
Updated issues count
Comment frequency
Org count (however already “multiple orgs” metric exists under scorecard)

There are many unused metrics in best-practices. Here are just a few (the entire list can be found at https://bestpractices.coreinfrastructure.org/en/projects/1):

Automated test suite
Publicly known vulnerabilities fixed
New functionality testing


[resolves #262] Fix crlf issues and reinstate missing dependencies

Refer to this link for build results (access rights to CI server needed):
https://fabric8-ci.fusesource.com/job/wildfly-camel-pullreq/181/
Test FAILed.

retest this please

Refer to this link for build results (access rights to CI server needed):
https://fabric8-ci.fusesource.com/job/wildfly-camel-pullreq/182/
Test PASSed.


EES-4738 - describing all used env vars in docs

This PR adds a new document which contains all the env vars used to configure Kangal.

Codecov Report

Merging #169 (3cecf06) into master (0f73559) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master     #169   +/-   ##
=======================================
  Coverage   59.80%   59.80%
=======================================
  Files          35       35
  Lines        2458     2458
=======================================
  Hits         1470     1470
  Misses        883      883
  Partials      105      105

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 0f73559...3cecf06. Read the comment docs.


Short solution needed: "Set custom user agent" (curl)

Please help us write most modern and shortest code solution for this issue:
Set custom user agent (technology: curl)
Fast way
Just write the code solution in the comments.
Prefered way

Create pull request with a new code file inside inbox folder.
Don't forget to use comments to make solution explained.
Link to this issue in comments of pull request.

Set custom user agent


Starting the profiler freezes godot

Linux alienware 4.8.0-34-generic #36-Ubuntu SMP Wed Dec 21 17:24:18 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
Godot v2.1.2.stable.official
Issue description:
Pressing on Start Profiling make Godot use 100% processor and freezes the editor.
Steps to reproduce:
Open minimum project (included for convenience), Run -> press Start Profiling -> try interacting with editor. Editor is unusable.
Link to minimal example project:
godot-dbg.zip

Linux volzhs-desktop 4.4.0-59-generic 80-Ubuntu SMP Fri Jan 6 17:47:47 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
Godot v2.1.2.stable.official
I can't reproduce it.
But I have a lag to switch window while running project.
In this case, I solved it by use_vsync OFF at Project Settings > Display

I can reproduce it on Ubuntu 16.04.1.

Minimal project with Godot_v2.1.2-stable_x11.64 works fine on:
Ubuntu 14.04 64Bit and Intel i7-6700, 16GB, HD Graphics 530
Profiling works, Editor not freezing.
Hardware dependent?

First of all thank you for your report and sorry for the delay.
We released Godot 3.0 in January 2018 after 18 months of work, fixing many old issues either directly, or by obsoleting/replacing the features they were referring to.
We still have hundreds of issues whose relevance/reproducibility needs to be checked against the current stable version, and that's where you can help us.
Could you check if the issue that you described initially is still relevant/reproducible in Godot 3.0 or any newer version, and comment about it here?
For bug reports, please also make sure that the issue contains detailed steps to reproduce the bug and, if possible, a zipped project that can be used to reproduce it right away. This greatly speeds up debugging and bugfixing tasks for our contributors.
Our Bugsquad will review this issue more in-depth in 15 days, and potentially close it if its relevance could not be confirmed.
Thanks in advance.
Note: This message is being copy-pasted to many "stale" issues (90+ days without activity). It might happen that it is not meaningful for this specific issue or appears oblivious of the issue's context, if so please comment to notify the Bugsquad about it.

Tested in current master, no freeze.

Thanks for testing.


Build Error - Access to rad.json denied

Opened an existing extension project that I have loaded many times previously on my local test database. Amended version number in app.json and got the error described in issue 4849. I found that error does not appear as long as I don't open the app.json. Changed an object and found that pressing F5 will still build the extension & publish it, but won't open the client. I left VSCode open and manually opened the client, tested the change was OK and went back to VSCode to do the next change.
Made the second change. This time, pressing  generated the error shown which says that access to rad.json was denied. I restarted VS Code and was then able to build & publish (but client won't start as per issue 4849)
[Error - 14:17:29] Please report this issue to https://github.com/microsoft/al/issues including information on how to reproduce it, if possible.
Processing of message 'al/createPackage' failed with error: 'Access to the path 'd:\Development\AL\my project name\ .vscode\rad.json' is denied.'
Details:
System.UnauthorizedAccessException: Access to the path 'd:\Development\AL\Chamberlains J000446.vscode\rad.json' is denied.
at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize)
at Microsoft.Dynamics.Nav.CodeAnalysis.RelativeFileSystem.CreateFile(String path) in F:\a\185\s\source\Prod\Microsoft.Dynamics.Nav.CodeAnalysis\Compilation\RelativeFileSystem.cs:line 69
at Microsoft.Dynamics.Nav.CodeAnalysis.ObjectChangeManager.Serialize(String path, IFileSystem fileSystem) in F:\a\185\s\source\Prod\Microsoft.Dynamics.Nav.CodeAnalysis\ObjectChange\ObjectChangeManager.cs:line 86
at Microsoft.Dynamics.Nav.EditorServices.Protocol.LanguageServer.Extensions.CreatePackageRequestHandler.d__3.MoveNext() in F:\a\185\s\source\Prod\Microsoft.Dynamics.Nav.EditorServices.Protocol\LanguageServer\Extensions\CreatePackageRequestHandler.cs:line 57
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Dynamics.Nav.EditorServices.Protocol.MessageProtocol.RequestHandlerBase`1.d__9.MoveNext() in F:\a\185\s\source\Prod\Microsoft.Dynamics.Nav.EditorServices.Protocol\MessageProtocol\RequestHandlerBase.cs:line 43
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Dynamics.Nav.EditorServices.Protocol.RequestRegistry.d__6.MoveNext() in F:\a\185\s\source\Prod\Microsoft.Dynamics.Nav.EditorServices.Protocol\Endpoints\RequestRegistry.cs:line 64
VS Code version:
Version: 1.33.0 (system setup)
Commit: 0dd516dd412d42323fc3464531b1c715d51c4c1a
Date: 2019-04-04T15:14:46.685Z
Electron: 3.1.6
Chrome: 66.0.3359.181
Node.js: 10.2.0
V8: 6.6.346.32
OS: Windows_NT ia32 10.0.17134
AL Extension is:
Name: AL Language
Id: ms-dynamics-smb.al
Description: AL development tools for Dynamics 365 Business Central
Version: 3.0.115791
Publisher: Microsoft
VS Marketplace Link: https://marketplace.visualstudio.com/items?itemName=ms-dynamics-smb.al

Hi @MajorBarf, what do you mean by "pressing"?
Concerning the issue mentioned in #4849, it is only a warning given by VS Code and not an error, so it should not prevent you from doing anything.

Sorry, "pressing will" should read "pressing  will".
OK, #4849 maybe showing up as just a warning but while it was being displayed, it wouldn't let me build my extension. I had to close VS Code to get rid of it. And because of this problem with rad,json I have to restart VS Code after each occasion I have used . And the client won't launch so I can't use the debugger. It was all working before I loaded the VS Code update, after I load the update I get all these problems in my way. Very frustrating.

Don't you by chance have another instance of VsCode opened for the same project?
Can you maybe check your processes
Also can you delete the the rad file? If you can just delete it. If you are not using Alt Ctrl F5 or Alt F5 you can just delete it (if you can and it is not locked by the OS).

@kalberes Thanks for replying. There are definitely no other instances running. I deleted the rad.json as you suggested and that seems (fingers crossed) to have sorted it.
To add to the mystery, I switched to another project and didn't get the same problem with that one. That led me to compare the files and I found that the launch.json in each one as subtly different. In the project that was working, it had "server": "http://localhost" and a separate entry for "port:" and in the project that was not working it had "server"; "http://localhost:7249" with no "port:" entry. When I then tried to amend the launch.json on the problem project, it said that the file was protected and did I want to overwrite it.
It hasn't done that before so something has protected that folder. The problem project was the one that was open when VS code was upgraded so possibly it is something in the upgrade that does that. Maybe it recreates the json files during the upgrade while it has enhanced access permissions and that blocks access when it has finished?
Anyway, solution is: Delete the rad.json file and let it recreate.


Remove deprecated internal constructor

This constructor is internal API and not used by Gradle itself. Now it is also broken and can produce an NPE (see #3589). To avoid further confusion, this PR removes the constructor.

Replaced by #3600


Make activations strongly typed as an Enum

Description

Stop passing around activations as strings.
Types of change

Mainenance.
Checklist

[x] I confirm that I have the right to submit this contribution under the project's MIT license.
[x] I ran the tests, and all new and existing tests passed.
[x] My changes don't require a change to the documentation, or if they do, I've added all required information.

I was thinking about this more and I should probably change the feedforward layer to take a Module for the nonlinearity and do the conversion earlier. I’ll change the PR to do this.

Sorry, didn't notice that you had reverted the PR to draft before publishing the review.


How do I get a widevine license on mobile Chrome?

I am using chrome canary, android5, and shaka 2.2.1.
On desktop Chrome, licensing is successful. However, mobile chrome does not enter the licensing process.
I have tried remote debugging
if (type == shaka.net.NetworkingEngine.RequestType.LICENSE) {       request.headers['customHeader'] = 'Header Info';   }
type == shaka.net.NetworkingEngine.RequestType.LICENSE In this section, i have discovered that the Type drops to a segment and does not fall under the license.
What settings have I missed?

Double check the content you are trying to play is protected.  Do you get any other errors?  For example, do you get a REQUESTED_KEY_SYSTEM_CONFIG_UNAVAILABLE error?  Did you wait enough time for the license request?  We may not send the license request immediately, the first request you get may be for the media segment.  Did you see the popup requesting access for premium content?  Did you allow it?  How about trying in an incognito tab?

The content you want to play is protected by Widevine DRM.

I did not get any errors and I had enough time.

Protected media playback popups have been viewed and accepted.

I also initialized the cache as well as the incognito tab.

A duplicate issue for this was also filed, #1027.
For reference, the duplicate did mention that these licensing problems do not happen on Android 6 and 7, only 5. I will rename this issue to reflect that new information.

@mateon01, you did not provide any way for us to reproduce the problem.  Please provide the following information, which was requested in the issue template:
=====
What version of Shaka Player are you using:
Can you reproduce the issue with our latest release version:
Can you reproduce the issue with the latest code from master:
Are you using the demo app or your own custom app:
If custom app, can you reproduce the issue using our demo app:
What browser and OS are you using:
What are the manifest and license server URIs:
(you can send the URIs to<EMAIL_ADDRESS>instead, but please use GitHub and the template for the rest)
What did you do?
What did you expect to happen?
What actually happened?

Sorry for the delay.
What version of Shaka Player are you using:

I used shaka player version 2.2.1.

Can you reproduce the issue with our latest release version:

It is possible. The latest versions of shaka player, Android and chrome are available.

Can you reproduce the issue with the latest code from master:

yes
Are you using the demo app or your own custom app:
https://github.com/GoogleChromeLabs/sample-media-pwa I refer to this.
If custom app, can you reproduce the issue using our demo app:It is possible.

What browser and OS are you using:

Android 6 and 7, Android Chrome canary

What are the manifest and license server URIs:

https://contents.pallycon.com/bunny/stream.mpd, https://tokyo.pallycon.com/ri/licenseManager.do
(you can send the URIs to<EMAIL_ADDRESS>instead, but please use GitHub and the template for the rest)

What did you do?

I stored the Widevine license using PWA technology and tried to play the encrypted content using it.

What did you expect to happen?

I expected to recover the Widevine license stored in the Media Key Session and play mpd.

What actually happened?

The license was successfully saved and the key set ID was issued successfully. However, the
license saved in the session was not restored when I tried to play it after saving.

Thanks!  We will try to reproduce using our demo app.  If this is specific to the Chrome PWA sample, we may not be able to offer direct support for that.  If we can reproduce with our demo, we should be able to help you.

@mateon01 After reviewing this issue, there seems to be some contradicting information that I hope you can clear up for me. Right now the bug title specifies Android 5 based on information from a duplicate bug #1027. In your repo steps you say you have done this on Android 4, 5, 6, 7. Is this an issue only on Android 5 or on all Android versions?

Android versions that are not licensed are versions 4 and 5. Versions 6 and 7 will proceed normally until the license is issued.

@mateon01  I'll have to sync-up with Widevine's Android test engineer as we don't have the devices to reproduce this right now.

Okay. Thank you for always.

@mateon01 The example you are using not the correct way to handle licenses for offline content. You cannot just cache a license and replay it later - that would expose the DRM system to replay attacks. If you wish to have offline playback you need to use persistent licenses. We suggest that you use Shaka Player's built-in offline support rather than the PWA example you are using.

To clarify, caching a license response in your service worker is the same as a replay attack against the CDM.  The CDM defends itself against this and will reject such a cached response.
Shaka Player's offline APIs take care of media storage and persistent licensing for you, so these are what you should use instead.  Service workers should not be used to cache media or licenses.


VM: Resetting pxVmSetGlobalSelf() after a pxVmCallFunction() call throws memory exceptin

When calling the below VM method, I get a memory exception:
C#
 public static bool CallFunction(IntPtr vmPtr, uint index, IntPtr self, params object[] parameters)
        {
            var prevSelf = pxVmSetGlobalSelf(vmPtr, self); // returns 0x0

            StackPushParameters(vmPtr, parameters);
            var success = pxVmCallFunctionByIndex(vmPtr, index, IntPtr.Zero);

            pxVmSetGlobalSelf(vmPtr, prevSelf); // Memory Exception

            return success;
        }

C++
PxVmInstance* pxVmSetGlobalSelf(PxVm* vm, PxVmInstance* instance) {
    auto* old = pxVmGetGlobalSelf(vm);
    auto* instSym = vm->vm.find_symbol_by_index(instance->symbol_index());
    vm->vm.global_self()->set_instance(instSym->get_instance());
    return old; // returns 0x0 during first call of pxVmSetGlobalSelf()
}

OpenGothic is doing the reset of globalSelf() in a similar fashion, but there's a difference:
The original phoenix implementation uses std::shared_ptr which are never empty. But the C-API leverages the underlying .data() (c_npc*) which can be empty.
Could it be possible to have a null-check within C-API and reset to a default (empty shared_ptr<>()) value? (maybe create a new shared_ptr every time? But is the old one being deleted?)

Works as expected. Tests run smoothly:
i.e. 2x calling TA_MIN() will both times reveal the same npcPtr value. And removing the value afterwards from stack isn't throwing any error.
Can be merged imho.

I'm happy with the solution.
Case closed. :-)


The size of tensor a (18002) must match the size of tensor b (17776) at non-singleton dimension 1

The size of tensor a (18002) must match the size of tensor b (17776) at non-singleton dimension 1

closed

Has it been resolved? I also encountered this problem

Has it been resolved? I also encountered this problem

keep the prompt text shorter solved my problem


Create BMP390 device

Panasonic pressure and temperature sensor with a board from Adafruit.

datasheet
adafruit product page
adafruit arduino code base

closing because its old, and we haven't really tested it -- there also hasn't been much demand for this -- I'll leave the branch intact


selectable property has no effect on Text

https://facebook.github.io/react-native/docs/text.html#selectable
I've had a look at the implementation of RCTText, and it seems to be a full reimplementation using an NSView, so I'm not sure I can help extend it as my knowledge of Cocoa at that depth is weak.
In the interim, are there any workarounds?

I would say it's not a full reimplementation, some critical things copied directly, and that's why it's harder to enable it on macOS than iOS, because the latter just emulates selecting by providing longPress handler https://github.com/facebook/react-native/blob/e1577df1fd70049ce7f288f91f6e2b18d512ff4d/Libraries/Text/RCTText.m#L67. On macOS you'd expect different and much more complicated behaviour. The best way right now would  be using native TextView, so you can try TextInput with multiple={true} property, it depends on your formatting requirements and styles. Unfortunately, it also may have some bugs and incomplete API, let me know. I'd like to improve it.


Switch from cirq to cirq-core in setup.py

This commit switches the cirq dependency to cirq-core from cirq. Recently we've begun having pip installation issues due to unresolvable dependency conflicts (both locally and on the github runners). I traced this back to cirq, and while I haven't definitively proven this I think that it is specifically a dependency issue with the cirq-rigetti submodule. When installing cirq it will by default include all of the optional submodules, most of which are specific hardware platform interface code which isn't needed for our purposes (which is just the ability to output cirq circuit objects). So we should be fine switching to cirq-core (which includes all of the core functionality we need) and avoiding installation of all of the extra submodules altogether. If a user wants that they can figure out the dependency issues for whichever hardware backend they want to connect to with cirq on their end.

Quick follow-up on the unit tests. I took a look at the logs and the unit tests that we have failing are entirely unrelated to this change and are due to some deprecation warnings introduced in numpy 1.25. A couple of our unit tests related to the forward simulator (which looks like it runs into this deprecation) have assertions that they encounter no warnings, so this is what is failing here. We can fix this but it should probably be a separate PR.

It looks like the cirq -> cirq-core change snuck into the numpy125 PR as well. I'm closing this one and will accept that one which includes this change and passes the tests.


Trying to open desktop folders does nothing

Description
After setting Files as the default file manager, it is unable to open any folders on the desktop or open the log location.
Opening folders via task manager and the start menu's "Open file location" option does work.
Restarting does not seem to have any effect, trying to open these folders does not add anything to either logs.
Steps To Reproduce

Try to open a folder on the desktop and see it open with file explorer
Set Files as the default manager
Try to open a folder on the desktop and see that it doesn't open
Restart
Try step 3 again and witness the same result as before
Uncheck the "Set Files as the default file manager" option
Try step 1 again and witness the same result as before

Expected behavior
Files should be able to open files on the desktop and the log location.
Files Version
<IP_ADDRESS>
Windows Version
Windows 10 21H2 19044.1586
Relevant Assets/Logs
debug.log
debug_fulltrust.log

Do you get any error? Or simply nothing happens?

Does this hold for desktpp recycle bin and this PC as well?

Does this hold for desktop recycle bin and "this PC" as well?

Yeah, it does apply to the recycle bin.
I don't have "this PC" on my desktop, however I assume opening it would have the same outcome.

Could you check what happens if you give the following commands in a CMD prompt? Does Files open?

"%localappdata%\Files\FilesLauncher.exe" "C:\"
"%localappdata%\Files\FilesLauncher.exe" "C:\Users\<USERNAME>\Desktop\<SOME FOLDER>" <- put some valid path here

You may also try switching to the preview version which has some related bugs fixed (turn off the set as default  option before updating).

Could you check what happens if you give the following commands in a CMD prompt? Does Files open?

"%localappdata%\Files\FilesLauncher.exe" "C:\"
"%localappdata%\Files\FilesLauncher.exe" "C:\Users\<USERNAME>\Desktop\<SOME FOLDER>" <- put some valid path here

You may also try switching to the preview version which has some related bugs fixed (turn off the set as default option before updating).

Trying both of these commands appears to put something else in focus, but nothing else happens.
This issue still exists on the preview version, however command prompt comes back in focus a few seconds after running the command.

Turns out that my antivirus was blocking it in both versions.


Pulled cases & deaths from the AZ tableau API

Damn, no county-level data?

I just tested this and am blown away that it works. NICE WORK!


3201 remove unused UI parts and packages

https://cabidev.atlassian.net/browse/VS-3180

This branch has a refactor part. The refactor will be merged with #99 PR.


Towards python 3 support

This PR goes someway to supporting python 3:

print statements become print functions
use try/except block for new/old imports
use except as syntax*
inconsistent indentation (tabs+spaces is a syntaxerror in python 3)
a couple of other syntax changes (e.g. see xxx_todo)

*The new exception syntax is not supported in 2.5, so prior versions would not be supported (Note: travis doesn't support testing 2.5-....)
The main/remaining block is that opencv3.0 (with python 3 support) removed the old-api: cv2.cv.

Obviously this is a pretty big diff, breaks 2.5-, and may cause merge conflicts... but I'm throwing it out here nonetheless!
See also the diff without whitespace, which may be helpful (even though this is python).

is this going to be accepted anytime soon?

I would like to see the PR merged soon, since I accidentally started to migrate SimpleCV to Python 3 (and thus duplicating this work).

see also  #689

Hey @hayd, i merged your PR in here. Do you think further actions are required to support Python 3?

@tpltnt My recollection is that the remaining changes needed are updates to opencv3...

@hayd thank you for the hint. I added an issue in my (fork) repo.

Do we know how to contact the maintainers to get this pr merged? Three years seems like an unusually long response time...

@mUtterberg The safest bet right now would be to fork to project, and fully update it to Python3, there's a lot of work to be done, and SightMachine seems to be unresponsive regarding this project.

@golyalpha You're totally right. Now that I've lurked around this repo a little longer, I'm wondering if Sight Machine has pivoted on their business domain a bit. Regardless, I'll try my luck with some of the forks that've made some progress toward 3.x like @hayd's!

@golyalpha I commented on the differences between openCV2 and openCV3 (and the porting of the Python binding) in issue #689. Maybe that helps a bit.

@tpltnt There's more issues than just the image format. I believe we've hit a wall with a certain function or it's equivalent in OCV2 not being in OCV3. Might've overlooked it, but both of us having a lot of other projects to work on, and this being more of a "You still using Py2? You monster! :P" kind of deal, we decided to focus on projects which we felt were important at the time, or simply had tighter deadlines, and since my use of SimpleCV was declining at the time anyways, updating SCV to Py3 wasn't really something we considered important.


wordPattern not working in language-configuration.json

VSCode Version: 1.19.3
OS Version: Windows 10

Steps to Reproduce:

Add a wordPattern to the language-configuration.json file:

"wordPattern": "[\\S]+"

Perform an action that is reliant upon a word match, such as a DocumentHighlightProvider that triggers when a word is selected.  Using test code such as:

if (true) then
  print 'test'
.

Clicking on if will correctly trigger, but clicking on . will not.  A wordPattern of [\S]+ should match against both.
If you contribute the setting on activate from an extension, it does work correctly:
vscode.languages.setLanguageConfiguration('langID', {wordPattern: /[\S]+/});

I cannot reproduce:

package.json:

{
    "publisher": "alex",
    "name": "42649",
    "version": "0.0.0",
    "engines": {
        "vscode": "^1.0.0"
    },
    "activationEvents": [
        "*"
    ],
    "contributes": {
        "languages": [
            {
                "id": "myLang",
                "extensions": [
                    ".mylang"
                ]
            }
        ]
    },
    "main": "index.js"
}

index.js:

const vscode = require('vscode');

exports.activate = function (context) {
    vscode.languages.setLanguageConfiguration('myLang', {wordPattern: /[\S]+/});
    vscode.languages.registerDocumentHighlightProvider('myLang', {
        provideDocumentHighlights: (document, position) => {
            console.log(`INVOKED WITH ${JSON.stringify(position)}`);
        }
    })
}

testfile 42649.mylang:

if (true) then
  print 'test'
.

When I click on ., I get:

So the highlight provider is invoked for line number 3 aka. position (2,0).

@alexandrudima, if you contribute the wordPattern via vscode.languages.setLanguageConfiguration it does work correctly.  However, it does not work if you contribute the wordPattern via the language-configuration.json file.

@pltrant I unfortunately still cannot reproduce. Here are the complete files:

package.json:

{
    "publisher": "alex",
    "name": "42649",
    "version": "0.0.0",
    "engines": {
        "vscode": "^1.0.0"
    },
    "activationEvents": [
        "*"
    ],
    "contributes": {
        "languages": [
            {
                "id": "myLang",
                "extensions": [
                    ".mylang"
                ],
                "configuration": "./config.json"
            }
        ]
    },
    "main": "index.js"
}

config.json:

{
    "wordPattern": "[\\S]+"
}

index.js:

const vscode = require('vscode');

exports.activate = function (context) {
    vscode.languages.registerDocumentHighlightProvider('myLang', {
        provideDocumentHighlights: (document, position) => {
            console.log(`INVOKED WITH ${JSON.stringify(position)}`);
        }
    })
}

42649.mylang:

if (true) then
  print 'test'
.

I see the provider invoked for the line number 3.

In testing it again, I think the issue is with getWordRangeAtPosition in relation to how the wordPattern is contributed.  Specifically, the below code is executed by my documentHightlightProvider class:
let highlights = [];
let textRange = document.getWordRangeAtPosition(position);
let lineNum = textRange.start.line;
...

If I contribute the wordPattern via vscode.languages.setLanguageConfiguration, it works fine.  If I contribute the wordPattern via the language-configuration.json file, getWordRangeAtPosition fails.  It's as if it's not reading the language specific wordPattern under that scenario.  If I explicitly provide the regex pattern for it to use (document.getWordRangeAtPosition(position, /[\S]+/)), it works fine, but there still shouldn't be a difference based upon how the wordPattern is contributed.
A separate bug that caused the confusion in this issue: I wasn't thinking it wasn't working at all, because start.line against an undefined object was causing the function (in my example code) to abort early and was not throwing an error at all, so none of the remaining code was being executed.

Ok, when using setLanguageConfiguration, both the renderer process and the extension host process use the provided word definition.
When using a language configuration file, it is read only on the renderer process, and the extension host process ends up using the default word definition and therefore document.getWordRangeAtPosition uses the default word definition.


Export as JSON per line

This module needs a corresponding change to allow exporting data as 1 JSON record per line as an option similar to what was done for teraslice_file_import.
The parameter should be named output_format.
The options should be:

json_array - this is the current behavior and the default.
json_lines - One JSON record per line

We'll likely add additional formats in the future.

this is already resolved, in a previous commit, though output_format has changed to just format


API v3 (GraphQL)

It seems the website started using the V3 of the API which seems to be a GraphQL API.
Has anyone tried accessing that API? Has anyone had success authenticating to it? If yes, then all our troubles around finding the correct formats, api endpoints go away, since graphql is more or less self-documenting.

Do you have an example of the endpoint query?

Seems like not everything is calling the new API yet. The /progress/ratings is though. Just take a look at your reviews and set your WDT to show XHR requests, and start paging.
Here's the request:
Request URL: https://www.airbnb.hu/api/v3?locale=hu&currency=HUF&operationName=ReviewOverviewQuery
Request Method: POST
Status Code: 200

"query ReviewOverviewQuery($input: porygonGetReviewsRequestInput!) {
porygon {
getReviews(request: $input) {
reviews {
id
rating
reviewer {
hostName
profilePicPath
__typename
}
comments
privateFeedback
reservation {
checkIn
checkOut
tierId
confirmationCode
listing {
id
name
__typename
}
__typename
}
reviewHighlight {
localizedTags
highlightKey
title
__typename
}
__typename
}
...CategoryReviewTagSections_plusReviewHighlights
__typename
}
__typename
}
}
fragment CategoryReviewTagSections_plusReviewHighlights on porygonGetReviewsResponse {
reviews {
plusReviewHighlights {
reviewTagType
reviewCategoryTag
sections {
negative {
reviewTagTypes
reviewCategoryTag
__typename
}
positive {
reviewCategoryTag
reviewTagTypes
__typename
}
__typename
}
__typename
}
__typename
}
__typename
}
"

variables: {input: {revieweeId: 13381212, listingId: null, offset: "4", limit: 4, rating: null, role: "guest"}}

Ok followoup:
Seems like the _aat cookie contains the authentication token. Not sure how to obtain it, or how long it's valid for though. I just used dev tools to extract my own when poking the airbnb website. It's been valid the last couple of hours even though I closed the browser in the meantime.
Introspection is disabled on the server side, so we won't be able to extract all the possibilities, but the typenames are returned, so it should be possible to more-or-less figure out the fields for each based on the requests made by the web frontend.
curl 'https://www.airbnb.com/api/v3?locale=en&currency=HUF&operationName=ReviewOverviewQuerya' -H 'x-airbnb-api-key: d306zoyjsyarp7ifhu67rjxn52tv0t20'  -H 'content-type: application/json'   -H 'x-airbnb-graphql-platform: web'      -H 'Cookie: _aat=<SNIP>;' --data-binary $'{"operationName":"ReviewOverviewQuery","variables":{"input":{"revieweeId":<SNIP>,"listingId":null,"offset":"4","limit":4,"rating":null,"role":"guest"}},"query":"query ReviewOverviewQuery($input: porygonGetReviewsRequestInput\u0021) {\\n  porygon {\\n    getReviews(request: $input) {\\n      reviews {\\n        id\\n        rating\\n        reviewer {\\n          hostName\\n          profilePicPath\\n          __typename\\n        }\\n        comments\\n        privateFeedback\\n        reservation {\\n          checkIn\\n          checkOut\\n          tierId\\n          confirmationCode\\n          listing {\\n            id\\n            name\\n            __typename\\n          }\\n          __typename\\n        }\\n        reviewHighlight {\\n          localizedTags\\n          highlightKey\\n          title\\n          __typename\\n        }\\n        __typename\\n      }\\n      ...CategoryReviewTagSections_plusReviewHighlights\\n      __typename\\n    }\\n    __typename\\n  }\\n}\\n\\nfragment CategoryReviewTagSections_plusReviewHighlights on porygonGetReviewsResponse {\\n  reviews {\\n    plusReviewHighlights {\\n      reviewTagType\\n      reviewCategoryTag\\n      sections {\\n        negative {\\n          reviewTagTypes\\n          reviewCategoryTag\\n          __typename\\n        }\\n        positive {\\n          reviewCategoryTag\\n          reviewTagTypes\\n          __typename\\n        }\\n        __typename\\n      }\\n      __typename\\n    }\\n    __typename\\n  }\\n  __typename\\n}\\n"}' --compressed

It's coming from the /authenticate request:
curl 'https://www.airbnb.hu/authenticate' -H 'authority: www.airbnb.hu' -H 'origin: https://www.airbnb.hu' -H 'x-csrf-token: <SNIP>' -H 'x-csrf-without-token: 1' -H 'user-agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36' -H 'x-airbnb-recaptcha-token:  <SNIP>' -H 'content-type: application/x-www-form-urlencoded; charset=UTF-8' -H 'accept: application/json, text/javascript, */*; q=0.01' -H 'cache-control: no-cache' -H 'x-requested-with: XMLHttpRequest' -H 'sec-fetch-site: same-origin' -H 'sec-fetch-mode: cors' -H 'referer: https://www.airbnb.hu/login' -H 'accept-encoding: gzip, deflate, br' -H 'accept-language: en-US,en;q=0.9,hu;q=0.8' -H 'cookie: <SNIP>' --data 'redirect_params=&email=<SNIP>&password=<SNIP>&from=email_login&airlock_id=&origin_url=https%3A%2F%2Fwww.airbnb.hu%2Flogin&page_controller_action_pair=' --compressed

It returns a set-cookie header with the value. The cookie is valid for 2 years, so maybe the token is valid too?

Does someone have a success to get results with API V3 ?
I'm trying to get results from this query:
https://www.airbnb.com/api/v3/ExploreSearch?locale=en&operationName=ExploreSearch...
but always have in response: "PERSISTED_QUERY_NOT_FOUND"

Can anyone help me to try API V3 with Insomnia(or postman).
I tried with my v2 token and it keeps saying that I have to login.
and I tried with _aat but I am getting same result

I replaced <_aat> with mine
I think I am missing something.

Is anyone able to query the v3 api? I can't get it to work... any help would be great.

Can anyone help me to try API V3 with Insomnia(or postman).
I tried with my v2 token and it keeps saying that I have to login.
and I tried with _aat but I am getting same result

I replaced <_aat> with mine
I think I am missing something.

Change the URL from 'https://www.airbnb.co.kr/api/v3/' to 'https://api.airbnb.co.kr/v3/', and use x-airbnb-oauth-token in the header. This might help.

I was trying to request as above, but for a while I was getting: {"success": false /* and some other pair, I don't remember it now*/}. Then suddenly airbnb started responding like: You can't access airbnb.com/api/v3, access denied.


[Snyk] Security upgrade @backstage/theme from 0.0.0-use.local to 0.1.1

Snyk has created this PR to fix 1 vulnerabilities in the yarn dependencies of this project.
Snyk changed the following file(s):

plugins/xcmetrics/package.json

Note for zero-installs users
If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the .yarn/cache/ directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to run yarn to update the contents of the ./yarn/cache directory.
If you are not using zero-install you can ignore this as your flow should likely be unchanged.

⚠ Warning
Failed to update the yarn.lock, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

Issue
Score

Denial of Service (DoS) SNYK-JS-HTTPPROXYMIDDLEWARE-8229906
  170

[!IMPORTANT]

Check the changes in this PR to ensure they won't cause issues with your project.
Max score is 1000. Note that the real score may have changed since the PR was raised.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:
🦉 Denial of Service (DoS)

🎉 Snyk hasn't found any issues so far.
✅ security/snyk check is completed. No issues were found. (View Details)
✅ license/snyk check is completed. No issues were found. (View Details)


Handle github repository transfer events.

Summary
Github webhook events having type repository and action transferred are handled by producing an internal event that triggers an evaluation. Despite being safe, it cannot lead to any useful action since the github app installation lost permissions to operate on the repository.
This change makes it so that repository.transferred events are handled as deletions. In order for such deletion to be successful, 403 Forbidden errors on webhook deletions must be handled gracefully, so that repository deletion can terminate without errors.
This is safe since (b) there's nothing Minder can do about this, having lost the necessary permissions, and (b) repository registration removes stale webhooks. The latter point is relevant to fix repository transfers when auto registration is enabled: in these cases, repository ownership is migrated before the event is delivered to Minder, making it impossible to cleanup webhooks, which leads to an SQL deletion failure, which eventually makes it impossibile to re-register the repository under the destination project.
Fixes #3274
Change Type

[X] Bug fix (resolves an issue without affecting existing features)
[X] Feature (adds new functionality without breaking changes)
[ ] Breaking change (may impact existing functionalities or require documentation updates)
[ ] Documentation (updates or additions to documentation)
[X] Refactoring or test improvements (no bug fixes or new functionality)

Testing
Unit and manually tested.
Review Checklist:

[X] Reviewed my own code for quality and clarity.
[X] Added comments to complex or tricky code sections.
[ ] Updated any affected documentation.
[X] Included tests that validate the fix or feature.
[X] Checked that related changes are merged.

coverage: 53.972% (+0.02%) from 53.952%
when pulling 5a6cfd4c0c71a38b1ebd05752aeb3d4703fa6c1d on issue-3274
into ffddb6a32662355d6895e8f10524a6123684fee7 on main.


bump s3 logs module - fixes S3 ACL issues

what
Bumps the cloudposse/s3-log-storage/aws to latest version.
why
Fixes this issue:
https://github.com/cloudposse/terraform-aws-cloudfront-cdn/issues/96

Covered by https://github.com/cloudposse/terraform-aws-cloudfront-cdn/pull/103


Issues with recognizing directory renaming

Description
What steps will reproduce the problem?
1.Probably a weird corner case that involves me doing things that are very contrary to best practices.  Renaming directories on the fly and then trying to move forward / backward in the File Explorer history caused the error.  Also noticed issues with properly refreshing directory contents, etc.
What is the expected output? What do you see instead?
Please provide any additional information below
File "/home/immersinn/.virtualenvs/networks/lib/python3.5/site-packages/spyder/widgets/explorer.py", line 1132, in chdir
os.chdir(directory)
FileNotFoundError: [Errno 2] No such file or directory: '/home/immersinn/gits/networks/learning-path'
Traceback (most recent call last):
File "/home/immersinn/.virtualenvs/networks/lib/python3.5/site-packages/spyder/widgets/explorer.py", line 1097, in go_to_previous_directory
self.chdir(browsing_history=True)
File "/home/immersinn/.virtualenvs/networks/lib/python3.5/site-packages/spyder/widgets/explorer.py", line 1135, in chdir
except PermissionError:
UnboundLocalError: local variable 'PermissionError' referenced before assignment
Version and main components

Spyder Version: 3.2.2
Python Version: 3.5.2
Qt Versions: 5.9.1, PyQt5 5.9 on Linux

Dependencies
pyflakes >=0.6.0 :  1.6.0 (OK)
pycodestyle >=2.3:  2.3.1 (OK)
pygments >=2.0   :  2.2.0 (OK)
pandas >=0.13.1  :  None (NOK)
numpy >=1.7      :  1.13.1 (OK)
sphinx >=0.6.6   :  1.6.3 (OK)
rope >=0.9.4     :  0.10.7 (OK)
jedi >=0.9.0     :  0.10.2 (OK)
psutil >=0.3     :  5.3.0 (OK)
nbconvert >=4.0  :  5.3.1 (OK)
sympy >=0.7.3    :  None (NOK)
cython >=0.21    :  0.26.1 (OK)
qtconsole >=4.2.0:  4.3.1 (OK)
IPython >=4.0    :  6.1.0 (OK)
pylint >=0.25    :  1.7.2 (OK)

Thanks for reporting. We'll take a look at this after we release 3.2.3

@dalthviz, please work on this one.


Adding Al Sweigart books and removing some trailing whitespace.

What does this PR do?
Add resource(s)
For resources
The Big Book of Small Python Projects
Invent Your Own Computer Games With Python
Making Games with Python & Pygame
Scratch 3 Programming Playground
Beyond the Basic Stuff with Python: Best Practices for Writing Clean Code
Description
These are programming books already listed in the "by programming language" document and I'm adding them to the "by subject" document in their appropriate categories.
Why is this valuable (or not)?
These are professionally published by No Starch Press but available under a Creative Commons license.
How do we know it's really free?
They are hosted on the author's website and the books have a Creative Commons BY-NC-SA license notification on their copyright page.
For book lists, is it a book? For course lists, is it a course? etc.
Books.
Checklist:

[X] Read our contributing guidelines.
[X] Search for duplicates.
[X] Include author(s) and platform where appropriate.
[X] Put lists in alphabetical order, correct spacing.
[X] Add needed indications (PDF, access notes, under construction).
[X] Used an informative name for this pull request.

Follow-up

Check the status of GitHub Actions and resolve any reported warnings!

@asweigart we'd be happy to move them to the subject list if you think that's more appropriate, but we don't duplicate links. For example if a book is more targeted to some looking to do game development than python development, it will find its audience better in the game dev section.
We've also experimented a bit with section-to-section cross-links, but now that we have a proper search facility, a user who finds a python book in the game dev section can easily find the python section.
Love the books, by the way!


Change the Editor fixed size to fit the page

I included a WYSIWIG editor in the project using the django CKEditor plugin.
The editor is working fine but I need to modify it so it fits the width of the page

I can work on this :)


deps-dev: Update to TypeScript 5

This updates to TypeScript 5. It includes removing some workarounds for a bug in TypeScript 4.9 relating to dynamic imports.
We may want to look at using the new bundler option for moduleResolution at some point but haven't done anything related to that here.

@adamledwards

It includes removing some workarounds for a bug in TypeScript 4.9 relating to dynamic imports.

https://github.com/microsoft/TypeScript/issues/51554 was the bug that seemed to be causing the previous problems.


Implement RFC 0047: Promote Web Servers Buildpack

Now that RFC 0047 has been accepted, the buildpack should be adopted into paketo-buildpacks.
This involves:

[ ] https://github.com/paketo-buildpacks/samples/issues/322
[ ] https://github.com/paketo-buildpacks/paketo-website/issues/277
[ ] relocating the repository
[ ] releasing the buildpack and pushing it to Paketo Buildpacks registries

https://github.com/paketo-buildpacks/samples/pull/329

https://github.com/paketo-buildpacks/web-servers

Buildpack has been released https://registry.buildpacks.io/buildpacks/paketo-buildpacks/web-servers


Insert html outside the paragraph

I can't understand something :(...
How to make button to insert fro example some div with class but want this div to be outside of the pragraph.
For example:
I have this text:

Lorem ipsum. Lorem Ipsum. Lorem Ipsum.

Want to make this markup:

Lorem ipsum.

Lorem Ipsum.

Lorem Ipsum.

Not:

Lorem ipsum.

Lorem Ipsum.

    Lorem Ipsum.

Also facing this same issue. @lotestudio did you figure this out by any chance?

Also facing this same issue. @jorgedavila25 or @lotestudio did you figure this out by any chance?

Should be fixed thanks to @hasentopf


Show in titlebar when running as admin

Provide an instant feedback in the titlebar whether the app is running as administrator like Terminal and Dev Home does.

Settings
File Locksmith
Hosts File Editor

FYI - @niels9001 wants to use a control from the Community in the near future. iirc, that control should be able to include a text like this.

This has been worked on for the 0.74.0 release. Please update PowerToys to the latest version. 😉
https://github.com/microsoft/PowerToys/releases


Problem with asynchronous test assertions

I had to disable the following tests because they were breaking the next set of tests. I think the assertions related to connection timeouts that should return an error, are actually returning null. However, due to the structure of the test, the test resolves before the assertion is made, so the assertion fails during following tests that have nothing to do with the original error.
Need to rewrite and enable these, but it's only a testing issue, the actual methods work.
https://github.com/RocketChat/Rocket.Chat.js.SDK/blob/665a0d5c2de285cdd7dd051a352056b22c341be6/src/lib/driver.spec.ts#L18-L104

This happens because inside driver.connect, whenever a connection reaches the timeout, it calls the callback (or rejects the Promise), however the Promise is still there executing, with events.once('connected') waiting for a connection
Therefore, when the next tests tries to connect and succeeds, all the previous tests that were waiting for a connected event get one each in the 4 following tests.
Fixed by removing the listener once the connection times out and not even adding it in the first place if the connection had already timed out.


nested navigationProperty not resolved

Hi guys,
we currently facing an issue where we can't post against an entity when the payload contains a nested navigationProperty which points to an entity and not to an entitySet.
Due to authorization issue we need to have a seperate navigationProperty pointing to an entity.

Hi,
Just closing the issue after the confirmation.


failure to indent body and closing brace of empty match containing a comment

This appears to be an edge case of #2099 that was missed.
// okay
fn lel(a: Never)
{ match a {
}}

// problematic
fn lol(a: Never)
{ match a {
    // Impossible!
}}

becomes
// okay
fn lel(a: Never) {
    match a {}
}

// problematic
fn lol(a: Never) {
    match a {
    // Impossible!
}
}

rustfmt 0.4.1-nightly (a4462d1 2018-03-26)

dup of #2188


V entities left border missing

Observed in Detail, if not elsewhere.

I can't see where it is, is it in meta props?

Yes, in metaprops propvalues in Detail box.

@Ptrhnk : Hey, I think it I see the condition when it happents: it happens in prop value in 2nd-level metaprops.

@davidzbiral This is generic sign. Isn't it marked as generic? I can see it only when I put generic logical type on.

I see. I will ask Tomáš why this is "generic" - it should be "definite".

@davidzbiral Ok, so its solved by data import. I'm closing it.


Slide Number is not Showing.

Slide Number is not showing in slides only dashed box is visible in place of slide number, I'm using version 3.1.

It's working in the current 3.4 version, please use the most recent release.

It's working in the current 3.4 version, please use the most recent release.


Fix previousPrime

There is currently a method called previousPrime that lives in /lib/previousPrime.js.
It is incomplete and needs to be fixed!
Add a function that returns the previous prime number from a given number. (7 => 5)
Acceptance Criteria:

Running yarn test <methodName> results in tests passing.
You have written a skeleton method for someone else to work on.
You have written tests surrounding your skeleton method.
Running yarn lint does not print any errors to the console!
Optional: write one or two more tests surrounding the method you are solving to account for potential edge cases.

Please include the skeleton of a new method + an accompanying test for someone else to work on at the time of creating a pull request! A pull request will most likely be denied if it does not contain a skeleton method for someone else to work on! For more information, please read the Contributing Guide.
Thank you so much for your contribution!

Hey @BlakeGuilloud  I would like to work on this. Also can modify one more of the function isPrime which is a better implementation