SIF v3 Framework uses shared secret passwords saved in clear text

Environment - "Security": SIF v3 Framework uses shared secret passwords saved in clear text.  This is not secure for any implementation.   SIF Framework needs to incorporate OAUTH as part of its core code.
Shared Secret – This is like a typical password field and is stored unencrypted within the SIF framework database. Potentially anyone who has access to the database can read this and create fake consumer applications easily to send spurious data to the functional service. SIF needs to be secure across all its framework components rather than just relying on transport level security

@kunalyadavdfe I am going to split OAuth into a separate tickets as this is an enhancement. Please see ticket #25

@drjonnicholson & @rafidzal What are your thoughts on this? Should the field be migrated to a hash or reversible password?
@joerghuber How is this handled in the java version?
Encrypting the database can mitigate this so have tagged this issue  as an enhancement instead of a bug.

In the Java version it is held as clear text in a DB. If some one get access to your database you have other problems than just the password. Your database should be well protected through firewalls and other means. Also since the password or related environment is for integration purpose between systems rather holding sensitive data it is not a critical issue.

By default, the SIF Framework provides a simple implementation for the management of Consumer and Provider settings through the IFrameworkSettings interface. The current implementation uses a configuration file purely for the sake of convenience and to simplify the provided demo projects. This includes the clear text storage of the shared secret. It is expected that for an enterprise-level solution, developers implement their own settings class and update the SettingsManager class (until such time as a DI framework can be incorporated). The documentation will be enhanced to better explain how this can be achieved.

My understanding is that the shared secrets in SIF work as a symmetric key, not a password. Since it is used in unattended settings (system to system communication) the server has to know the value and therefore it needs to be stored in some sort of decryptable format. You could store the keys encrypted and maintain the decryption key in application memory, but if someone compromises the system or the application they'll likely have access to both anyway, so multi-layer system security is imperative (as @joerghuber stated previously).
Regardless, I agree that implementation of OAuth is a better solution and SIF supports that too.

The Ricone.org Implementation Used OAuth successfully, but there is the communications between the auth and DataAPI server which need to be considered. The designs done prior to building R1 I would be happy to share and all our learnings.
D.
Daniel Ingvarson
<EMAIL_ADDRESS>AU: +61 (0)403 832 621
US +1<PHONE_NUMBER>
Skype: m-dingvarson

On Dec 22, 2016, at 12:51 PM, Matt Harris<EMAIL_ADDRESS>wrote:
My understanding is that the shared secrets in SIF work as a symmetric key, not a password. Since it is used in unattended settings (system to system communication) the server has to know the value and therefore it needs to be stored in some sort of decryptable format. You could store the keys encrypted and maintain the decryption key in application memory, but if someone compromises the system or the application they'll likely have access to both anyway, so multi-layer system security is imperative (as @joerghuber https://github.com/joerghuber stated previously).
Regardless, I agree that implementation of OAuth is a better solution and SIF supports that too.
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub https://github.com/Access4Learning/sif3-framework-dotnet/issues/17#issuecomment-268853376, or mute the thread https://github.com/notifications/unsubscribe-auth/AIqqZcJ7SUj0M8HVXp2V7Wp1f6DumZcpks5rKriSgaJpZM4LNE9Q.


Add git commit hash to version output

In what area(s)?

/area runtime

/area operator
/area placement
/area docs
/area test-and-release

Describe the feature
Add git commit hash to version output
Release Note

RELEASE NOTE:
ADD  Add git commit hash to version output

This is similar to https://github.com/dapr/cli/issues/599
/assign


[WIP] Remove QA Content Feature

Trello: https://trello.com/c/qBM5QLID/482-business-finder-tech-debt
Remove QA Content Feature

FacetExtractor can be removed / simplified

@koetsier so looks like that is still used:

content_item.rb
facets_builder.rb

Not really clear on how these work in other features... could we have a run through of what's going on here?

@huwd I wasn't aware  https://www.gov.uk/uk-nationals-living-eu used the QA feature, but it looks like it does and is still live... so maybe we can't delete it quite yet. It's only one question though, so perhaps we can remove some code specific to the business finder, but it might be a more difficult job than just ripping it all out.

@vanitabarrett I've removed the stuff that touched the QaToContentController.
The only bit I'm not sure about is this tracking, I'm not clear on if this should have also applied to the /uk-nationals-living-eu feature.
Would you be free to take a quick look over with me?

* FacetExtractor

@koetsier does it make sense to do that one in a separate PR?

@huwd I think you're right about the tracking, but I'm just double checking with Dilwoar as I've found two similar things: track-qa-choices and track-brexit-qa-choices and neither look to be used (apart from in the business finder)


sbuffer too small in achcat v2.0.0

in v2.0.0 achcat leads to ACH_OVERFLOW when receiving messages. Figured out that the sbuffer size was 8. Expanded to 4K works fine.

07143d21f273ce39e1dafa0f07aaae5df495e777


Scrolling down

Scrolling down using the mouse wheel makes the window snap back to the cursor (if it is out of view) and does nothing if the cursor is in view.
Scrolling up works as intended.

Just did some testing and oddly enough, scrolling down produces a bState that doesn't match with any of the curses.BUTTONn_* constants. We might have to do a hack and just hard code the bState for this maybe? However, I don't know if it would have the same value for every computer/terminal. It does however, go into the handleMouse function.

It does work for me (on Mac and Ubuntu), but I can confirm that mouse support differs by terminal and can be finicky. I agree that (yet more) special handling may be needed.


[Facebook Reel] can't download with command Process ps

DO NOT REMOVE OR SKIP THE ISSUE TEMPLATE

[X] I understand that I will be blocked if I intentionally remove or skip any mandatory* field

Checklist

[X] I'm asking a question and not reporting a bug or requesting a feature
[X] I've looked through the README
[X] I've verified that I'm running yt-dlp version 2023.07.06 (update instructions) or later (specify commit)
[X] I've searched known issues and the bugtracker for similar questions including closed ones. DO NOT post duplicates
[X] I've read the guidelines for opening an issue

Please make sure the question is worded well enough to be understood
I can't download Facebook reel with command Process ps
Process ps = Process.Start(new ProcessStartInfo("cmd") { Arguments = @"/C yt-dlp -P " + Browse + " -f bestvideo[ext=mp4]+bestaudio[ext=m4a]/best[ext=mp4]/best " -a TxT/url.txt --output "%(title).20s [%(id)s].%(ext)s"", RedirectStandardOutput = true, UseShellExecute = false, CreateNoWindow = true });
Please...
Provide verbose output that clearly demonstrates the problem

[X] Run your yt-dlp command with -vU flag added (yt-dlp -vU <your command line>)
[X] If using API, add 'verbose': True to YoutubeDL params instead
[X] Copy the WHOLE output (starting with [debug] Command-line config) and insert it below

Complete Verbose Output
No response

yt-dlp --update-to nightly

or you installed with pip
python3 -m pip install -U pip setuptools wheel
python3 -m pip install --force-reinstall https://github.com/bashonly/yt-dlp/archive/master.tar.gz

yt-dlp --update-to nightly

or you installed with pip
python3 -m pip install -U pip setuptools wheel
python3 -m pip install --force-reinstall https://github.com/yt-dlp/yt-dlp/archive/master.tar.gz

i update to nightly already but not work

https://github.com/yt-dlp/yt-dlp/issues/7638
https://github.com/yt-dlp/yt-dlp/issues/7640
bruh


what is the purpose of the selection menu to install

When driver installation in Databox container ,what is the purpose of the selection menu to install

This lets you chose whether to use a local image (that you have built) or one that is pre-built by us.
It is part of the new development workflow that allows app and drivers to be developed without running in dev mode.
From now on dev mode is only needed if you want to work on databoxes core components.
There will be some new documentation coming soon.

If I want to modify the app (user components) in local,how can I modify ?

Sorry this prosess has recently changed:
Developing apps and drivers without the SDK
It is possible to develop Databox apps and driver without the SDK. Currently, Python, Golang and NodeJs all have support libraries. Building outside the SDK allows you to make smaller more efficient containers and use more third-party libraries.
Developing apps and drivers 'does not' require data box to be started in dev mode.
To get started all you need is a Dockerfile and a databox-manifest.json examples can be found in the libraries '/samples' directories. To make your app available to install locally on your databox you will need to upload the manifest to http://<IP_ADDRESS>:8181 and use docker build -t [your-app-name] .. Once the manifest is uploaded and the image has built then you should be up to install the app on your local Databox.
If you would like to modify one of the currently available actual drivers you can do so by doing the following:
./databox-install-component driver-os-monitor

This will download and build the code on your machine and upload the Databox manifest to your local app store. You can also use this with your repositories and forks using:
./databox-install-component [GITHUB_USERNAME]/[GITHUB_REPONAME]

Hello,
In previous version,
I could built with dev mode and then when I  installed app or driver,the source code are also downloaded into the local server,and I have modified the app or driver .
In latest version,
I have run in dev mode ,but driver-sensingkit's source code cannot downloaded into the local server.
So I cannot modify the app or driver.

run ./databox-install-component driver-sensingkit so install the src and build the image for local install. Once you have made the modifications you can run ./databox-install-component driver-sensingkit to rebuild and reinstall.


Add pcaReduce: hierarchical clustering of single cell transcriptional profiles

Thanks, @anilbey. It is great to get your contribution.


fix: include TEST_FILE_PATTERNS with empty entry

Hey @webpro, we've been running into an issue where knip would flag our test files as being unused: https://github.com/freeCodeCamp/freeCodeCamp/actions/runs/4466295333/jobs/7844299421#step:6:193
From what I can see, this happens because our workspace config is
    "client": {
// snipped
      "entry": [],
      "project": ["**/*.{js,ts,tsx}"],
// snipped
    },

It was a relatively small change to get things working again, so I figured a PR was in order.
Hope this helps.

Thanks for this pull request, @ojeytonwilliams. Using an empty entry: [] is really what I intend it to be: use no entry files. When omitted, it means to use the default config for entry files.
I dug a bit deeper and the issue seems to be something different. I think the issue can be fixed in the FCC config, so I'm going to close this one.

Sure, I understand. Thanks for taking a look and for updating fCC's config.


Create a new DevTestLab instance

When I tried to deploy https://github.com/Azure/azure-devtestlab/tree/master/samples/DevTestLabs/QuickStartTemplates/301-dtl-create-lab-with-remote-desktop-settings
I had the bellow error , any idea what's wrong?

There was an error loading the template from URI 'https://raw.githubusercontent.com/Azure/azure-devtestlab/master/Samples/301-dtl-create-lab-with-remote-desktop-settings2Fazuredeploy.json'. Ensure that the template is publicly accessible and does not have any comments.

Apologies for the inconvenience. We have recently restructured the repo. It seems that somehow a reference to the old path is being made. Can you tell me how you are using the ARM template?

@felipecruz91, thank you for your PR. I've updated all the documentation to reference the links correctly. So, some others that are currently broken will be fix with #468.


How to Set the Google Key

How to Set the Google Key ? I just did like this
$config['key'] = 'googlekey';
but it always keep tell me invalid key

The problem his that it does not include

key=askdjlaksjdklasjdkas

Sorry same issue solved
https://github.com/GeneaLabs/Phpgmaps/issues/6

Will update documentation. Thanks for reporting! :)

Configuration instructions added to readme. :)


If you are in the audience you can't get up to the voice chat ever

Describe the bug
When you raise your hand and the mods accept it you can't get up to the voice chat section
To Reproduce
Steps to reproduce the behavior:

Go to 'any room'
Click on 'the wave or raise hand'
Scroll down to 'voice chat members'
You are not there and can't get up in the voice chat section ever when the mods accept your raise

what you expected to happen
I expected to simply join the voice chat members
Screenshots
If applicable, add screenshots to help explain your problem.
Smartphone (please complete the following information):

Device: [ L.G V20 ]
OS: [ Android 8 ]
Version [ 1.0.9 ]

Additional context
Add any other context about the problem here.

Change dns to <IP_ADDRESS>
And it will work
Or use 1111 vpn

This is what i mean there is no mice icon and cant join the others above

Don't use your vpn service just use this one instead and it should work
https://play.google.com/store/apps/details?id=com.cloudflare.onedotonedotonedotone

It worked very well, thanks

How can i get 1.0.9 version?

https://github.com/bit-world/Houseclub/releases/tag/1.0.9


Package for Windows Store

It would be nice to just have this available on the Windows Store. It's more or less just a matter of making a manifest and emailing the right people.
See: github.com/microsoft/WSL-DistroLauncher

I started looking through this tonight. I'd be interested to hear ideas around how we could take advantage of having an executable in the default Windows %PATH% to do more interesting nix-on-wsl things, especially with regards to switching and rolling back generations.
There's a nice little API within there where you can run arbitrary commands within WSL through WslLaunchInteractive to call whatever you want.

I have implemented a custom distro launcher (#94). A test-signed build can be found here. To install it, run the included install.ps1 script in PowerShell. It may be necessary to enable Developer Mode in the Windows settings
If you discover any issues, please leave a comment on the Pull Request

The build artifact I linked has probably expired since then. You should alwasys be able to grab the appx artifact from the latest CI run here: https://github.com/nzbr/NixOS-WSL/actions?query=branch%3Adistro-launcher

This issue has been mentioned on NixOS Discourse. There might be relevant details there:
https://discourse.nixos.org/t/nix-installer-workgroup/21495/17

Has there been any progress?

Not to much on #94

Hi, is there any progress towards having a NixOS in the Microsoft Store to use in WSL2?

Hi, is there any progress towards having a NixOS in the Microsoft Store to use in WSL2?

The distrolauncher is already done, but I'm not sure how we can put it in the store and since @nzbr is the maintainer, maybe should be he doing it?

The latest CI runs already build the store package. It'd be great if some of you would test the thing to see if it works on other computers than mine. Just grab the launcher-msix artifact from here, unpack it and run the Install.ps1 inside. ([right-click] -> [run with powershell] should do the trick)

Hi @nzbr after running the Install.ps1 succeeded, the NixOS item showed in the start menu, but it quite imediately after click. Run nixos in command line shows:
C:\Users\xxxxx>nixos
Registering NixOS...
There was an error registering the distribution

Can you try again with nixos --distro-name <some other name>?

@nzbr I've got the same error:
C:\Users\xxxxx>nixos --distro-name asdf
Registering NixOS...
There was an error registering the distribution

@nzbr Sorry my bad. I resolved the problem, just running wsl --install -d debian, then the NixOS can be started with the start menu or command line.
I guess my current machine don't activate WSL2 before, so there are some components are missing.
[nixos@nixos:~]$ uname -a
Linux nixos <IP_ADDRESS>-microsoft-standard-WSL2 #1 SMP Thu Oct 5 21:02:42 UTC 2023 x86_64 GNU/Linux

[nixos@nixos:~]$ ps -a
    PID TTY          TIME CMD
      2 hvc0     00:00:00 init-systemd(Ni
      3 hvc0     00:00:00 init
    272 pts/1    00:00:00 bash
    295 pts/0    00:00:00 ps

There should probably be a check if WSL is actually installed. Gonna make an issue for it

I also tried it. Is there a reason that the shell initially starts up with the working directory of /mnt/c/WINDOWS/system32? Other distributions start up in the home directory in my experience.

@JojOatXGME the shell working directory is the same the launcher gets started with. The others probbably have some sort of check so that it gets set to the home directory in that case
#423

Upstream issue https://github.com/microsoft/WSL/issues/11206

@onny I think someone from the NixOS side needs to publish the launcher to the Microsoft Store. See the instructions here

Hi there! I'm the creator of Pengwin, Fedora Remix for WSL, and Pengwin Enterprise, all Linux distros published in the Store, I also managed Ubuntu's publication in the Store during my time at Canonical. I would be happy to help get NixOS published in the Store. I am not familiar with building NixOS images, but if I can partner with someone who is, I can then advise on how to automate the build pipeline and publish them regularly to the Store.

I think there's a little more work to be done before it can be listed. I'm trying to set up a Nix instance on W10 22H. I've started with the wsl --import nixos.tar.gz etc and have an instance correctly registered, but some general NixOS use things are sticking at the moment.
From what I can tell there's no hardware-configuration.nix included initially. The docs mention needing to add channels, as my nix-channel --list was initially empty. I added nixos-24.05 as nixos and that resolved some errors. I'm not familiar with the inner workings of why this might be unset in the current tarball, perhaps to avoid pinning an old version? If so, build should try to check the current appropriate channels (https://status.nixos.org/) so that's set for the user once the shell is opened.
The other item has been previously mentioned. (https://github.com/nix-community/NixOS-WSL/issues/63#issuecomment-1949479686) The working directory set when the image starts is -I'm assuming, haven't thoroughly tested- a passthrough to the Windows host system disks? Which is sorta cool and nice and useful in one way, but if we want to do what user in the commented mentioned and set a home directory, we will need some fileSystems definition as when I try to load a configuration.nix that will start to include system packages, rebuild fails needing it.
[nixos@nixos:/etc/nixos]$ sudo nixos-rebuild switch
building Nix...
building the system configuration...
error:
       … while calling the 'head' builtin

         at /nix/var/nix/profiles/per-user/root/channels/nixos/lib/attrsets.nix:922:11:

          921|         || pred here (elemAt values 1) (head values) then
          922|           head values
             |           ^
          923|         else

       … while evaluating the attribute 'value'

         at /nix/var/nix/profiles/per-user/root/channels/nixos/lib/modules.nix:807:9:

          806|     in warnDeprecation opt //
          807|       { value = builtins.addErrorContext "while evaluating the option `${showOption loc}':" value;
             |         ^
          808|         inherit (res.defsFinal') highestPrio;

       (stack trace truncated; use '--show-trace' to show the full trace)

       error:
       Failed assertions:
       - The ‘fileSystems’ option does not specify your root file system.
       - You must set the option ‘boot.loader.grub.devices’ or 'boot.loader.grub.mirroredBoots' to make the system bootable.

hardware-configuration.nix is usually left up to the user for their system right? Is there any sort of minimal virtual mount/directory creation step we can do as a part of set up that could give us a minimal fileSystems block? My goal is simply to get a package installed at the moment. I have relatively little experience with Nix, so any perspective would be great.
Finally, I enabled developer mode and loaded the testing cert to test a build artifact built last week, https://github.com/nix-community/NixOS-WSL/actions/runs/9638299838. Execution went smoothly and no errors hung around, but I did this after having installed a distro labeled NixOS via the tar.gz import. Might this have collided? I didn't see any changes to the distro list after this and I don't think any apps in the Windows Store have changed.

I think there's a little more work to be done before it can be listed. I'm trying to set up a Nix instance on W10 22H. I've started with the wsl --import nixos.tar.gz etc and have an instance correctly registered, but some general NixOS use things are sticking at the moment.
From what I can tell there's no hardware-configuration.nix included initially. The docs mention needing to add channels, as my nix-channel --list was initially empty. I added nixos-24.05 as nixos and that resolved some errors. I'm not familiar with the inner workings of why this might be unset in the current tarball, perhaps to avoid pinning an old version? If so, build should try to check the current appropriate channels (https://status.nixos.org/) so that's set for the user once the shell is opened.
The other item has been previously mentioned. (#63 (comment)) The working directory set when the image starts is -I'm assuming, haven't thoroughly tested- a passthrough to the Windows host system disks? Which is sorta cool and nice and useful in one way, but if we want to do what user in the comment mentioned and set a home directory, we will need some fileSystems definition as when I try to load a configuration.nix that will start to include system packages, rebuild fails needing it.
[nixos@nixos:/etc/nixos]$ sudo nixos-rebuild switch
building Nix...
building the system configuration...
error:
       … while calling the 'head' builtin

         at /nix/var/nix/profiles/per-user/root/channels/nixos/lib/attrsets.nix:922:11:

          921|         || pred here (elemAt values 1) (head values) then
          922|           head values
             |           ^
          923|         else

       … while evaluating the attribute 'value'

         at /nix/var/nix/profiles/per-user/root/channels/nixos/lib/modules.nix:807:9:

          806|     in warnDeprecation opt //
          807|       { value = builtins.addErrorContext "while evaluating the option `${showOption loc}':" value;
             |         ^
          808|         inherit (res.defsFinal') highestPrio;

       (stack trace truncated; use '--show-trace' to show the full trace)

       error:
       Failed assertions:
       - The ‘fileSystems’ option does not specify your root file system.
       - You must set the option ‘boot.loader.grub.devices’ or 'boot.loader.grub.mirroredBoots' to make the system bootable.

hardware-configuration.nix is usually left up to the user for their system right? Is there any sort of minimal virtual mount/directory creation step we can do as a part of set up that could give us a minimal fileSystems block? My goal is simply to get a package installed at the moment. I have relatively little experience with Nix, so any perspective would be great.
Finally, I enabled developer mode and loaded the testing cert to test a build artifact built last week, https://github.com/nix-community/NixOS-WSL/actions/runs/9638299838. Execution went smoothly and no errors hung around, but I did this after having installed a distro labeled NixOS via the tar.gz import. Might this have collided? I didn't see any changes to the distro list after this and I don't think any apps in the Windows Store have changed.

@TLMcNulty
My NixOS WSL Configuration is working fine without a hardware-configuration.nix
Configuration of a bootloader like grub doesn't really make sense for a wsl instance I would say

From what I can tell there's no hardware-configuration.nix included initially. The docs mention needing to add channels, as my nix-channel --list was initially empty. I added nixos-24.05 as nixos and that resolved some errors. I'm not familiar with the inner workings of why this might be unset in the current tarball, perhaps to avoid pinning an old version? If so, build should try to check the current appropriate channels (https://status.nixos.org/) so that's set for the user once the shell is opened.

Going on my limited understanding of hardware-configuration.nix, I think a minimal hardware-configuration.nix would suffice. There's no need to set boot settings, unless a user wants to modify them to load additional kernel modules, but that is rare. There should be no need to mount filesystems or define swap, that will be handled by WSL. Maybe consider: networking.useDHCP = lib.mkDefault true; and  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; for x86_64 vs. arm64 images.

The other item has been previously mentioned. (#63 (comment)) The working directory set when the image starts is -I'm assuming, haven't thoroughly tested- a passthrough to the Windows host system disks? Which is sorta cool and nice and useful in one way, but if we want to do what user in the comment mentioned and set a home directory, we will need some fileSystems definition as when I try to load a configuration.nix that will start to include system packages, rebuild fails needing it.

I defer to your knowledge on needing a filesystem definition for a user home directory. Usually the WSL-Distrolauncher package for new user setup handles adding a default user and by extension creating a home directory. That home directory is then set as the default in WSL and stored in the Windows Registry. Local drives are automatically mounted at /mnt/c by WSL. I do not recommend setting this as the default for the home user. There is a small performance penalty when performing work across the /mnt/c bridge which can snowball when working with large projects with lots of dependencies. I suggest leaving the created user's home within the WSL environment the default and, optionally, creating a symlink to /mnt/c in that home folder for ease of access.

   - The ‘fileSystems’ option does not specify your root file system.
   - You must set the option ‘boot.loader.grub.devices’ or 'boot.loader.grub.mirroredBoots' to make the system bootable.

This is interesting. This could be configured in the distro by adding logic to the WSL-Distrolauncher C++ distro initiation code where the default new user is created. GRUB is not needed though, it can be installed (several WSL distros still ship with GRUB in them), but it will be bypassed by the WSL's own boot/init flow.

hardware-configuration.nix is usually left up to the user for their system right? Is there any sort of minimal virtual mount/directory creation step we can do as a part of set up that could give us a minimal fileSystems block? My goal is simply to get a package installed at the moment. I have relatively little experience with Nix, so any perspective would be great.

See above. I also would need to hear from someone with more Nix experience to property advise on this.

Finally, I enabled developer mode and loaded the testing cert to test a build artifact built last week, https://github.com/nix-community/NixOS-WSL/actions/runs/9638299838. Execution went smoothly and no errors hung around, but I did this after having installed a distro labeled NixOS via the tar.gz import. Might this have collided? I didn't see any changes to the distro list after this and I don't think any apps in the Windows Store have changed.

It's possible it overwrote the existing NixOS. In the future, I would recommend removing the .tar.gz import, restarting WSL, and then trying this from scratch.
Hope some of this helps.

There should be no need to mount filesystems or define swap, that will be handled by WSL. ... Usually the WSL-Distrolauncher package for new user setup handles adding a default user and by extension creating a home directory.

Is there a way to define filesystem mounts and use creation only in the NixOS configuration, so that everything is in one place? Or do those events occur before the distribution is started?

Is there a way to define filesystem mounts and use creation only in the NixOS configuration, so that everything is in one place? Or do those events occur before the distribution is started?

WSL automatically mounts the root file system and /mnt/c (the latter by default unless disabled) when the distribution is launched.
This would all occur before hardware-configuration.nix is parsed.
The options here are limited and geared towards more traditional Linux distros. It's possible to disable automount of /mnt/c or enable the mounting of /etc/fstab but I don't think either one of those would be of assistance.

The .nix files are parsed when running nixos-rebuild and are not touched at all during boot. It is completely possible to have nixos systems that do not contain their own config (for example servers which can have their config applied remotely from another system). On WSL we don't install any bootloader; The NixOS-WSL module sets a dummy bootloader, so the fact that it complains for @TLMcNulty about a missing bootloader leads me to believe that the module is not loaded properly. A hardware-configuration.nix is not needed either. Even on bare-metal NixOS the file is just imported by the system's configuration.nix, which is the actual entry-point for evaluating the system configuration (that one is present on NixOS-WSL). hardware-configuration.nix is a separate module because it gets auto-generated by nixos-generate-config during the installation of a bare-metal NixOS system. Normally the user isn't supposed to touch it, because it would be overwritten were they to invoke nixos-generate-config again at a later point.

The Launcher uses NixOS as the distro name by default. So if a distro with that name is already present when the launcher is installed, it will just use that and not register it. (I think the C++ implementation had the same behavior, but I'm not sure)
There is no first-time setup wizard like on the other distros, because it would require editing the configuration.nix. The process for changing the user name is documented now though: https://nix-community.github.io/NixOS-WSL/how-to/change-username.html


systemTime Error: Too few results left

Getting the following console errors running commit 2d73397:
I20180516-10:43:43.420(2)?     at Promise.then (server/timesync.ts:116:37)
I20180516-10:43:43.420(2)?     at /Users/jonashummelstrand/.meteor/packages/promise/.<IP_ADDRESS>g5mso.orhhi++os+web.browser+web.cordova/npm/node_modules/meteor-promise/fiber_pool.js:43:40
I20180516-10:44:03.424(2)? Updating systemTime...```

During startup, the application connects to ntp-servers and tries to sync the application time to them. This error message comes when it wasn't able to enough good measurements to to be able to sync the time accurately ("accurately" = within 1/60s). This is dependent on current network conditions and latencies.
The exact number of required measurements and number of retries could/should probably be tweaked so that false positives are avoided while still guaranteeing operability.

We should also discuss whether we should throw an error or simply display a warning.

Closing this, I think this was resolved a long time ago


Add Starcraft Launcher.app Latest

If there’s a checkbox you can’t complete for any reason, that's okay, just explain in detail why you weren’t able to do so.
After making all changes to the cask:

[x] brew cask audit --download {{cask_file}} is error-free.
[x] brew cask style --fix {{cask_file}} reports no offenses.
[x] The commit message includes the cask’s name and version.

Additionally, if adding a new cask:

[x] Named the cask according to the token reference.
[x] brew cask install {{cask_file}} worked successfully.
[x] brew cask uninstall {{cask_file}} worked successfully.
[x] Checked there are no open pull requests for the same cask.
[x] Checked the cask was not already refused in closed issues.
[x] Checked the cask is submitted to the correct repo.

ok nevermind, I was opening an identical pull request (good job with the checklist 😅  )


CMS-692: Improve the current JS according to the standards

removed js linting from allow failures section of Travis
updated gulpfile to ignore minified files
removed unused js files
minified libraries (to ignore them while linting)
improved the styling of js files

This PR doesn't change any js functions, just styling.

lgtm

LGTM


Remove empty group in optionals

This empty group caused Recyclarr to fail to update this profile

What did I mess up there?
Need to check if I made a mistake and didn't add the new one but edited a existing one

I just checked
Seems I screwed up and edited a existing one and didn't add the new one.
I'm not able to fix this on my phone at the moment.
Need the recover the one I edited first and then re-add the new one.

I just checked
Seems I screwed up and edited a existing one and didn't add the new one.
I'm not able to fix this on my phone at the moment.
Need the recover the one I edited first and then re-add the new one.

If that is the case, should I close this PR? I see you have the fixes already coming in #692

Need the recover the one I edited first and then re-add the new one.

no change was made / nothing old was removed.
this will get superseded by #692 since it has other needed fixes


Unhandled Promise Rejection: TypeError: null is not an object (evaluating 'Object(a.c)()._addCard')

showing on each view.
using HA 0.111.4 and card-tools version 10
thought it might have been the card picker issue mentioned by Bram here https://github.com/home-assistant/frontend/issues/6262#issuecomment-651051802 but he pointed me back here

fwiw, I dont see this any longer, on 0.112.x
so closing.

well, of course I shouldn't have posted that.... real sorry:

HA 112.2

I'm also seeing this error a lot as well as this one:
TypeError: r.setConfig is not a function. (In 'r.setConfig({type:"error",error:e,origConfig:t})', 'r.setConfig' is undefined)
u — card-tools.js:1:6331
d — card-tools.js:1:6779
_createElement — secondaryinfo-entity-row.js:29
setConfig — secondaryinfo-entity-row.js:15
s — chunk.5cd6ebaa3e3e7e5d9059.js:12717
l — chunk.5cd6ebaa3e3e7e5d9059.js:12717
value — chunk.5cd6ebaa3e3e7e5d9059.js:9058
map
value — chunk.5cd6ebaa3e3e7e5d9059.js:8982
update — app.9108bd0a.js:1
performUpdate — app.9108bd0a.js:1
(anonymous function) — app.9108bd0a.js:1
asyncFunctionResume
[native code]
promiseReactionJobWithoutPromise
promiseReactionJob```

And I'm getting what I think is also related:
Uncaught (in promise) TypeError: Cannot read property '_addCard' of null

I used Chrome's built-in prettifier, and this is the cause:
Object(a.c)()._addCard()

Looks like if you get the straight code from master it was fixed, or at least the code that caused that error was fixed...
And @niemyjski it looks like this might actually be because of secondaryinfo-entity-row instead...

closing, this has been goon for some time now.


Use SQLitePCL.raw instead of SQLitePCL.raw_basic

Currently the two packages have identical implementation, however the raw_basic will be discontinued and already lags behind in update releases.

Do you have a link to where they're talking about deprecating raw_basic?

it says that right on the main page: https://github.com/ericsink/SQLitePCL.raw
There's another NuGet package called SQLitePCL.raw_basic. What is it??
That's the old package ID. With the 0.8.0 release, I transitioned to just 'SQLitePCL.raw' as the package ID (without the _basic suffix). Eventually I may stop publishing updates to the old ID. For now, the package gets published under both IDs and they are identical.

Okay, so we'd need to look at this when transitioning from 0.7.0 to 0.8.0.
Thanks for the heads up.

:+1:

I happened to see this issue linked on #291 , so at the risk of being redundant:
The task at hand now is to update to SQLitePCLRaw 1.0, which has changed package IDs yet again, but which will be following semver, so it should be the last time.  :-)


GENERATE_SOURCEMAP=false doesn't seem to be working (at least for me)

Describe the bug
I'm using GENERATE_SOURCEMAP=false in my package.json file like so:
"build": "GENERATE_SOURCEMAP=false react-scripts build",
and from some advice on my SO post I've added a static.json file in the root folder of my project with the following text:
{
  "root": "build/"
}

Did you try recovering your dependencies?

My yarn version is 1.17.3 but this issue is occuring during the deployment on Heroku so the module tree is recreated every time.
Which terms did you search for in User Guide?

GENERATE_SOURCEMAP
Environment

Environment Info:
System:
OS: Linux 4.4 Ubuntu 14.04.6 LTS, Trusty Tahr
CPU: (8) x64 Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz
Binaries:
Node: 10.16.3 - /usr/local/bin/node
Yarn: 1.17.3 - ~/.yarn/bin/yarn
npm: 6.11.3 - /usr/local/bin/npm
Browsers:
Chrome: 77.0.3865.90
Firefox: 66.0.3
npmPackages:
react: ^16.10.1 => 16.10.2
react-dom: ^16.10.1 => 16.10.2
react-scripts: 3.2.0 => 3.2.0
npmGlobalPackages:
create-react-app: 3.1.1
Steps to reproduce

(Write your steps here:)

You can clone the github repo of the project I made (a simple minesweeper app for learning react) https://github.com/aarona/react-minesweeper (OR you can just go to my application and skip step number 2.
create a new heroku app and deploy the project.
Run "Ctrl + SHIFT + I" while your looking at the application in Chrome.
Go to the "Sources" tab in the developer tools.

Expected behavior

I expected to just see my minimized/uglified code
Actual behavior

I see my code fully readable and unobfuscated under an app folder.
Reproducible demo

A link to the deployed project: https://still-headland-77198.herokuapp.com/
This is on a free heroku project so Node may have to spin up before it can serve the code if its asleep because I'm not paying for any dynos.

Your heroku build just isn't set up right. It looks like it's running the development server instead of serving from static.

Your heroku build just isn't set up right. It looks like it's running the development server instead of serving from build*.

I have the following build packs:
https://buildpack-registry.s3.amazonaws.com/buildpacks/mars/create-react-app.tgz
heroku/nodejs
If you got to my github repo you'll see that I have GENERATE_SOURCEMAP=false set in the build script. I also have a static.json file as well. What else do I need to configure?

I'm not very familiar with heroku so I couldn't tell you, but the deployed project you linked is definitely running from react-scripts start. My browser's react-dev-tools says it's using the development build, and I see webpack's hot reloading websocket.

Ok, I'll look into this further and find out whats going on. Thanks for the input. Its much appreciated.

Good luck!

@heyimalex you pointed me in the right direction. I found the following blog that fixed the issue!
https://medium.com/jeremy-gottfrieds-tech-blog/tutorial-how-to-deploy-a-production-react-app-to-heroku-c4831dfcfa08


No Prediction on Custom Image

The model is not producing any output on custom images.
However, if I use the images provided in the repo, it works.
Any help would be appreciated.

https://github.com/IDEA-Research/OpenSeeD/issues/12

@sindhuatquadrant Sometimes, when your class name is too different from the training vocabulary, the prediction may not very good.


Upgrade bs-platform and remove Js.Boolean implementation

Upgrade bs-platform and as consequence remove Js.Boolean implementation need as it was deprecated

After you approved I can update the bs-jsverify dep

Thanks for this! I'll be pointing to your fork until @Risto-Stevcev can review.

@grsabreu Should be good to update the dep


feat: new environment variable (storage path)

Follow up of https://github.com/verdaccio/verdaccio/pull/2199 in v5

Run yarn format, everything else is pretty much ok.

I'm working online using github web-ui, I did not even check out the repo...
I hoped the CI will tell me what's wrong so I can fix it - perhaps you can help me?

I'm working online using github web-ui, I did not even check out the repo... I hoped the CI will tell me what's wrong so I can fix it - perhaps you can help me?

Done, it was hard to see on this UI

nonono - thank you.
So, the merger to 5.x  should result with a bumped version and a verdaccio/verdaccio:5.5.3 docker, or there's one more step?
P.S
you're fun to work with. that gave me appetite.
maybe I'll check out that repo one day and overcome my TS fude ...but not today 😛 🤷

I need to check what's happening here https://github.com/verdaccio/verdaccio/pull/2984 and release only takes 1 min on my side.

It's ok, I saw the situation, we'll wait patiently.
Meanwhile - we found verdaccio:5.x-next  that was published automatically, so no urgency
keep up the good work!

Released https://github.com/verdaccio/verdaccio/releases/tag/v5.6.0

ok, message received :) let me some days to digest, these days I'm busy here https://nodecongress.com/ as speaker 😊

well!! good luck!
can you just say if you have something up the sleve for an env for the log path?

If I'm smart enough to design the config-tree without any arrays (which you have!)

In v6 we don't have arrays anymore, I've removed them because does not make sense nowadays. Anyway your idea seems something I've heard https://github.com/verdaccio/verdaccio/issues/1681 before, I also into the idea that env variables helps a lot in eg: Docker etc
I had others ideas that might conflict with this one, like use a object schema to validate the config file (like yarn +v2 is doing with .yarnc.yaml file but nothing definitive yet, at leas for next major.
Let me digest more this when my brain get more relaxed. Feel free to remind me over time, I usually get distractec with so many open topics, or maybe better open a discussion so I can tag it correctly.

Just my 2 cents... everything being discussed here related to configuration seems like a perfect use case for using the config package. You can specify config by file, environmental variable, command line, or all of the above and it handles the merging.

@edclement  Thanks for the comment 😄
I did mention the config pacakge above.
however, AFAIK it's doing only half of the story as it does not handle CLI-arguments. It's also much more then necessary with it's local-cascading model of the hostname, instance name, env (what they call deployment).
So whenever I use it I combine it with minimist which is the actual parser behind yargs (like config, yargs is doing much more with custom-commands and message formatting).
But that's just me and my fanatic approach towards slim deliveries... both yargs and config are great packages I was pushing for a long while.


Share webGL contexts between layers

Currently, having more than 15 webgl layers will exhaust the available webgl contexts.  If webgl layers do not have non webgl layers between them by z-index, a single context can be used instead.  This should be done automatically.  When there are multiple layers, the webgl renderer will need to apply opacity for each layer, rather than using the opacity on the div.

Regarding shared webgl contexts, layering, and opacity.
When two layers share a webgl context, I intend that they will also share a depth buffer.  This will be a difference between separate contexts and shared contexts (but, when we support full 3D, I view this as a positive feature).
On tile layers, we render different levels of tiles at slightly different z values, all "just behind" their actual z value.  When we share contexts, multiple tile layers will composite as expected (with layers with higher layer z-indices just above those with lower).  If the shared context has both tile and feature layers, then features with the same z value as tiles will always appear above the tiles, even if the tile layer's z-index is above the feature layer's z-index.  To do otherwise, we could either avoid sharing contexts between tile and feature layers OR there will need to be slight z offsets for all layers (not just tile layers) to force them to composite properly.  I think that, for now, we just accept that when tile and feature layers share context, tiles are behind features with the same z value regardless of layer z-index.
Sharing context between layers with different opacities is tricky.  The results of changing feature opacity instead of layer opacity is not the same (for instance, a layer with 100% opacity and overlapping lines each with 50% opacity will form an area with 75% opacity, whereas a layer with 50% opacity and overlapping lines with 100% opacity will have everything at 50% opacity).  Either we will have to render each layer into a frame buffer object or not share contexts between layers with different opacities.
For automatic merging of shared webgl contexts, I think the simplest approach would be to only share contexts between adjacent webgl layers that have the same opacity (and layers with 0 opacity or 0 visibility could be shared, too, as they will skip rendering).
Feedback welcome, as I am about to add code for automatic sharing of webgl context between adjacent webgl layers.

I've got a local branch where this all works, but it requires a minor update to the vgl package: https://github.com/OpenGeoscience/vgl/pull/106.  Once that gets merged and a new vgl release made, I'll make a PR to finish this.

Resolved in #975.


Clarification on how to drive trng data in external and internal trng mode

Hi,
I'm trying to understand the trng flow and mechanism by which the SoC should handle driving the Caliptra Trng data in external as well as internal mode.
In External TRNG mode:
The document mentions the following

Steps that SoC is executing:

When the etrng_req goes high I see the reflection on 0th bit of 0x300300ac register as well (data_req).
At this moment SoC starts driving the 384bits of trng data to register 0x30030078-0x300300a7.
Next SoC sets the data_wr_done which is the 1st bit of 0x300300ac register. Now, this is a 4byte register so SoC drives the value as 0x2. So, SoC is setting the data_wr_done bit high and data_req low.
From this point read to the register 0x300300ac returns the value as 0x2 which means the data_wr_done is high and data_req is low but the etrng_req output signal still remains high.
Now, the SoC keeps waiting for the ready_for_fw signal to go high. But I don't see that happening instead I see the fatal error going high.

Questions:

Is there anything that I'm doing wrong or missing while driving the trng data?
Is there any timing requirement, latest within some x amount of time the SoC should start driving the trng data once the etrng goes high in external trng mode?
Does SoC need to drive the registers 0x30030070 (CPTRA_TRNG_VALID_PAUSER), 0x30030074 (CPTRA_TRNG_PAUSER_LOCK) and 0x300300a8 (CPTRA_TRNG_CTRL) from SoC as well inn the process?
After driving the register 0x300300ac as 0x2 from SoC is it not true that etrng_req output signal will go low?
Why is the data_req not reflecting the output port etrng_req after driving the register 0x300300ac as 0x2?
Is the trng driving mechanism same for fake rom and the actual rom flow?

In Internal TRNG mode:
Steps that SoC is executing:

When the etrng_req goes high from SoC the HW starts driving the trng_data and trng_valid port on every clock.
After sometime the Caliptra asserts the ready_for_fw signal but the trng_req still stays asserted and the SoC continues driving the trng_data and trng_valid port.

Questions:

Once the etrng_req goes high, total how many bits of data is expected from SoC to be driven via the itrng_data[4:0] and itrng_valid?
How can SoC be sure of that Caliptra has received enough amount of entropy data and that it can stop driving trng data port now? Does the trng_req go low once the Caliptra has received enough entropy?
If Caliptra design samples trng_data and trng_valid on every clock of the frequency that it is running at then what's the relation of 50Khz? Is it from the time when the Caliptra sets etrng_req output high the SoC has 20us to start driving the trng data?
Once SoC satisfies the Caliptra's trng requirement for entropy source can Caliptra set the trng_req signal high again requesting for more entropy source at some later point?
Is it true that if SoC is not able to satisfy and qualify the trng health check the ready_for_fw won't be asserted from Caliptra?
Is the trng driving mechanism same for fake rom and the actual rom flow?

I will really appreciate if those questions can be addressed asap. Thanks in advance!

seems like Luke is already communicating over email as he validated this flow.

Through some offline work we found that the ETRNG flow was correct, but the SOC did not service the second ETRNG data request.
ETRNG questions:

Is there anything that I'm doing wrong or missing while driving the trng data?
A: The issue here was that after the first etrng data request was serviced, Caliptra FW requested more data that was not provided.
Is there any timing requirement, latest within some x amount of time the SoC should start driving the trng data once the etrng goes high in external trng mode?
A: Each time that Caliptra FW requests ETRNG data it polls for data_wr_done 250000 times. If the SOC has not written that bit the FW will issue a DRIVER_TRNG_EXT_TIMEOUT error.
Does SoC need to drive the registers 0x30030070 (CPTRA_TRNG_VALID_PAUSER), 0x30030074 (CPTRA_TRNG_PAUSER_LOCK) and 0x300300a8 (CPTRA_TRNG_CTRL) from SoC as well inn the process?
A: It does not need to for the purposes of ETRNG enabling, however SOC should consider setting it to ensure only the correct entity can provide TRNG data.
CPTRA_TRNG_CTRL is RO for SOC.
After driving the register 0x300300ac as 0x2 from SoC is it not true that etrng_req output signal will go low?
A: When FW sees that SOC wrote data_wr_done, the FW will clear the data_req bit which also clears data_wr_done to get cleared by hw. The data_req bit is RO for SOC so only the data_wr_done gets updated on this SOC write.
Why is the data_req not reflecting the output port etrng_req after driving the register 0x300300ac as 0x2?
A: Offline we found that FW did see data_wr_done get set, and issued a new request that left etrng_req high.
Is the trng driving mechanism same for fake rom and the actual rom flow?
A: Yes, there is no difference.

ITRNG questions:

Once the etrng_req goes high, total how many bits of data is expected from SoC to be driven via the itrng_data[4:0] and itrng_valid?
A: SOC is expected to drive entropy data 4 bits at a time as long as etrng_req is high (which is forever). I am not certain what would happen if the SOC stops providing data after Caliptra boot finishes and is idle.
How can SoC be sure of that Caliptra has received enough amount of entropy data and that it can stop driving trng data port now? Does the trng_req go low once the Caliptra has received enough entropy?
A: Currently etrng_req will never go low again. #538 questions this behavior.
If Caliptra design samples trng_data and trng_valid on every clock of the frequency that it is running at then what's the relation of 50Khz? Is it from the time when the Caliptra sets etrng_req output high the SoC has 20us to start driving the trng data?
A: Caliptra will sample trng_data when trng_valid is high. trng_valid is expected to be asserted when trng_data is valid. 50MHz is an outdated guideline, and a faster trng_data rate of ~1MHz dramatically improves boot time. On the other end a slower itrng entropy data rate will slow down boot performance but I don't think will have much effect otherwise.
Once SoC satisfies the Caliptra's trng requirement for entropy source can Caliptra set the trng_req signal high again requesting for more entropy source at some later point?
A: Currently trng_req stays high forever after being set.
Is it true that if SoC is not able to satisfy and qualify the trng health check the ready_for_fw won't be asserted from Caliptra?
If entropy data is not provided to the ITRNG, then health checks will not complete and hang the ROM. I have not attempted to see what happens if bad data is provided instead. The health check would fail and it may result in a different error instead of a hang.
Is the trng driving mechanism same for fake rom and the actual rom flow?
Yes, there is no difference.

Hi Luke,
Thanks for the info after driviing the trng data multiple times I do see the ready_for_fw going high now. Appreciate the support.
There were couple of questoins that I had out of curiosity:

What's the reason that Caliptra requests for multiple eTRNG request and what is the maximum etrng request that SoC might see Caliptra requesting for, in external TRNG mode? Would like to know the answer to estimate the worst case boot time scenario of Caliptra.
What's the purpose of sending continuous noise source to Caliptra once its fully up in internal TRNG mode or atleast what's the expected behavior if the SoC stops driving the trng data once Caliptra is totally up?

I think it might be helpful for the user to know the expected output of this 2 scenario inorder to integrate Caliptra effecient into there system.
Thanks,
Ayanava

Caliptra makes multiple eTRNG requests because it has multiple operations that depend on random data.
CFI takes 3 calls, ECDSA and HMAC KATs, and ECDSA signing operations all use random data. To get to Caliptra RT I think there are around 32 calls for random data. Assuming that the number of times Caliptra FW will ask for eTRNG data is fixed is a mistake.
Experimentally it seems like giving iTRNG entropy data very slowly (as an easy way to emulate the noise source stopping) will delay operations that rely on random data. I did not encounter any cases where the CSRNG threw an error.
If discontinuing providing iTRNG is desired, you should probably make a caliptra-sw feature request for FW to disable it when idle.
We use the entropy source developed for OpenTitan, documentation here: https://opentitan.org/book/hw/ip/entropy_src/doc/theory_of_operation.html
"The ENTROPY_SRC block will then start to collect entropy bits indefinitely until disabled."


Optional "clear" button in the TextField component

In the Autocomplete component, the hideClearButton property lets us enable users to clear the contents of the field (i.e. selected value), which often comes in handy.
When working on other input types such as date, the current recommendation is to use <TextField type="date"> for cross-browser consistency and accessibility. However, this component doesn't seem to have any options for clearing the contents, and we would need to make custom functions whenever needed.
Having the hideClearButton property for all(?) input components would make things more consistent for developers and users.

Hello! The hideClearButton prop is actually to optionally remove the clear button in Autocomplete where the button otherwise serves a specific purpose (clearing a potentially large amount of selections quickly). There are currently no plans to add this functionality into TextField, but it is something we can take into consideration. I know we have this in Search but  that does mean adding more state handling into the component + some hacky workaround
As for datepicker, our next upcoming release introduces a brand new Datepicker and DateRangePicker (which does have a clear button) See a preview of it here and here!

Interestingly enough, the primary reason for this feature request was a case for selecting a date range and a simple to clear it - so the upcoming DateRangePicker seems like a perfect match 🥳
Thanks for the good news!
PS. I realize that the mentioned prop removes the clear button, but I confused myself somewhere in my choice of words there 😅

We will not implement "clear button" in TextField component at this time as we don't see the need in a regular text input field where it is easy to remove the text.


Fix link for dataset in classification notebook

Before submitting (must do checklist)

[x] Did you read the contribution guide?
[ ] Did you update the docs? We use Numpy format for all the methods and classes.
[ ] Did you write any new necessary tests?
[x] Did you update the CHANGELOG?

Proposed Changes
Fix link for dataset in classification notebook
Closing issues

Codecov Report

Merging #1351 (b0e6a98) into master (db6b358) will decrease coverage by 82.54%.
The diff coverage is n/a.

:exclamation: Your organization is not using the GitHub App Integration. As a result you may experience degraded service beginning May 15th. Please install the Github App Integration for your organization. Read more.
@@            Coverage Diff             @@
##           master   #1351       +/-   ##
==========================================
- Coverage   89.13%   6.60%   -82.54%
==========================================
  Files         204     204
  Lines       12687   12681        -6
==========================================
- Hits        11309     837    -10472
- Misses       1378   11844    +10466

see 187 files with indirect coverage changes
:mega: We’re building smart automated test selection to slash your CI/CD build times. Learn more


test_integration*.py tests hang with Python w/o IPv6

server.py creates an AF_INET6 socket on _start_server which hangs when run on Python that doesn't support, was built without, or runs on a system without IPv6 support.
This results in test_integration*.py tests hanging. Installing and using pytest-timeout produced the following stderr traceback, and stack:

Edit: couldn't upload the full (txt) log without repository write permissions, so here's a screenshot :)
Rebuilding Python w/ IPv6 support results in a clear test run:
 250 passed, 1 skipped, 1 pytest-warnings in 17.20 seconds

Ok, pushed a fix for this to development.


should hue save queries in notebook

queries in hive editor is saved to DB，
but queries run in notebook is not saved automatically, except touching save button.
should hue save queries run in notebook?
probably in type: query-hive, like attached below.
query saved in notebook

query saved in hive-editor

The notebook does not have any history by design


Merging changes from internal.

Can one of the admins verify this patch?

test this please

@tensorflow-jenkins test this please


Rendering images using Adaptive Cards in prompts.choice() method

Hey,
I am working on webchat to build a chatbot and Webchat uses adaptive cards to render cards.
builder.Prompts.choice(session, "Which color?", "red|green|blue", { listStyle: builder.ListStyle.button });
This piece of code gives me a list of buttons to select with classname ac-pushButton. Is there a way in which we can render images instead of buttons.
This might not be an issue but can anyone please take your time and answer this? Thanks in advance.

Hi @Yash-7, I'm really sorry about the delay getting back to you. The primary way to change how the card is rendered would be to fork WebChat and modify the source. I'm not actually sure if there's another way.
If you post an issue on their GitHub they might be able to give a better answer: https://github.com/Microsoft/BotFramework-WebChat

Closing as inactive


Remove version: Ryujinx.Ryujinx.Ava version 1.1.1115

All InstallerUrls returned 404 Not Found

https://github.com/Ryujinx/release-channel-master/releases/download/1.1.1115/test-ava-ryujinx-1.1.1115-win_x64.zip

Microsoft Reviewers: Open in CodeFlow

URL: https://github.com/Ryujinx/release-channel-master/releases/download/1.1.1115/test-ava-ryujinx-1.1.1115-win_x64.zip
Response status code does not indicate success: 404 (Not Found).
(Automated message - build 896)


Porn ???

Which note exactly are you talking about?

Seems to happen when you put 3 or more url links in a note

Oh... I think you are adding this porn on purpose.
I was just looking at your TOS https://notehub.org/TOS.md and I notice...
Part 2. Use License, Section 3. create ‘hop’ notes containing a collection of links to external resources.
Which is exactly what I am trying to do. I can honestly say I never looked at your terms of service before.
Cheers!

This is not "port", those are context (!) depending ads :)
I have chosen to inject ads to notes violating the service to at least pay for the hosting, instead of just deleting the notes.

LOL... That's hysterical that your advertising vendor sees a list of links to podcasts on the history of Christianity, and evening Buddhism Dharma talks as a good place to serve up advertisements for child porn. Not sure if it says something about the ad agency, or Christianity & Buddhism.

I need to check this. Please share the note or the content, so that I can reproduce it.

This is the content I had in the note...
Active...
🔊 The Bible Geek Podcast 18-004 Today he's interviewing Bart Ehrman about his Book The Triumph of Christianity coming out on February 13
🎙 Dharma talk - Preparing to meditate, by Thanissaro Bhikkhu (Geoffrey DeGraff)
Links to "Older Stuff"

Buddhism
Thanissaro Bhikkhu (Geoffrey DeGraff) Dharma Talks from January

🎙 Short (Morning) Dhamma Talks
🎙 Evening Dhamma Talks

Noble Strategy, Essays on the Buddhist Path, by Thanissaro Bhikkhu - The essays in this book present views on basic elements in the Buddhist path—the attitudes, concepts, and practices that lead to total freedom for the mind.
The Wings to Awakening: An Anthology from the Pāli Canon, by Ṭhānissaro Bhikkhu - An anthology of the Buddha’s teachings.
Christianity
📺 Lecture Series : Introduction To The New Testament History And Literature, Professor Dale Martin of Yale University
🎙 Lecture Series : The History of the Bible: The Making of the New Testament Canon, by Bart Ehrman of Chapel Hill University
Tech
Webmention is a web standard for mentions and conversations across the web, a powerful building block that is used for a growing federated network of comments, likes, reposts, and other rich interactions across the decentralized social web.
I'm also currently a big believer in Feedly (an RSS reader for consuming content), and Twitter for talking with people.

Older Stuff...
🎙 Episode 16 - Decline, Fall, or Transformation? Tides of History
🎙 Today's Morning dharma talk - Your primary duties, by Thanissaro Bhikkhu (Geoffrey DeGraff)
🎙 Today's Evening dharma talk - Skills for living & dying, by Thanissaro Bhikkhu (Geoffrey DeGraff)
🎙 Episode 159 – Rest in Peace - The History of Byzantium Podcast
📺 Lecture 25 Ecclesiastical Institutions: Unity, Martyrs, and Bishops
🎙 History in the making - liquidation
🎙 The Waking Up Podcast #116 — AI: Racing Toward the Brink (Eliezer Yudkowsky)
🎙 237 Dissolution and Destruction – The History of England Podcast
🎙 Ancient Greece Declassified Podcast: 16 Dialogue and Dialectic w/ MM McCabe (Philosophy, Plato, Socrates)
🎙 2 John – Sunday School Dropouts Podcast
🎙 238 The Fight Back – The History of England Podcast
🎙 History in the Bible Podcast : 2.15 The Rise and Ruin of the Maccabeans


sshd: Assert that users keys are all one-line

Motivation for this change
Consider this function for constructing a value for users.users.${u}.openssh.authorizedKeys:
let
  restricted_ssh_keys = command: keys:
    let
      prefix = ''
        command="${command}",no-pty,no-agent-forwarding,no-port-forwarding,no-X11-forwarding
      '';
    in map (key: "${prefix} ${key}") keys;
in

The prefix string actually ends with a newline character, which has been unintentionally added while modifying the SSH options.
This results in a key being:
''
  command="...",options...
  MY_KEY
''

which is not interpreted as a key entry but two, because of the way the key file is constructed. Effectively ignoring all the restrictive options.
Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

[ ] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
22.05 Release Notes (or backporting 21.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module
[ ] (Release notes changes) Ran nixos/doc/manual/md-to-db.sh to update generated release notes

[x] Fits CONTRIBUTING.md.

As @pennae suggested, I re-implemented this using an option type instead of an assert: https://github.com/NixOS/nixpkgs/pull/155427
We could merge both for extra safety but I think that's not necessary.


Scrape all tweets from a specific account

Can you make it so that the word is not an actual requirement if you want to scrape tweets coming from a specific account? Would be awesome for that to not be mandatory rather an extra feature.

Actually that's a good point. Thank you I will do it right now.

@OmniSec001  Done.

@OmniSec001 Done.

Still don't get how to scrape all the information from one account. Could you two please show us an example on the Scrape function?


Fix typo(s) in installation of kfp package via conda

Most recent version of miniconda installs pip, not pip3 with Python 3.7.  When using GCP Cloud Shell, pip3 is in /usr/bin and will cause kfp package to end up in the users site packages directory and not in the mlpipelines env.

This change is

Thanks!
/ok-to-test
/lgtm
/approve

/ok-to-test


setTimeZone doesn't seem to be working correctly

This is the built on the latest Arduino IDE. I've got the following which doesn't seem to be working correctly.
    DateTime.setServer("pool.ntp.org");

    DateTime.begin();

    if (!DateTime.isTimeValid()) {
        Serial.println("Failed to get time from server.");
    }
    else {
        DateTime.setTimeZone(currentTimeZone());
        Serial.print("Setting timezone to ");
        Serial.println(currentTimeZone());
    }

I print in loop() with the following
void loop()
{
    Serial.println(DateTime.toString().c_str());
    Serial.println(DateTime.toUTCString());
    delay(5000);
}

Where currentTimeZone is a function I have to that returns an integer timezone. Time must be set first, it needs to know the month and year. When I call DateTime.setTimeZone(), GMT is changed and in the wrong direction.
IP address: <IP_ADDRESS>
Setting timezone to -5
2020-04-15 15:19:05
Wed, 15 Apr 2020 20:19:05 GMT

Local time when this printed was 10:15:05 AM. If I don't set the timezone, both are the same
IP address: <IP_ADDRESS>
Setting timezone to -5
2020-04-15 15:24:18
Wed, 15 Apr 2020 15:24:18 GMT

Local time when this was printed was 10:24:18
Finally, if I pass it a positive timezone (5 instead of -5)
IP address: <IP_ADDRESS>
Setting timezone to 5
2020-04-15 15:25:55
Wed, 15 Apr 2020 10:25:55 GMT

Local time when this was printed was 10:25:55
I'm using version 0.2.0 in the Arduino IDE.
*** Edit
I added a true/false check on the setTimeZone() function, and it returns true.

Same thing here.
I have set the time zone to -1 (Paris) I get the asian time, 6 hours ahead...
The settings of the time zone seem to be completely ignored.
void setupDateTime()  {   // DateTime.begin(15 * 1000);   DateTime.setServer("nl.pool.ntp.org");   DateTime.setTimeZone(-1);   DateTime.begin();   if (!DateTime.isTimeValid()) {     Serial.println("Failed to get time from server.");   } }

Mine was failing on an ESP32 though, so it's not processor specific.

Same issue on an ESP8266 on a Wemos D1 Mini Pro. As a workaround, I just inverted the timezone. For +5, I set it to -5

me too
DateTime.setServer(ntpServer);
DateTime.begin(15 * 1000);
DateTime.setTimeZone(8);//not work
DateTime.begin();
String str = " >>NTP对时成功," + DateTime.toString();
draw_chinese_font(0, 80, str.c_str(), ILI9341_RED);
if (!DateTime.isTimeValid()) {
Serial.println("Failed to get time from server.");
}
time_t t = DateTime.now() + 8 * 3600;
DateTime.setTime(t);
setTime(t);

https://github.com/esp8266/Arduino/issues/7319

ESP8266 does not support timezone, it just add timeZone * 3600 seconds to original timestamp. maybe https://github.com/esp8266/Arduino/issues/7319 fixed this.

fixed


Update device.cc

Avoid node js fatal exception
Changes
Send exception back to node
Fixes
fix "Abandon (core dumped)" in certain conditions, including unexpected disappearances of devices from the usb bus. The errors are traced back to node, which makes these errors catchable
Checklist

[x] Tested the change acts as expected
[x] Checked the change doesn't remove or change existing functionality
[ ] Considered how the feature impacts the product and tested around it (not just the happy paths)
[ ] Where possible, executed the hardware tests on multiple operating systems

The error messages returned have little to do with my pull request.

Hi, could I have an idea of the integration time of these changes? I just tested this morning on a sample of machines and all my errors now go through process.on('uncaugthException'), it is an open door to correct processing of these exceptions that were previously invisible. I ask the question of the time because I have about 800 machines to update

Merges are blocked on this being fixed:
https://github.com/prebuild/prebuildify-cross/issues/20
We need prebuilds to pass before merging and releasing.

@cleoo can you merge your PRs into one, please and add a descriptive title.


Hope to support third-party API access and access methods, such as news, stocks, and Wikipedia

ERROR: for chatgpt_telegram_bot  'ContainerConfig'
Traceback (most recent call last):
File "docker-compose", line 3, in
File "compose/cli/main.py", line 81, in main
File "compose/cli/main.py", line 203, in perform_command
File "compose/metrics/decorator.py", line 18, in wrapper
File "compose/cli/main.py", line 1186, in up
File "compose/cli/main.py", line 1182, in up
File "compose/project.py", line 702, in up
File "compose/parallel.py", line 108, in parallel_execute
File "compose/parallel.py", line 206, in producer
File "compose/project.py", line 688, in do
File "compose/service.py", line 581, in execute_convergence_plan
File "compose/service.py", line 503, in _execute_convergence_recreate
File "compose/parallel.py", line 108, in parallel_execute
File "compose/parallel.py", line 206, in producer
File "compose/service.py", line 496, in recreate
File "compose/service.py", line 615, in recreate_container
File "compose/service.py", line 334, in create_container
File "compose/service.py", line 922, in _get_container_create_options
File "compose/service.py", line 962, in _build_container_volume_options
File "compose/service.py", line 1549, in merge_volume_bindings
File "compose/service.py", line 1579, in get_container_data_volumes
KeyError: 'ContainerConfig'

@vtayh
I see you changed the title of the initial issue, have you been able to solve it? If not, please give me more information as to the context in which the error occurred and I will look into it.
As for the third-party API methods, I am planning on integrating some. First I want to add the capability to extract the text from files. After, I will look again into some free API's which could be useful to integrate. Any API's that cost money will need to be very useful for the integration to be worth it.
I am open to any suggestions for the API's.

Thank you for your response. I have already solved the previous problem,
and now it runs very well. However, it lacks a bit of fun, such as
real-time news, stock information, cryptocurrency information, financial
news, and other popular features. If these functions are implemented, you
can surpass Karfly.
FlamingoFiesta @.***> 于 2024年6月7日周五 23:16写道：

@vtayh https://github.com/vtayh
I see you changed the title of the initial issue, have you been able to
solve it? If not, please give me more information as to the context in
which the error occurred and I will look into it.
As for the third-party API methods, I am planning on integrating some.
First I want to add the capability to extract the text from files. After, I
will look again into some free API's which could be useful to integrate.
Any API's that cost money will need to be very useful for the integration
to be worth it.
I am open to any suggestions for the API's.
—
Reply to this email directly, view it on GitHub
https://github.com/FlamingoFiesta/Chatgpt-Claude_telegram_bot_with_payment_system/issues/1#issuecomment-2155049172,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/BI6YUVPZVHCZW3P4LA2RVK3ZGHFGFAVCNFSM6AAAAABI2O5I4WVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDCNJVGA2DSMJXGI
.
You are receiving this because you were mentioned.Message ID:
<FlamingoFiesta/Chatgpt-Claude_telegram_bot_with_payment_system/issues/1/2155049172
@github.com>


[MRG] Win64 fixes

Trying to make phy work with h5py 2.5.0 on win64 (workaround the segmentation faults)

ready to go @nippoo @nsteinme
you might want to double-check that you're able to run phy spikesort on Windows on a small chunk of data (--interval). It should work with h5py 2.5.0 now.


plotjuggler: 2.1.3-0 in 'kinetic/distribution.yaml' [bloom]

Increasing version of package(s) in repository plotjuggler to 2.1.3-0:

upstream repository: https://github.com/facontidavide/PlotJuggler.git
release repository: https://github.com/facontidavide/plotjuggler-release.git
distro file: kinetic/distribution.yaml
bloom version: 0.7.2
previous version for package: 2.1.2-1

plotjuggler
* BUG: fixed issue with Customtracker when the plot is zoomed
* new icons
* ULog plugin added
* Allow to build the DataStreamClientSample on Linux (#143)
* Update README.md
* Contributors: Davide Faconti, Romain Reignier

Holding for kinetic sync


Tcti fd list unref

Breakage is caused by upstream TSS 1.x build. Have a patch up there to fix: https://github.com/01org/tpm2-tss/pull/550

upstream fix merged, this PR should be good to go


Licenceless creation fails

Creating an msi without a license fails on createmsi.py:197 with this error:
NameError: name 'product' is not defined

For WiX 4 (current trunk) this is a known issue. They have changed the XML syntax and I could not make it work again with the time & resources I had. Patches welcome.

For WiX 4 (current trunk) this is a known issue. They have changed the XML syntax and I could not make it work again with the time & resources I had. Patches welcome.
I see. I have another question but I'll be proper and open a new issue for it.


How do we want to manage software requirements

This will be less relevant for courses that aren't as much code needing to be run, but will definitely be something we want to thinking about for courses with code that needs to be run.
I am most familiar with using Docker https://www.docker.com for this purpose.
We would mainly use a Docker image and container for development but depending on the user target for a course, we could definitely offer our Docker image to the user as well.

I would think Docker would work but also having a script run on GitHub actions will likely be sufficient for some of the work.  Otherwise, I think we'd assume software would be installed locally.  Alternatively, it can be installed when run and then removed when the book is completed.

GitHub actions will work more nicely if we give it the same Docker image to run in as we are developing in. Plus this will give more consistency for package versions between developers and the GitHub actions.
Additionally when software dependency entanglements occur, we will only need to fix them once on the docket container as opposed to each individual having to fix the issue locally.

Docker image is made and up on docker hub. The instructions in CONTRIBUTING.md describe how to get started (But I still need to add more info on adding packages).


Fix additionnal CURLOPT_HTTPHEADER bug

When we add additionnal header in the call to the performRequest method like this :
$return_api = $this->twitter->buildOauth($url, $requestMethod)->performRequest(true, [
CURLOPT_HTTPHEADER => array('Content-Type:application/json'),
CURLOPT_POSTFIELDS => json_encode($postfields)
]);
Authentication data is not sent in the request, So we have this type of return :
{"errors":[{"code":215,"message":"Bad Authentication data."}]}

Hey! Could you fix this so that it passes CI tests? Everything previously needs to work correctly. Also the PR needs to go into Develop branch. Then, we can get it in. Thanks!

@J7mbo Done : https://github.com/J7mbo/twitter-api-php/pull/271

Closed in favour of #271.


Switch expressions assist conversion with OR removes comments

From an example posted by @pq in https://github.com/dart-lang/linter/issues/3673#issuecomment-1242203656:
switch (character) {
  /// See [General Punctuation]
  /// (http://www.unicode.org/charts/PDF/U2000.pdf).
  case 0x00A0: // No-break space.
  case 0x1680: // Ogham space mark.
  case 0x180E: // Mongolian vowel separator.
  case 0x2000: // En quad.
  case 0x2001: // Em quad.
  case 0x2002: // En space.
  case 0x2003: // Em space.
  case 0x2004: // Three-per-em space.
  case 0x2005: // Four-per-em space.
  case 0x2006: // Six-per-em space.
  case 0x2007: // Figure space.
  case 0x2008: // Punctuation space.
  case 0x2009: // Thin space.
  case 0x200A: // Hair space.
  case 0x200B: // Zero width space.
  case 0x2028: // Line separator.
  case 0x2029: // Paragraph separator.
  case 0x202F: // Narrow no-break space.
  case 0x205F: // Medium mathematical space.
  case 0x3000: // Ideographic space.
  case 0xFEFF: // Zero width no-break space.
    return something;

  default:
    return somethingElse;
}

Turns into the following losing all comments:
return switch (character) {
  /// See [General Punctuation]
  /// (http://www.unicode.org/charts/PDF/U2000.pdf).
  0x00A0 || 0x1680 || 0x180E || 0x2000 || 0x2001 || 0x2002 || 0x2003 || 0x2004 || 0x2005 || 0x2006 || 0x2007 || 0x2008 || 0x2009 || 0x200A || 0x200B || 0x2028 || 0x2029 || 0x202F || 0x205F || 0x3000 || 0xFEFF => // Zero width no-break space.
    1,

  _ => 2
};

A smaller example:
switch (character) {
  /// See [General Punctuation]
  /// (http://www.unicode.org/charts/PDF/U2000.pdf).
  case 0x00A0: // No-break space.
  case 0xFEFF: // Zero width no-break space.
    return 1;
  default:
    return 2;
}

Turns into:
return switch (character) {
  /// See [General Punctuation]
  /// (http://www.unicode.org/charts/PDF/U2000.pdf).
  0x00A0 || 0xFEFF => // Zero width no-break space.
    1,
  _ => 2
};

I believe it should become something along the lines of:
return switch (character) {
  /// See [General Punctuation]
  /// (http://www.unicode.org/charts/PDF/U2000.pdf).
  0x00A0 || // No-break space.
  0xFEFF => // Zero width no-break space.
    1,
  _ => 2,
};

But I think the result being alone is weird in all of the above so I suggest doing:
return switch (character) {
  /// See [General Punctuation]
  /// (http://www.unicode.org/charts/PDF/U2000.pdf).
  0x00A0 || // No-break space.
  0xFEFF // Zero width no-break space.
    => 1,
  _ => 2,
};

Currently, in the formatter, if you have the above, it formats the => in one line and the result in a new one. Will file an issue there and link here.

Issue created https://github.com/dart-lang/dart_style/issues/1551

This also inspired me to create https://github.com/dart-lang/linter/issues/5078.

Summary: Switch expression conversion with OR operator removes comments from the original code. The formatter currently places the => on one line and the result on a new line, which is inconsistent with the original code.

Also:
return switch (value) {
  0 || //case 0
  1 || //case 1
  2 //case 2
    =>
    2,
  _ => 3,
};

Becomes:
switch (value) {
  case 0 || //case 0
  1 || //case 1
  2:
    return 2;
  default:
    return 3;
}

So we are still losing the last comment here.

Converting the following does keep the comments, but if converting back it loses the last comment as mentioned above:
switch (value) {
  case 0 || //case 0
        1 || //case 1
        2: // case 2
    return 2;
  default:
    return 3;
}

Just point it out so tests can also be added for this case.

NP!
He had already seen this issue since he added the priority.
Also, something to keep in mind would be https://github.com/dart-lang/sdk/issues/56602 because as you can see in the first example, it doesn't format the output. I completely ignored it first since it is so easy to format in the IDE but my colleague pointed that when fixing via CLI with the possible future lint this would not be expected.


Reduce the complexity of the buildah.Run function

Signed-off-by: Daniel J Walsh<EMAIL_ADDRESS>This is causing HOMU to fail

@umohnani8 @nalind @TomSweeneyRedHat @pixdrift PTAL

@jlebon FYI

Yup

See gocyclo's README for a more detailed explanation.

LGTM assuming happy tests

LGTM

LGTM

Fixed ClearProcessCapabiltiies, and also used a function for AppArmor.
@rh-atomic-bot r=nalind


[service-bus] Fix issue on drain where onDrain and onMessage might sequence incorrectly.

Fixes an issue where drain could potentially resolve a promise even though some messages are pending processing.
This can happen if the user calls receiveMessages(5), for instance, and the timeout expires before they receive
them all - when this happens we then 'drain' the excess credits by sending a request to Service Bus on the link. Now, let's say that before the drain response comes in we receive some of the other messages (after all, we requested 5). Those messages are then, via setTimeout(emit, 0), scheduled to be sent to our onMessage handler. They are not dispatched to us immediately.
Now, when the drain response arrives (prior to this fix) the drain is processed immediately (unlike other messages the rhea-promise code does not call it with setTimeout), potentially bypassing any onMessage callbacks that are still waiting to be processed in the task queue.
By using setTimeout() here we use the same technique that the messages are scheduled by, ensuring that the resolve() is processed after any of those pending callbacks.
Fixes #12711

/azp run js - servicebus - tests

/azp run js - servicebus - tests

/azp run js - servicebus - tests

/azp run js - servicebus - tests


Isolate client ctx options from server options

(cherry picked from commit 2075a921ec27d2bb3f6310fa0a427429d0d15893)
-- This patch allows to have different options and tls versions on the outbound and inbound context. Even though we had separate config variables before, those were useless as the code would set the client ctx with server options and then with client specific options. We had a scenario where the outbound and inbound needed to have completely different tls version which was not working

I'll give it to you this time, but why is the "Conflicts" missing still? If you didn't see my email on how to produce back ports, please check again :-).

The point is that the backport / cherry-pick should retain all trails of what was done both on master, on this.

I presume that includes the Cipher Suites as well as the TLS levels.

I have done my own testing and the TLS levels and Cipher Suite level configurations work well with this fix.

Thanks for testing this @motherclangercs


make staff images server loaded

What kind of changes does this PR include?

Docs (added crate, edited information, etc.)
Config

Description

What does this PR change? Give us a brief description.
Makes the staff images server rendered on request

Canceled


Crash on: IsRunningOnVirtualDevice()

Looks like there may be some weird packaging issue. If you create a new project, bring in the nuget and run - IsRunningOnVirtualDevice you get a crash
Java.Lang.UnsatisfiedLinkError: 'dalvik.system.PathClassLoader[DexPathList[[zip file "/data/app/com.qwertylolman.breachdetectortest-xFII-F5aHtB3vLsHVPWkCQ==/base.apk"],nativeLibraryDirectories=[/data/app/com.qwertylolman.breachdetectortest-xFII-F5aHtB3vLsHVPWkCQ==/lib/arm64, /data/app/com.qwertylolman.breachdetectortest-xFII-F5aHtB3vLsHVPWkCQ==/base.apk!/lib/arm64-v8a, /system/lib64, /system/product/lib64]]] couldn't find "libanti.so"'

I believe that this is because the .so file isn't being packed in.

Thanks for reporting James, I can also reproduce this in the java test app -> https://github.com/strazzere/anti-emulator/issues/14
I will remove this dependency for now, it only adds a few more (smart) checks for detecting emulation.

For the record: I didn't remove the dependency but fix the problem in the original lib in this fork. Also pushed the changes to the original repo: https://github.com/strazzere/anti-emulator/pull/15


Browser agent is no longer return data for Gatsby Sites

Issue
We are no longer seeing event data in our dashboards for the browser agent, the problem seem to start  : somewhere between Jul 12, 11a m— Jul 13, 11am
Steps to reproduce

go to a dashboard that tracks events from our sites
view dashboard
see the missing data

NRQL
SELECT count(*) FROM PageView where appName = 'docs.newrelic.com' since 1 month ago TIMESERIES 1 day
SELECT count(*) FROM PageView where appName = 'opensource.newrelic.com' since 1 month ago TIMESERIES 1 day
SELECT count(*) FROM PageView where appName = 'developer.newrelic.com' since 1 month ago TIMESERIES 1 day
Expected

[ ] Data is visible in our dashboards

We introduced this change int the theme around the time we saw this problem begin
https://github.com/newrelic/gatsby-theme-newrelic/pull/424

Plugin Bug: https://github.com/newrelic/gatsby-plugin-newrelic/issues/24

closing as duplicate of newrelic/gatsby-plugin-newrelic#24


[Feature request] check all places where there are activity-id's

I think the checker currently looks just in the main activity-id field, but it would also be useful to find/report conflicts in the provider/recipient activity, and the @ref field used for related activities

@matmaxgeds my understanding of this checking is that the list of iati-identfier is currently populated from the iati-actvity.  This makes sense (to me!) in this context, as we just want to query the list of known IATI activity identifiers that are published.
I understand what you mean about other places, but I think initially we are just populating a list of the 1million+ activities.

@stevieflow agreed, I thought it would also be useful for the tool to be able to check the linked but different question of 'show me everywhere this activity-id is in use'.
I also wonder if there is a (not handleable by us I think) historical aspect here e.g. how to tell if you are using an activity-id that has been used in the past, that would also be an edge case that could break things. I do think we should think about a way to store historical IATI data with a field that says whether it is live now.


Modules PUML diagram to follow event dispatch source

I have 3 domain modules:

Orders,
Products,
Payments.

To avoid having too many similar/identical DTOs/events in the above modules, I decided to put them in a Shared module of typeApplicationModule.Type.OPEN. I've set up async communication between them using @EventListener/@TransactionalEventListener.
When I generate docs with Documenter#writeModulesAsPlantUml I am getting a diagram, where business modules listen to Shared module:

while I would expect something like:

As I understand based on the above images, doc generator simply checks in which module an event class resides. To get the desired output, it might check in which module an event class is dispatched instead.
Would that be possible?

Can you clarify, why you'd expect the lower? From a quick glance, it even looks broken, as there's a cyclic relationship between Payments and Orders. The arrows in the diagram reflect type dependencies. It's also not clear to me why the listening dependency from Payments to Shared should be hidden. Apparently – and it is difficult to judge what's going on without knowing the actual code – the Payments module contains an even listener targeting a type defined in Shared. Same but different for the listens to VS. depends on relationship between Orders and Shared.

Any chance you can further comment on the questions. I'm inclined to close the ticket otherwise.

Yes, will do hopefully by the end of the week.

Can you clarify why you'd expect the lower

I would expect that because that's how the business logic works.
For example - in the domain code Payments module is listening to OrderCompleted event. OrderCompleted event is dispatched by Order domain entity. That's why I would expect it to be captured in the diagram (the lower diagram).
Currently the listening relation is set to Shared, because the event itself lives in Shared. I'm aware, that since it's a domain event it should live in domain Orders module, but I intentionally put the event in Shared, so that both Orders and Payments module can depend on it and I don't have to duplicate the event code in multiple places - it's a tradeoff that I agree upon.

it even looks broken, as there's a cyclic relationship between Payments and Orders

That's the reason I am setting asynchronous communication between these modules. Payments listens to OrderCompleted event and Orders listen to PaymentCompleted event. Async communication allows to decouple the cyclic relation in the code  to relay only on events, not directly on modules.

It's also not clear to me why the listening dependency from Payments to Shared should be hidden

Currently the the dependency arrow from Payments to Shared doesn't really describe the logic. It is there only, because the event class itself lives in Shared, but it's dispatched in Orders.
The "depends on" relation From Payments to Shared makes sense to me, because indeed Payments uses Shared e.g. it imports OrdersComplete event, but it doesn't listen to it, as Shared is not dispatching this event.
In other words - the way I envision it is that the listening relationship would be established based on where the event is dispatched instead of where it resides.
I am aware that it's my subjective point of view, but maybe it's convincing enough :)

I would expect that because that's how the business logic works. For example - in the domain code Payments module is listening to OrderCompleted event. OrderCompleted event is dispatched by Order domain entity. That's why I would expect it to be captured in the diagram (the lower diagram).

It's always difficult to judge a train of thought if there's no code presented. If payments contains an @EventListener or @ApplicationModuleListener for an OrderCompleted located in order, payments relates to order via a “listens to” relationship. The resulting diagram should show order - listens to  -> payment.

Currently the listening relation is set to Shared, because the event itself lives in Shared.

That's contradicting what you stated above (the event type residing in order).

I'm aware, that since it's a domain event it should live in domain Orders module, but I intentionally put the event in Shared, so that both Orders and Payments module can depend on it and I don't have to duplicate the event code in multiple places - it's a tradeoff that I agree upon.

Then the diagram reflects exactly that decision: you have moved the event to shared, that's why payment now relates to shared. We (can) only inspect type dependencies, not method bodies. A “listen to” relationship is a dependency only in the type relationship sense anyway, as – by definition – listening to an event of another module does not make the listening module depend on the other module being present at runtime.
I generally think that the practice of moving code to shared modules needs to be reconsidered, especially for domain events. They're a key part of a module as they signal important state transitions and ultimately form the (logical) API of a module. Moving those to a shared module results in a module with low-cohesion, as the individual elements contained in that one usually do not really relate to each other.

That's the reason I am setting asynchronous communication between these modules. Payments listens to OrderCompleted event and Orders listen to PaymentCompleted event. Async communication allows to decouple the cyclic relation in the code to relay only on events, not directly on modules.

Asynchronous or event-based communication does not resolve cyclic dependencies. If A interacts with B and B interacts with A, they're in a cyclic relationship, independently of whether they talk to each other via events or direct method calls. Again, I think moving the problematic parts into a shared module only masks that fact. Even worse, it hides that the two primary modules semantically depend on each other.
A common successful approach in designing such a scenario is defining a leading party, typically from the concept, that semantically depends on the other. While orders without payments might be suboptimal for the business (😬), conceptually, an order can exist without being paid through the system. A payment, however, hardly makes sense without something that is paid. So I guess the implied logical dependency would be payment -> order. The dependency in the other direction would then be implemented by order exposing an interface, declaring an event listener for that interface, and payment implementing the interface with an event type and publishing that.


Added guidance for max image decoder concurrency

@cwarnermm - I don't think you pushed the changes yet :P


[Quick Event] Is this correct?

Extension
https://www.raycast.com/mblode/quick-event
Raycast Version
1.77.3
macOS Version
14.5
Description
I just realized that if I add PM to a 24hs system format it counts an extra day.
Is not something important, but just wanted to report it.

Steps To Reproduce
Just opened the Create Quick Event from the calendar extension.
Typed "Soemthing, August 30 at 16pm"
If you remove PM it uses the correct date
Current Behaviour
No response
Expected Behaviour
No response

I guess it makes good sense, since you're mixing the two, and it tries it best by saying okay so at August 30th, 16 (4PM) and then adding PM, makes 16 normally, an invalid value, but it just sees it as that, and adds 4 hours on top of 12PM. Resulting in 4AM.
By the way, this is a limitation of the parser behind (SherlockJS), but this is what I would assume would happen.


Missing 'timestamp' column

Current Behavior
2023-12-08T16:35:55Z	ERROR	autopilot	autopilot/autopilot.go:289	contract maintenance failed, err: could not add contracts to set: failed to record contract set metric: Error 1054 (42S22): Unknown column 'timestamp' in 'field list'

Also looks like it broke autopilot, it isn't forming any contracts.
Expected Behavior
x
Steps to Reproduce
No response
Version
a62b125 zen testnet
What operating system did the problem occur on (e.g. Ubuntu 22.04, macOS 12.0, Windows 11)?
Ubuntu 22.04, kubernetes
Autopilot Config
x
Bus Config
x
Contract Set Contracts
x
Anything else?
mysql running from docker.io/bitnami/mysql:8.0.35-debian-11-r0

@artur9010 can you check if the wallets table in your metrics database in MySQL has a timestamp column?

| wallets | CREATE TABLE `wallets` (
  `id` bigint unsigned NOT NULL AUTO_INCREMENT,
  `created_at` datetime(3) DEFAULT NULL,
  `timestamp` bigint NOT NULL,
  `confirmed_lo` bigint NOT NULL,
  `confirmed_hi` bigint NOT NULL,
  `spendable_lo` bigint NOT NULL,
  `spendable_hi` bigint NOT NULL,
  `unconfirmed_lo` bigint NOT NULL,
  `unconfirmed_hi` bigint NOT NULL,
  PRIMARY KEY (`id`),
  KEY `idx_wallets_timestamp` (`timestamp`),
  KEY `idx_confirmed` (`confirmed_lo`,`confirmed_hi`),
  KEY `idx_spendable` (`spendable_lo`,`spendable_hi`),
  KEY `idx_unconfirmed` (`unconfirmed_lo`,`unconfirmed_hi`)
) ENGINE=InnoDB AUTO_INCREMENT=406 DEFAULT CHARSET=utf8mb3 |

for show create table wallets, looks like it have it but it still gives me an error
2023-12-11T13:35:57.297399794Z 2023-12-11T13:35:57Z	ERROR	db	stores/metadata.go:1052	Error 1054 (42S22): Unknown column 'timestamp' in 'field list'	{"elapsed": "0.695ms", "rows": 0, "sql": "INSERT INTO `contract_sets` (`created_at`,`timestamp`,`name`,`contracts`) VALUES ('2023-12-11 13:35:57.297',1702301757296,'autopilot',12)"}
2023-12-11T13:35:57.297569272Z 2023-12-11T13:35:57Z	ERROR	autopilot	autopilot/autopilot.go:272	contract maintenance failed, err: could not add contracts to set: failed to record contract set metric: Error 1054 (42S22): Unknown column 'timestamp' in 'field list'

i forgot to add one thing, i use same db for renterd and metrics. Does renterd use the same table names as renterd metrics?

Yes, using the same database is not supported. e.g. both databases have a contracts and a contract_sets table.

After wiping the database and creating two separate databases, it works fine. Maybe it should be more idiot-proof.


SIL: Fix SIL verifier's VerifyClassMethodVisitor

When checking a super method call, make sure we look at the vtable
for the right class.
Previously we would visit all the methods of the derived class,
together with any methods they override, but that is not quite
right -- it's perfectly legal to use 'super' to call a method that
you're not overriding too.
Fixes https://bugs.swift.org/browse/SR-10260.

@swift-ci Please smoke test

@swift-ci Please test source compatibility