Spring Boot B2C example redirects /home to /login on localhost; never goes anywhere on VM Tomcat9

Local OS: MacOS Catalina
VM OS: Ubuntu 20.04
VM app server: Tomcat9
Have already setup B2C tenant with JWT.ms and integrated Google Login.
Testing B2C with Spring as per https://docs.microsoft.com/en-us/azure/developer/java/spring-framework/configure-spring-boot-starter-java-app-with-azure-active-directory-b2c-oidc.
When running directly from MacOS localhost command-line, B2C login works and I can see claim details on /home page (actually / loading /home). Then I can successfully click on to /greeting. But when I click back to /home, I get redirected to /login?error. A subsequent attempt to return to /greeting fails authn.
When I moved the WAR package to Tomcat9 running on an Azure VM in our VPN (https://<IP_ADDRESS>:8443/b2cdemo), the login page comes up, I am sent to AADB2C to login and then... right back to login, do not go to /home, do not collect $200. Attempts to go directly to /greeting also go nowhere. So what do I need to do to make this work in a real Tomcat deployment?
I am using all the versions cited in the Azure tutorial. The Tomcat is running under Azul OpenJDK 11.
Any ideas?

Log extracts attached:
b2cdemo_logs.zip

Hey , Maybe you can change reply-url from http://localhost:8080/home to http://localhost:8080/Except-home in Azure and yml.
But I don't clear  the environment of your tomcat , so try the solution above ?

Since we've deprecated this repo, I'm recreating this issue in the new repo https://github.com/Azure/azure-sdk-for-java/issues/18350.

Closing this issue now and we will keep supporting you in the new repo.


Deploy COVID shield using Kubernetes

This PR adds deploy examples and documentation for deploying to Kubernetes.
This documentation can be improved in the future by adding instructions for other Kubernetes-friendly environments like deploying to cloud infrastructure, bare metal, or other local tools like kind.
Kubernetes templates were inspired by: https://github.com/jonpulsifer/cloudlab/tree/master/k8s/namespaces/covidshield

Thank you @mkbru! 👏  ❤


[Landing page] AAUser I can see a landing page which looks like Quivr

Description:
We want a landing page with 3 distinct pieces.

heading and tagline - Empower developers with Orion Review.
CTA (Install -> installation instructions) , Link to the github
video - same video as in the github readme
features - 3 features of the app.

Validation
Screenshot of a homepage which has resemblance to https://quivr.app
Tech steps:
nick the home page from quivr and change the words.
if you don't know what to write just add lorem ipsum place holder

Validation:

Colours are still wrong @lizacullis Any chance to fix these on the features component.


Add support for mergeable_state = "blocked".

Fixes #269.

Is there an ETA on when this will be reviewed and merged? #269 has the effect that it breaks any projects involving PRs if one happens to be blocked.


Couldn't Render Table Correct With Markdown

Oni Version: 0.3.7
Neovim Version (Linux only): v0.3.1
Operating System: macOS
Issue: Couldn't Render Table Correct With Markdown
Expected behavior: Render Table By Raw
Actual behavior: Show The Raw
Steps to reproduce: Open Markdown Preview

Hey!
As you've already realised, this is due to the insertion of the scrolling anchors, which are used to keep the markdown preview inline with the markdown code buffer.
I'm not sure what the best way to do this is...Currently those anchors are added before the markdown is converted, but perhaps we should add them after? Or remove it entirely, since it causes some other issues potentially, around code blocks at least where the anchors are sometimes visible.
With the anchor code removed, the table is generated correctly, though does need some additional styling applied to make it look how a user would expect it.
Any input @TalAmuyal ?

There is some logic that prevents the insertion of the anchors in
inappropriate places (such as described above).
I think that we should teach it to recognize tables as well.
On Wed, Oct 3, 2018, 14:17 Ryan C<EMAIL_ADDRESS>wrote:

Hey!
As you've already realised, this is due to the insertion of the scrolling
anchors, which are used to keep the markdown preview inline with the
markdown code buffer.
I'm not sure what the best way to do this is...Currently those anchors are
added before the markdown is converted, but perhaps we should add them
after? Or remove it entirely, since it causes some other issues
potentially, around code blocks at least where the anchors are sometimes
visible.
With the anchor code removed, the table is generated correctly, though
does need some additional styling applied to make it look how a user would
expect it.
Any input @TalAmuyal https://github.com/TalAmuyal ?
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/onivim/oni/issues/2604#issuecomment-426599730, or mute
the thread
https://github.com/notifications/unsubscribe-auth/AE3IjRxCj_Sjnts4Iy_Y4g34eR77EBIAks5uhJzVgaJpZM4XFLSF
.

Consider deleting the anchor because it is actually not as useful in preview mode. @CrossR @TalAmuyal

I have replicated this same issue on CentOS7, Oni v0.3.6, Neovim v0.3.0. Thank you for opening this issue @leion8310


Setup data and experiments for WMT

Codecov Report

Merging #22 into master will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master      #22   +/-   ##
=======================================
  Coverage   98.92%   98.92%
=======================================
  Files          17       17
  Lines         747      747
=======================================
  Hits          739      739
  Misses          8        8

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 6b17e6e...e24f563. Read the comment docs.


Slow initialization and invocation of ChatVertexAI with Gemini 1.5 Flash, while VertexAI performs faster

Slow initialization and invocation of ChatVertexAI with Gemini 1.5 Flash, while VertexAI performs faster
Environment

version: langchain-google-vertexai==1.0.6
Python version: python 3.11.9
Operating System: Windows 11 64bit

Description
I'm experiencing extremely slow performance when initializing and invoking the ChatVertexAI model, specifically with the Gemini 1.5 Flash model. The initialization takes between 25 to 45 seconds, and each invocation takes 15 to 35 seconds. This seems unusually slow for a model advertised as fast. Interestingly, when using the VertexAI class instead, the initialization is still slow, but the generation process is much faster.
Steps to Reproduce

Install the required package: pip install langchain-google-vertexai==1.0.6
Run the following code for ChatVertexAI:

from langchain_google_vertexai import ChatVertexAI
import time

start = time.time()
llm = ChatVertexAI(
    model_name="gemini-1.5-flash-001",
    location="asia-northeast1",
)
print(f'Loaded LLM in {time.time() - start} seconds') # 25 sec ~ 45 sec
start = time.time()
response = llm.invoke("HI!")
print(f'Invoked LLM in {time.time() - start} seconds') # 15 sec ~ 35 sec
print(response)

Compare with VertexAI class (please provide the exact code you used for this comparison):

from langchain_google_vertexai import VertexAI
import time

start = time.time()
llm = VertexAI(
    model_name="gemini-1.5-flash-001",
    location="asia-northeast1",
)
print(f'Loaded LLM in {time.time() - start} seconds') # 25 sec ~ 45 sec
start = time.time()
response = llm.invoke("HI!")
print(f'Invoked LLM in {time.time() - start} seconds') # 2 sec ~ 5 sec
print(response)

Expected Behavior
Given that Gemini 1.5 Flash is advertised as a fast model, I would expect both initialization and invocation to be significantly quicker, perhaps in the range of a few seconds at most. The behavior observed with the VertexAI class (fast generation after slow initialization) seems more in line with expectations.
Actual Behavior
For ChatVertexAI:

Initialization takes 25-45 seconds
Each invocation takes 15-35 seconds

For VertexAI:

Initialization takes 25-45 seconds
Each invocation takes 2-5 seconds

Question

Why is there such a significant difference in invocation speed between ChatVertexAI and VertexAI when using the same Gemini 1.5 Flash model?
Is the slow initialization expected for both classes? If not, are there any known issues or optimizations that could improve the initialization time?
Are there any recommended settings or best practices for using ChatVertexAI with Gemini 1.5 Flash to achieve optimal speed, similar to what's seen with VertexAI?

Additional Context

I'm located in Japan, so I'm using the asia-northeast1 location for the model, which should be optimal for my geographical location.
Despite using the optimal location, I'm still experiencing these long delays with ChatVertexAI.
The fact that VertexAI performs faster for generation suggests that the issue might be specific to the ChatVertexAI implementation.

Could you check again, please?
I can't observer the issue anymore (anyways, I don't think it's on the integration's side).

No matter how many times I try, in my environment there's a clear difference in latency between VertexAI and ChatVertexAI. It might just be my environment. Thank you very much!


Java: Improve alert wording in java/integer-multiplication-cast-to-long.

This alert message has been causing some confusion as it didn't mention the real problem, that is, potential overflow.

The expected test output needs to be updated to reflect the improved query message.


line plots may overlay plot box

Reported by ansley b manke on 5 Feb 2015 23:41 UTC
We re-draw the plot axes on SHADE and other plots because the graphics drawn may overlay axis lines and tic marks.
The RIBBON and other line plots also cover up the plot axes. This is seen in the SOCAT ribbon plots.  Simple examples:
 ! line plot with /VS draw on the axes
yes? let xval = {0.0, 0.2, 1.0, 0.8, 0}
yes? let yval = {0.0, 1.1, 1.1, 0.0, 0}
yes? plot/vs/line/thick=3/color=lightblue xval, yval

 ! any line overlay plot may draw on the axes
yes? let xval = {0.0, 0.0, 0.8, 0.2, 0}
yes? let yval = {0.1, 1.2, 1.2, 0.1, 0.1}
yes? plot/ribbon/vs/line/thick=3/over/nolab/pal=green_light xval, yval, yval

Migrated-From: http://dunkel.pmel.noaa.gov/trac/ferret/ticket/2232

Comment by steven.c.hankin on 6 Feb 2015 01:06 UTC
A thought:  when implementing we should double check to ensure that only the box is redrawn -- not all of the tics and labels, too.  For whatever reason the drawing of tics and labels is very slow, so this is a significant performance issue.  (There are indications that already in the current code the tics and labels are being drawn more than once.)

Comment by ansley.b.manke on 6 Feb 2015 22:55 UTC
Fixed in pltit.F
There's a routine DAXIS_BOX which draws only the axis lines. For SHADE plots we do overplot the tic marks because if they're inside the plot box they get completely overdrawn by the SHADE. For lines just doing the axis box is what we want.

Attachment from ansley.b.manke on 5 Feb 2015 23:42 UTC
the plot from the example script
REPLACE THIS TEXT WITH UPLOADED FILE ./attachments/TRAC_2232_GIT_1504/lines_over_axes.gif


Error: failed to create listener: failed to listen on <IP_ADDRESS>:443: listen tcp <IP_ADDRESS>:443: bind: permission denied

Hello,
I am trying to use it with OCP 4.6, and it does not work.
In the pod related to ooh web hook, I get this message (See below ; the pod is in state "CrashLoopBackOff")
How to fix it please ?
Thank you
`
Error: failed to create listener: failed to listen on <IP_ADDRESS>:443: listen tcp <IP_ADDRESS>:443: bind: permission denied
Usage:
[flags]
Flags:
--add_dir_header                                          If true, adds the file directory to the header of the log messages
--alsologtostderr                                         log to standard error as well as files
--audit-log-batch-buffer-size int                         The size of the buffer to store events before batching and writing. Only used in batch mode. (default 10000)
--audit-log-batch-max-size int                            The maximum size of a batch. Only used in batch mode. (default 1)
--audit-log-batch-max-wait duration                       The amount of time to wait before force writing the batch that hadn't reached the max size. Only used in batch mode.
--audit-log-batch-throttle-burst int                      Maximum number of requests sent at the same moment if ThrottleQPS was not utilized before. Only used in batch mode.
--audit-log-batch-throttle-enable                         Whether batching throttling is enabled. Only used in batch mode.
--audit-log-batch-throttle-qps float32                    Maximum average number of batches per second. Only used in batch mode.
--audit-log-compress                                      If set, the rotated log files will be compressed using gzip.
--audit-log-format string                                 Format of saved audits. "legacy" indicates 1-line text format for each event. "json" indicates structured json format. Known formats are legacy,json. (default "json")
--audit-log-maxage int                                    The maximum number of days to retain old audit log files based on the timestamp encoded in their filename.
--audit-log-maxbackup int                                 The maximum number of old audit log files to retain.
--audit-log-maxsize int                                   The maximum size in megabytes of the audit log file before it gets rotated.
--audit-log-mode string                                   Strategy for sending audit events. Blocking indicates sending events should block server responses. Batch causes the backend to buffer and write events asynchronously. Known modes are batch,blocking,blocking-strict. (default "blocking")
--audit-log-path string                                   If set, all requests coming to the apiserver will be logged to this file.  '-' means standard out.
--audit-log-truncate-enabled                              Whether event and batch truncating is enabled.
--audit-log-truncate-max-batch-size int                   Maximum size of the batch sent to the underlying backend. Actual serialized size can be several hundreds of bytes greater. If a batch exceeds this limit, it is split into several batches of smaller size. (default 10485760)
--audit-log-truncate-max-event-size int                   Maximum size of the audit event sent to the underlying backend. If the size of an event is greater than this number, first request and response are removed, and if this doesn't reduce the size enough, event is discarded. (default 102400)
--audit-log-version string                                API group and version used for serializing audit events written to log. (default "audit.k8s.io/v1")
--audit-policy-file string                                Path to the file that defines the audit policy configuration.
--audit-webhook-batch-buffer-size int                     The size of the buffer to store events before batching and writing. Only used in batch mode. (default 10000)
--audit-webhook-batch-max-size int                        The maximum size of a batch. Only used in batch mode. (default 400)
--audit-webhook-batch-max-wait duration                   The amount of time to wait before force writing the batch that hadn't reached the max size. Only used in batch mode. (default 30s)
--audit-webhook-batch-throttle-burst int                  Maximum number of requests sent at the same moment if ThrottleQPS was not utilized before. Only used in batch mode. (default 15)
--audit-webhook-batch-throttle-enable                     Whether batching throttling is enabled. Only used in batch mode. (default true)
--audit-webhook-batch-throttle-qps float32                Maximum average number of batches per second. Only used in batch mode. (default 10)
--audit-webhook-config-file string                        Path to a kubeconfig formatted file that defines the audit webhook configuration.
--audit-webhook-initial-backoff duration                  The amount of time to wait before retrying the first failed request. (default 10s)
--audit-webhook-mode string                               Strategy for sending audit events. Blocking indicates sending events should block server responses. Batch causes the backend to buffer and write events asynchronously. Known modes are batch,blocking,blocking-strict. (default "batch")
--audit-webhook-truncate-enabled                          Whether event and batch truncating is enabled.
--audit-webhook-truncate-max-batch-size int               Maximum size of the batch sent to the underlying backend. Actual serialized size can be several hundreds of bytes greater. If a batch exceeds this limit, it is split into several batches of smaller size. (default 10485760)
--audit-webhook-truncate-max-event-size int               Maximum size of the audit event sent to the underlying backend. If the size of an event is greater than this number, first request and response are removed, and if this doesn't reduce the size enough, event is discarded. (default 102400)
--audit-webhook-version string                            API group and version used for serializing audit events written to webhook. (default "audit.k8s.io/v1")
--authentication-kubeconfig string                        kubeconfig file pointing at the 'core' kubernetes server with enough rights to create tokenreviews.authentication.k8s.io.
--authentication-skip-lookup                              If false, the authentication-kubeconfig will be used to lookup missing authentication configuration from the cluster.
--authentication-token-webhook-cache-ttl duration         The duration to cache responses from the webhook token authenticator. (default 10s)
--authentication-tolerate-lookup-failure                  If true, failures to look up missing authentication configuration from the cluster are not considered fatal. Note that this can result in authentication that treats all requests as anonymous.
--authorization-always-allow-paths strings                A list of HTTP paths to skip during authorization, i.e. these are authorized without contacting the 'core' kubernetes server. (default [/healthz,/readyz,/livez])
--authorization-kubeconfig string                         kubeconfig file pointing at the 'core' kubernetes server with enough rights to create subjectaccessreviews.authorization.k8s.io.
--authorization-webhook-cache-authorized-ttl duration     The duration to cache 'authorized' responses from the webhook authorizer. (default 10s)
--authorization-webhook-cache-unauthorized-ttl duration   The duration to cache 'unauthorized' responses from the webhook authorizer. (default 10s)
--bind-address ip                                         The IP address on which to listen for the --secure-port port. The associated interface(s) must be reachable by the rest of the cluster, and by CLI/web clients. If blank or an unspecified address (<IP_ADDRESS> or ::), all interfaces will be used. (default <IP_ADDRESS>)
--cert-dir string                                         The directory where the TLS certs are located. If --tls-cert-file and --tls-private-key-file are provided, this flag will be ignored. (default "apiserver.local.config/certificates")
--client-ca-file string                                   If set, any request presenting a client certificate signed by one of the authorities in the client-ca-file is authenticated with an identity corresponding to the CommonName of the client certificate.
--contention-profiling                                    Enable lock contention profiling, if profiling is enabled
--egress-selector-config-file string                      File with apiserver egress selector configuration.
-h, --help                                                    help for this command
--http2-max-streams-per-connection int                    The limit that the server gives to clients for the maximum number of streams in an HTTP/2 connection. Zero means to use golang's default. (default 1000)
--kubeconfig string                                       kubeconfig file pointing at the 'core' kubernetes server.
--log-flush-frequency duration                            Maximum number of seconds between log flushes (default 5s)
--log_backtrace_at traceLocation                          when logging hits line file:N, emit a stack trace (default :0)
--log_dir string                                          If non-empty, write log files in this directory
--log_file string                                         If non-empty, use this log file
--log_file_max_size uint                                  Defines the maximum size a log file can grow to. Unit is megabytes. If the value is 0, the maximum file size is unlimited. (default 1800)
--logtostderr                                             log to standard error instead of files (default true)
--one_output                                              If true, only write logs to their native severity level (vs also writing to each lower severity level)
--permit-address-sharing                                  If true, SO_REUSEADDR will be used when binding the port. This allows binding to wildcard IPs like <IP_ADDRESS> and specific IPs in parallel, and it avoids waiting for the kernel to release sockets in TIME_WAIT state. [default=false]
--permit-port-sharing                                     If true, SO_REUSEPORT will be used when binding the port, which allows more than one instance to bind on the same address and port. [default=false]
--profiling                                               Enable profiling via web interface host:port/debug/pprof/ (default true)
--requestheader-allowed-names strings                     List of client certificate common names to allow to provide usernames in headers specified by --requestheader-username-headers. If empty, any client certificate validated by the authorities in --requestheader-client-ca-file is allowed.
--requestheader-client-ca-file string                     Root certificate bundle to use to verify client certificates on incoming requests before trusting usernames in headers specified by --requestheader-username-headers. WARNING: generally do not depend on authorization being already done for incoming requests.
--requestheader-extra-headers-prefix strings              List of request header prefixes to inspect. X-Remote-Extra- is suggested. (default [x-remote-extra-])
--requestheader-group-headers strings                     List of request headers to inspect for groups. X-Remote-Group is suggested. (default [x-remote-group])
--requestheader-username-headers strings                  List of request headers to inspect for usernames. X-Remote-User is common. (default [x-remote-user])
--secure-port int                                         The port on which to serve HTTPS with authentication and authorization. If 0, don't serve HTTPS at all. (default 443)
--skip_headers                                            If true, avoid header prefixes in the log messages
--skip_log_headers                                        If true, avoid headers when opening log files
--stderrthreshold severity                                logs at or above this threshold go to stderr (default 2)
--tls-cert-file string                                    File containing the default x509 Certificate for HTTPS. (CA cert, if any, concatenated after server cert). If HTTPS serving is enabled, and --tls-cert-file and --tls-private-key-file are not provided, a self-signed certificate and key are generated for the public address and saved to the directory specified by --cert-dir.
--tls-cipher-suites strings                               Comma-separated list of cipher suites for the server. If omitted, the default Go cipher suites will be used.
Preferred values: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384.
Insecure values: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_RC4_128_SHA.
--tls-min-version string                                  Minimum TLS version supported. Possible values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13
--tls-private-key-file string                             File containing the default x509 private key matching --tls-cert-file.
--tls-sni-cert-key namedCertKey                           A pair of x509 certificate and private key file paths, optionally suffixed with a list of domain patterns which are fully qualified domain names, possibly with prefixed wildcard segments. The domain patterns also allow IP addresses, but IPs should only be used if the apiserver has visibility to the IP address requested by a client. If no domain patterns are provided, the names of the certificate are extracted. Non-wildcard matches trump over wildcard matches, explicit domain patterns trump over extracted names. For multiple key/certificate pairs, use the --tls-sni-cert-key multiple times. Examples: "example.crt,example.key" or "foo.crt,foo.key:*.foo.com,foo.com". (default [])
--tracing-config-file string                              File with apiserver tracing configuration.
-v, --v Level                                                 number for the log level verbosity
--vmodule moduleSpec                                      comma-separated list of pattern=N settings for file-filtered logging
E1115 15:53:13.606408       1 cmd.go:46] cert-manager "msg"="error executing command" "error"="failed to create listener: failed to listen on <IP_ADDRESS>:443: listen tcp <IP_ADDRESS>:443: bind: permission denied"
`

I believe this issue is fixed in my repo by dropping root privileges and listening on a non-priv port.
Head to https://github.com/aureq/cert-manager-webhook-ovh for more details


Feat/expose database predicates

Expose the ISO predicates related to “database” management, specifically those used for handling dynamic predicates.

Summary by CodeRabbit

New Features

Introduced features for asserta/1, assertz/1, and retract/1 predicates in Prolog, with multiple scenarios demonstrating their functionality.
Scenarios include asserting facts, handling dynamic vs. static predicates, and managing an inventory system.

Bug Fixes

Improved error handling for attempts to assert or retract static predicates.

Documentation

Comprehensive test cases and expected outputs for new features to enhance user understanding.

@coderabbitai please approve PR. thx


Use sklearn assert all finite for data validations

Use sklearn assert_all_finite methods to directly validate data since we are still encountering errors from assert_all_finite with previous null check. Investigation show that the np.inf case is not handled.

Checklist

[x] I have added screenshots above for all UI changes.
[x] I have added e2e tests for all UI changes.
[x] Documentation was updated if it was needed.

Codecov Report

Merging #2247 (9accae9) into main (529af52) will increase coverage by 6.35%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main    #2247      +/-   ##
==========================================
+ Coverage   88.10%   94.45%   +6.35%
==========================================
  Files         129       18     -111
  Lines        7337      415    -6922
==========================================
- Hits         6464      392    -6072
+ Misses        873       23     -850

Flag
Coverage Δ

unittests
94.45% <ø> (+6.35%)
:arrow_up:

Flags with carried forward coverage won't be shown. Click here to find out more.
see 111 files with indirect coverage changes


chore: Go mod & .gitignore

Follow-up to #23
Additionally, you might want to loot at the type conversion from old types to the new ones.
I presume you used the types from Sharepoint, so Int32 instead of Int64 or Float32 instead of Float64 was a deliberate choice, but needed to highlight this code nonetheless.

@koltyakov I've looked through the update to v4 you performed & it's a great job! Now the code allows to sync several tables of the same type in parallel, which what I wanted to address in #22.
I have only a small chore to update .gitignore & go.mod files to propose.
Additionally, see the link to the implementation of the type conversions we used in v2.


aws-okta: 0.20.1 -> 0.26.3

Motivation for this change
Things done

[ ] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[ ] NixOS
[ ] macOS
[x] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nix-review --run "nix-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[ ] Fits CONTRIBUTING.md.

Notify maintainers
cc @

I no longer have an okta account to use for testing. Would you mind describing what testing has been done?

@imalsogreg I've been using this in my environment for the past month. I'm running nix on ubuntu 18.04. So far, no issues.


[1.8.4] Certificate verification failure on multicluster with Istio mTLS

(NOTE: This is used to report product bugs:
To report a security vulnerability, please visit https://istio.io/about/security-vulnerabilities
To ask questions about how to use Istio, please visit https://discuss.istio.io)
Bug description
Running Istio on a replicated control plane setup (version 1.7.8), cross-cluster communication (Cluster 1 [POD] -> Cluster 2 [Istio-IngressGateway] using ISTIO_MUTUAL works without any issue.
Simply doing an in-place upgrade (using Istio-operator) to version 1.8.4, cross-cluster communication fails:
upstream connect error or disconnect/reset before headers. reset reason: connection failure, transport failure reason: TLS error: 268435581:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
[ ] Docs
[ ] Installation
[X] Networking
[ ] Performance and Scalability
[ ] Extensions and Telemetry
[X] Security
[ ] Test and Release
[ ] User Experience
[ ] Developer Infrastructure
[ ] Upgrade
Expected behavior
When doing an in-place upgrade on Istio (minor releases), expected cross-cluster communication to be backwards compatible.
Steps to reproduce the bug
Using Istio 1.7.x on a Multicluster Replicated Control Plane setup, use ISTIO_MUTUAL for cross-cluster communication.
apiVersion: networking.istio.io/v1beta1
kind: Gateway
metadata:
  name: cluster-aware-gateway
  namespace: istio-system
spec:
  selector:
    istio: ingressgateway
  servers:
  - port:
      number: 443
      name: https
      protocol: HTTPS
    tls:
      mode: ISTIO_MUTUAL
    hosts:
    - "*.local"

apiVersion: networking.istio.io/v1beta1
kind: DestinationRule
metadata:
  name: wildcard-local
  namespace: istio-system
spec:
  host: "*.local"
  trafficPolicy:
    tls:
      mode: ISTIO_MUTUAL

Test cross-cluster communication via curl pod:
curl -i -v foo.sample.svc.cluster.local:80/anything
> GET /anything HTTP/1.1
> User-Agent: curl/7.35.0
> Host: foo.sample.svc.cluster.local
> Accept: */*
>
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< server: envoy
server: envoy
< date: Mon, 15 Mar 2021 21:00:26 GMT
date: Mon, 15 Mar 2021 21:00:26 GMT
< content-type: application/json
content-type: application/json
< content-length: 2414
content-length: 2414
< access-control-allow-origin: *
access-control-allow-origin: *
< access-control-allow-credentials: true
access-control-allow-credentials: true
< x-envoy-upstream-service-time: 6
x-envoy-upstream-service-time: 6

<
{
  "args": {},
  "data": "",
  "files": {},
  "form": {},
  "headers": {
    "Accept": "*/*",
    "Content-Length": "0",
    "Host": "foo.sample.svc.cluster.local",
    "User-Agent": "curl/7.35.0",
    "X-B3-Parentspanid": "f05675202aacbc6e",
    "X-B3-Sampled": "1",
    "X-B3-Spanid": "64c19e20bcc70c82",
    "X-B3-Traceid": "a4e0e66cbfe6aaa234b050a663ae6327",
    "X-Envoy-Attempt-Count": "1",
    "X-Envoy-Expected-Rq-Timeout-Ms": "20000",
    "X-Envoy-Internal": "true",
    "X-Forwarded-Client-Cert": "By=spiffe://cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account;Hash=<hashvalue>;Cert=\"-----BEGIN%20CERTIFICATE-----<certificate-content>-----END%20CERTIFICATE-----%0A\";Subject=\"\";URI=spiffe://cluster.local/ns/sample/sa/default,By=spiffe://cluster.local/ns/sample/sa/default;Hash=<hashvalue>;Subject=\"\";URI=spiffe://cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account"
  },
  "json": null,
  "method": "GET",
  "url": "https://foo.sample.svc.cluster.local/anything"
}

Execute in-place upgrade to Istio 1.8.x and re-run curl command:
curl -i -v foo.sample.svc.cluster.local:80/anything
> GET /anything HTTP/1.1
> User-Agent: curl/7.35.0
> Host: foo.sample.svc.cluster.local
> Accept: */*
>
< HTTP/1.1 503 Service Unavailable
HTTP/1.1 503 Service Unavailable
< content-length: 195
content-length: 195
< content-type: text/plain
content-type: text/plain
< date: Mon, 15 Mar 2021 21:26:49 GMT
date: Mon, 15 Mar 2021 21:26:49 GMT
< server: envoy
server: envoy

<
upstream connect error or disconnect/reset before headers. reset reason: connection failure, transport failure reason: TLS error: 268435581:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED

Version (include the output of istioctl version --remote and kubectl version --short and helm version --short if you used Helm)
istioctl version --remote
client version: 1.8.3
control plane version: 1.8.4
data plane version: 1.8.4 (6 proxies)

Client Version: v1.15.1
Server Version: v1.16.15-eks-ad4801

How was Istio installed?
Istio-operator - https://istio.io/v1.8/docs/setup/upgrade/in-place/
Additionally, please consider running istioctl bug-report and attach the generated cluster-state tarball to this issue.
Refer cluster state archive for more details.

Please provide client proxy config dump and ingress gateway config dump, and debug log if possible: https://github.com/istio/istio/wiki/Troubleshooting-Istio#sidecargateway-problems.

Hi @bianpengyuan. Attached ingress/proxy debug logs and config dumps.
logs_configdump.zip

Sorry for the delay. I am wondering how does this ever work at 1.7... As the client proxy is expecting the peer's identity to be spiffe://cluster.local/ns/sample/sa/default (i.e. mTLS should be terminated by the sample app proxy). With you configuration, the ingress is terminating mTLS, with identity spiffe://cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account, so client side cert verification fails. Typically the gateway should be configured as a AUTO_PASSTHROUGH, instead of terminating TLS for cross cluster traffics.
Could you provide the same dump from those two proxies with 1.7?

I've got this approach working since 1.6.x.
The main reason I choose to use ISTIO_MUTUAL instead of AUTO_PASSTHROUGH, was regarding the support of canary deployments routing on a cross-cluster setup. So if Cluster 1 has foo and it's VirtualService with subsets v1/ weight 100% and v2/weight 0%, when initiating traffic from Cluster 2 to foo I would get traffic to either subsets, using AUTO_PASSTHROUGH.
Using ISTIO_MUTUAL, the ingress terminates mTLS from Cluster 2 (proxy) to Cluster 1 (ingress), but allows the ingress at Cluster 1 to use the setup of the VirtualService to route traffic accordingly to foo subsets. Please do let me know if there is an easier way to mitigate this concern, as I would love to use AUTO_PASSTHROUGH for cross-cluster comms.
Here's the configdump for the sidecar and ingress on Istio 1.7.8 - proxy_1_7_8_configdump.zip.

Could you provide more detail on did you set up multi cluster? i.e. How did you configure clusters in each cluster's mesh config, and how did you configure traffic from cluster 1 to route to cluster 2 ingress.

For both Cluster 1 and Cluster 2, the IstioOperator is used to install Istio.
Each cluster is using the exact same sample plugged-in CA certificates (so they share the same root CA) as described on https://istio.io/v1.7/docs/tasks/security/cert-management/plugin-ca-cert/.
The IstioOperator CR defines the mesh and network as follows:
Cluster 1
apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
  namespace: istio-system
  name: cluster1
spec:
  profile: default
  values:
    global:
      meshExpansion:
        enabled: false
        useILB: false
      meshNetworks:
        networkcluster1:
          endpoints:
          - fromRegistry: cluster1
          gateways:
          - port: 443
            registry_service_name: istio-ingressgateway.istio-system.svc.cluster.local
        networkcluster2:
          endpoints:
          - fromRegistry: cluster2
          gateways:
          - address: <cluster2-ingress-lb-external-ip>
            port: 443
      multiCluster:
        clusterName: cluster1
      network: networkcluster1

    ingressGateways:
      - name: istio-ingressgateway
        enabled: true

Cluster 2
apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
  namespace: istio-system
  name: cluster2
spec:
  profile: default
  values:
    global:
      meshExpansion:
        enabled: false
        useILB: false
      meshNetworks:
        networkcluster2:
          endpoints:
          - fromRegistry: cluster2
          gateways:
          - port: 443
            registry_service_name: istio-ingressgateway.istio-system.svc.cluster.local
        networkcluster1:
          endpoints:
          - fromRegistry: cluster1
          gateways:
          - address: <cluster1-ingress-lb-external-ip>
            port: 443
      multiCluster:
        clusterName: cluster2
      network: networkcluster2

    ingressGateways:
      - name: istio-ingressgateway
        enabled: true

Pod discovery between clusters is done by following instructions on https://istio.io/v1.7/docs/setup/install/multicluster/shared/#configure-cross-cluster-service-registries.
Both clusters have the following Destination Rule and Gateway on istio root namespace:
DestinationRule
apiVersion: networking.istio.io/v1beta1
kind: DestinationRule
metadata:
  name: cluster-aware-mtls
  namespace: istio-system
spec:
  host: "*.local"
  trafficPolicy:
    tls:
      mode: ISTIO_MUTUAL

Gateway
apiVersion: networking.istio.io/v1beta1
kind: Gateway
metadata:
  name: cluster-aware-gateway
  namespace: istio-system
spec:
  selector:
    istio: ingressgateway
  servers:
  - port:
      number: 443
      name: https
      protocol: HTTPS
    tls:
      mode: ISTIO_MUTUAL
    hosts:
    - "*.local"

Thanks! I think this is actually a bug fixed by https://github.com/istio/istio/pull/26185 as side effect, specifically this line: https://github.com/istio/istio/pull/26185/files#diff-4ab8bb2188afa1dc914f11b5eaab7e1a544454457d25ef3841fdb6f2c23b1d7bR382
The 1.7 logic did not really go through all registries when trying to find service account, instead it only looks at the first registry, and if the registry returns empty list, the function GetIstioServiceAccounts will simply return an empty list.
At 1.8, with #26185, GetIstioServiceAccounts will go through all registries. In fact, this was discussed a bit in this comment thread: https://github.com/istio/istio/pull/26185/files#r466100531
I think the current behavior is desired, which makes only the server application able terminates and verifies the mTLS connection instead of the ingress. cc @nmittler @stevenctl to double check on this.
Re https://github.com/istio/istio/issues/31480#issuecomment-803291657, @nmittler @stevenctl What is the recommended way to achieve this? Does it need to replicate virtual service and destination rule in all clusters? I tried to apply VS and DR in one cluster, and seems like they are not reflected in the other cluster.

Hi, @stevenctl Apologies for intruding on your time, but we are facing a similar challenge where we need to implement canary deployment, while also having the requirement to use ISTIO_MUTUAL in the second cluster ingress gateway. Would you be able to provide any details or guidance on how we could resolve this issue? We appreciate your assistance, thank you. 🙇♂

@elvis-cai Sorry for mentioning you, but have you made any progress on this? We are facing the same situation right now and trying to find some feasible alternative other than replicating VirtualServices across all clusters 😓  Thank you!

Hi @jhonatanmorais you can find the workaround we did here


fixing port #

Changing the port # from 52 to 53.

@cshea15 : Thanks for your contribution! The author(s) have been notified to review your proposed change.

#sign-off


vscode compatibility

First of all, this is a very nice tool, especially the labeling aid! Unfortunately I can only get it working on colab. If I try to use the labeling aid on vscode, it does not work but also does not throw any errors. It just fails silently. I made sure that all jupyter settings are configured correctly.

Hello. I also use VS Code and don't know how to get get the widget to show up in VS Code.
I am using a seperate widget called jupyter-bbox-widget @  https://github.com/gereleth/jupyter-bbox-widget

Thank you for the response. You are right it seems to be a problem with the widget in general on vscode. I will stick to colab for now!


Uncaught TypeError in visual_theme.js line 200

An uncaught TypeError occurs on line 200 in visual_theme.js, resulting in missing up/down vote arrows (and possibly other issues with the page). The assignment of img on line 199 results in null, leading to the error on 200. Presumably the page source changed today, as this was working fine until some time today.
This occurs in Chrome  41.0.2272.89 m on Windows 7 as well as 41.0.2272.118 on XUbuntu 14.04.
Repro steps:
Load any HN item, e.g. https://news.ycombinator.com/item?id=9383905.
Open JS console and note this error, along with missing up/down arrows on all the comments.

Thanks, I'll check it out. I also noticed that comments are rendering incorrectly, it might be related.

+1
Cannot fold comments anymore.

@pkrish, comment folding is noted in another issue and not directly related to this issue.
@gabrielecirulli this issue appears fixed by #75

As mentioned in #75, this should be fixed by 2caab5f


footnote and get rid of questionmark

The question mark is deleted and instead
a footnote explains the uncertainty of predictions.

in response of and solves #6

fixed!


Client-Side UI: Prototype in React (Spike)

Follow on from the work completed in #2272, updated the prototype to show:

A model (called EasyModel) with a CharField and a TextField provided by the example plugin having a React form auto-generated from the serializer/model definition.

This form would have all fields in simplified/basic representation (ex: a single form group/card)

A model (called CustomModel) with a CharField and a TextField provided by the example plugin but the plugin will provide a JSX file to customize the representation of the form (say breaking the fields out into their own cards)

The front end would pull this JSX file from the plugin's code (ex: examples/example_plugin/example_plugin/templates/example_plugin/custom_model_modelform.jsx)

A model (called DynamicModel) with a CharField with Choices ("Yes", "No", "Other") and a TextField provided by the example plugin but the plugin will provide a JSX file to customize the representation of the form

The JSX provided by this model will hide the TextField if "Yes" or "No" is selected on the CharField but will display it if "Other" is selected.

See prototype started in #2272


Resolve Update the Variables and Function changes for the service /v1/bequeath-your-data-and-die

Fixes #169

Reviewer is @vanithavalluripalli9


Different client_id generated for Android on https://www.googleapis.com/oauth2/v3/tokeninfo

Trying to add token on https://www.googleapis.com/oauth2/v3/tokeninfo.
The client ID generated by https://www.googleapis.com/oauth2/v3/tokeninfo is different and the client ID we have on google-services.json is different. But on IOS it's working fine.
Any idea about this issue?

@yoginair
Do you face any issue related to accessTokenExpirationDate in IOS which we received from google end once your google login is done successfully.
We are facing an issue once you login with google account your access_token expiry_date its less than 1 minute.
Did you face this issue.
Any suggestions

hi guys, seems like stackoverflow is a better place to ask these questions, thanks!


Resolved rockpaperscissors

Related Issue

Info about Issue or bug resolved responsiveness of RockpaperScissors Project

Closes: #[issue number that will be closed through this PR]
#349
Describe the changes you've made
Have modified Grid Columns  and added flex to css to make it responsive
A clear and concise description of what you have done to successfully close your assigned issue. Any new files? or anything you feel to let us know!
Describe if there is any unusual behaviour of your code(Write NA if there isn't)
NA
A clear and concise description of it.
Checklist:

[ x ] My code follows the style guidelines of this project.
[ x ] I have performed a self-review of my own code.
[ x ]  I have commented my code, particularly in hard-to-understand areas.
[ x ] I have made corresponding changes to the documentation.
[ x ] New and existing unit tests pass locally with my changes.

Screenshots
Put any screenshot(s) of the project here.

Few suggestions On Desktop view the format is breaking
| Original | Yours |

Few suggestions On Desktop view the format is breaking
| Original | Yours |

Make mobile responsive
Let me know if you need any help.

Hey @991rajat , I'm trying to make the mobile view responsive, but it changed the desktop version, can you help with it? Thanks in advance.

What problem are you facing? DM on discord

@nagasaisriya Any updates?

@nagasaisriya Any updates?

sorry, I can't get anymore ideas to improve, can you merge it please?,I've been trying hard but it has many conflicts, you can open it for others.

Okay Resolve the commits Please.

@nagasaisriya any updates ? or should i close this PR and open the issue for others ?

@nagasaisriya any updates ? or should i close this PR and open the issue for others ?

You can open this issue for others


No Module named jprops

First, thanks for all the work. Looks great. Tried to update from pypi package (1.1.1) to 1.2.0 version. When trying to install I'm getting:
D:\git\robotframework-allurereport>setup.py install Traceback (most recent call last):   File "D:\git\robotframework-allurereport\setup.py", line 2, in <module>     from AllureReportLibrary.version import VERSION   File "D:\git\robotframework-allurereport\AllureReportLibrary\__init__.py", line 1, in <module>     from AllureReportLibrary import *   File "D:\git\robotframework-allurereport\AllureReportLibrary\AllureReportLibrary.py", line 1, in <module>     from AllureListener import AllureListener   File "D:\git\robotframework-allurereport\AllureReportLibrary\AllureListener.py", line 25, in <module>     import jprops ImportError: No module named jprops
Would be great if you could give some directions on this issue, or even better if i can upgrade from pypi

There is a dependency on jprops. This can be installed using pip install jprops.

Thanks. As you can tell I'm a novice pythoneer ;-) Full list of dependencies for others:

jprops
oauthlib
sqlalchemy

Should be installed before setup.py of this package.


fix: unexpected empty lines when copying-pasting

close #563 #1524
In #1524, the author has not responded for a long time. So I submit the PR.👀

@boojack PTAL


ORA-12514, TNS:listener does not currently know of service requested in connect descriptor.

When i deploy the image to a service like AWS ECS or Kubernetes the database is setup correctly but while connecting from a client the connection is rejected with ORA-12514, TNS:listener does not currently know of service requested in connect descriptor.  When i run the image locally or on an separate instance the connection issue doesnt exist. What might cause this issue? I added in a second message the logs from the container, it seems the listener is not starting properly.
Used jdbc string for connecting: jdbc:oracle:thin:@<ip-address>:1521/XE
I am using the default gvenzl/oracle-xe image.

Issue still exists, so far i think this issue comes from different network modes available. When using a host with a network mode bridge the database listener works as expected. For network mode awsvpc and host the listener does not work correct.
Different Network modes for AWS ECS (see:https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-networking.html):
awsvpc:The task is allocated its own elastic network interface (ENI) and a primary private IPv4 address. This gives the task the same networking properties as Amazon EC2 instances.
bridge: The task uses Docker's built-in virtual network, which runs inside each Amazon EC2 instance that hosts the task.
host: The task bypasses Docker's built-in virtual network and maps container ports directly to the ENI of the Amazon EC2 instance that hosts the task. As a result, you can't run multiple instantiations of the same task on a single Amazon EC2 instance when port mappings are used.
Does the database image need a specific network mode?

Resolved by making changes to the VPC. Set enable_dns_hostnames = true.

Hi @bauerjan93,
Glad to see that your issue was resolved and thanks a lot for the detailed information. This will help other users running into the same issue!
Last but not least, thanks for using these images!


Error on the return value of CloudinaryLabs\CloudinaryLaravel\CloudinaryAdapter::readStream()

The readStream method of a storage driver is likely expected to return a resource type, but in this package, it is set to bool.
https://github.com/cloudinary-community/cloudinary-laravel/blob/434bb1fff2ef54e68bf5e4e05dbf8cf6bb3cf37b/src/CloudinaryAdapter.php#L291
Upon inspecting its return type, it appears that a boolean value is not returned.
https://github.com/cloudinary-community/cloudinary-laravel/blob/434bb1fff2ef54e68bf5e4e05dbf8cf6bb3cf37b/src/CloudinaryAdapter.php#L291-L296
I’m not sure if a fix is in the pipeline.

Is this related to #82?

@joshmanders no, it is not related to #82


Add network policy chapter to Security section of EKS Workshop

What would you like to be added?
Amazon EKS is planning to launch native Network Policy support within Amazon VPC CNI. The chapter will help customers understand different components and implementation details.
Why is this needed?
The chapter will be a launch material helping customers with adoption of network policies. With native support for network policy in Amazon VPC CNI, when running Kubernetes on AWS, you can now create policies that isolate sensitive workloads protecting them from potential threats. Network policies also helps you achieve compliance with regulatory requirements by enforcing access controls and preventing unauthorized access to critical resources. This level of granular control enables you to implement the principle of least privilege, ensuring that only authorized pods can communicate with each other and that unauthorized access attempts are blocked. Network policies provide defense-in-depth mechanism, allowing you to extend the security features provided by Amazon VPC, such as EC2 security groups (SGs) and network access control lists (NACLs).

Closing as duplicate of #228


Modal execution documentation is not available

Issue in /src/pages/ps_reference/index.md
https://developer-stage.adobe.com/photoshop/uxp/2022/ps_reference/media/executeasmodal/
this link gives 404

I can confirm this is true, and the page it ought to point to is here: https://github.com/AdobeDocs/uxp-photoshop/blob/main/src/pages/ps_reference/media/executeasmodal.md

@AAverin, does the now public location: https://www.adobe.io/photoshop/uxp/2022/ps_reference/media/executeasmodal/ work for you?

Clicking in the menu on the left sill leads to https://developer-stage.adobe.com/photoshop/uxp/2022/ps_reference/media/executeasmodal/ that fails


MC 1.19.2 Fabric Mod v2.6.4    Wand menu button sound effect volume

Opening the conf menu with the button in the wand menu seems to increase the dropper/dispenser click sound effect that plays when any buttons in the wand menu are pressed. Exiting the conf menu and pressing the button again further increases the volume of the button sounds.
I've boxed the button I'm referring to in red in the attached image.

Closing the wand menu resets the volume back to its original setting.
Also, I can't figure out which volume setting will change that sound's volume, only the master volume seems to change it.

I'm getting the same issue in 1.19,2
A similar volume issue occurs when using grid mode, incrementing the width is normal volume while incrementing the height is very loud


"only supported on Linux" error on Linux

I am on Linux (Arch) with xclip installed.
When I use :Silicon without specifying a path, I get the error that copying to clipboard is only supported on Linux.

yes, I used silicon for this image :)
This has to do with this line https://github.com/segeljakt/vim-silicon/blob/master/autoload/silicon.vim#L91
Running has('linux') returns false (I do not know vimscript).
I am happy to provide any additional info you might need about my system.

Thanks for the report, I thought has('linux') would return true for all distributions of Linux but it appears not. I replaced has('linux') with executable('xclip'), so hopefully it will work now :)
If you experience any problems or performance degradation please reopen the issue and let me know.

Works without problems now, thanks!


A sincere request for the CAD model file

Thanks for your fantastic work! Could you  please offer the Tango.ply file?

Hello,
We cannot share the CAD model per agreement with OHB Sweden. The keypoint information however are available @ tangoPoints.mat file


a few fixes and suggestions

firstly: thanks so much for this - it allowed me to get started with relational databases in fastapi really quickly. Thanks!!
I noticed a couple of things:

it looks like alembic really wants you to set nullable=False fo rthe id field - if not every subsequent migration will try and do something weird to the id column. This confused me for a lot longer than I'll be willing to admit.

instead of keeping two sets of db settings (one for alembic and one for the app) it might be better to use a shared BaseSettings object to keep track of that:
settings.py:

from pydantic import BaseSettings

class Settings(BaseSettings):
    db_name: str = "app"
    db_user: str = "postgres"
    db_password: str = "postgres"
    db_host: str = "localhost"
    db_port: int = 5432

    def db_conn_string(self):
        return f"postgresql+asyncpg://{self.db_user}:{self.db_password}@{self.db_host}:{self.db_port}/{self.db_name}"

in db.py:
settings = Settings()
engine = create_async_engine(settings.db_conn_string(), echo=True, future=True)

in env.py:
import asyncio
from logging.config import fileConfig

from alembic import context
from sqlalchemy.ext.asyncio import create_async_engine
from sqlmodel import SQLModel

from app.settings import Settings

settings = Settings()

config = context.config
fileConfig(config.config_file_name)
target_metadata = SQLModel.metadata

def run_migrations_offline():
    url = settings.db_conn_string()
    context.configure(
        url=url,
        target_metadata=target_metadata,
        literal_binds=True,
        dialect_opts={"paramstyle": "named"},
    )
    with context.begin_transaction():
        context.run_migrations()

def do_run_migrations(connection):
    context.configure(connection=connection, target_metadata=target_metadata)
    with context.begin_transaction():
        context.run_migrations()

async def run_migrations_online():
    connectable = create_async_engine(settings.db_conn_string(), echo=True, future=True)
    async with connectable.connect() as connection:
        await connection.run_sync(do_run_migrations)

if context.is_offline_mode():
    run_migrations_offline()
else:
    asyncio.run(run_migrations_online())

i don't know if you take PRs for this project, but for the first issue I saw some comment in the alembic github discussion that looked very similar to this code so it would probably be a big help to the community if that was fixed. If you want these suggestions in a PR instead I'd be happy to make one.

Thanks for this. Yes, please do add a PR. I'll then up the related blog tutorial.

Hello @trondhindenes @mjhea0 I have create a PR including the suggestions https://github.com/testdrivenio/fastapi-sqlmodel-alembic/pull/8


App/server overview is not sufficient to address privacy conerns

The README for this project is very generic and not useful at all in determining how the app works. The linked video is too deep in the weeds of how to run Docker, displays functions, hours rounding, etc, but fails to identify how exactly device proximity data to other diagnosis keys is stored. Something does not add up here.
Consider this database schema in the video at this time stamp:
https://youtu.be/5GNJo1hEj5I?t=885
It shows the diagnosis key in key_data and transmission_risk_level that clearly is computed elsewhere, but nothing says where that other data is stored and what is the retention policy for that data.
Specifically, since diagnosis for any diagnosis key always comes in later (i.e. after the interaction was already recorded), all diagnosis keys and their proximity to other diagnosis keys must be stored somewhere until one of them receives a positive diagnosis.
So, where exactly this information is stored? You need to describe it better, including on the government page for the app, instead of just saying a bunch of words that sound secure, like "random codes".

Thanks the questions @gh-andre, we've had a comment on this previously on the app's repo as well.
I'm going to move this issue up into the 'covid-alert-documentation' repository as well, as that'll help us centralize efforts on improving the clarity and consistency of our documentation.
Do you have a specific set of questions that you'd like clarity on to help us focus our efforts?


Draft initial process for electing voting members from the non-impact projects.

How do non impact project elect their representatives? Process for election + voting should be documented.

Thoughts from Nick/Michael brainstorm and discussion in bootstrap meeting
https://docs.google.com/document/d/1h5Z2gzTmJ1lzY3-5Do0NQAZTc48dRYeEA71Q9SKleQE/edit

Here is an example of using Helios voting inspired by the OSI board election
https://vote.heliosvoting.org/helios/elections/0b5d2178-6530-11e9-b1af-3a80b3d3e862/view
details --> https://wiki.opensource.org/bin/Main/OSI+Board+of+Directors/Board+Member+Elections/

Currently the OSI is using Helios Voting to manage and administer our elections.

Each eligible voter (Individual Member or Affiliate Member Representative) is  pulled from CiviCRM and batch uploaded in to Helios.
A voter alias is generated for each voter where identities are replaced with aliases, e.g. "V12", in the ballot tracking center.
The ballots are generated with the candidates names randomized on each ballot for each voter.
Voters will be able to vote for as many candidates as seats open representing their constituency.

For example, if there are two Individual Member seats open, Individual Members may vote for two candidates on their ballots; if there are three Affiliate Member seats open, Affiliate Representatives may vote for three candidates on their ballot. (Individual Members may only vote for candidates running for Individual Member Seats, and Affiliate Representatives may only vote for candidates running for Affiliate Member Board seats).

Those candidates who receive the greatest number of votes (i.e. Member vs. Affiliate) will be submitted to the Board for appointment.
If there are two Individual Member seats open, the two candidates with the most votes will be declared the winners. For example, if Candidate A receives 100 votes, Candidate B receives 500 votes, Candidate C receives 50 votes, and Candidate D receives 1000 votes, then Candidates B & D would be declared the winners.
Importantly, per the OSI By-laws these elections are advisory, and the OSI Board must vote to adopt the results formally.

helios example: I assume the instructions to voters can be modified? it was unclear that you could vote for multiple candidates.

@Jonahss I'm not 100% if we can add more info on the landing page, but we can definitely include it in an email

@MylesBorins this

Voters will be able to vote for as many candidates as seats open representing their constituency.

does not seem to match what you were mentioning.  I had thought you said each person could vote for any many candidates as they wanted.

How can we specify who can vote in Helios?

@mhdawson I think that the "constituency" bit there is a bit more generic for the OSI board election as it was for all community representatives. We likely need to augment the docs for our use case. The link above implements the spirit of what was discussed
@mcollina right now it was set as open, but we can submit specific emails and keep to voting list limited to the list of imported voters

@Myles thanks for the clarification. I had thought you'd mentioned that OSI voting allowed you to vote for as many candidates that you wanted.  Either way I still think its a good idea.

@mhdawson for the OSI election that I participated in I was able to vote for every candidate. I'm unsure why the copy paste is not aligning with my experience
¯\_(ツ)_/¯

Here's an example of the other system we discussed.  Same excellent poll (strong showing in the poll question, Myles, well done).
This is a public poll, but you can also set it to private so that each person gets a magic link.
https://civs.cs.cornell.edu/cgi-bin/vote.pl?id=E_7de60f6d9d38711f&akey=53e8e722a450a21e

I liked the rank choice voting in the civs demo more than the simple checkboxes of the helios demo. Also liked how you could have no opinion on some of the candidates.

@brianwarner it does say that the rankings will be publicly visible afterwards.  Even if they are anonymized the first 2 rankings might give it away. It is possible that they be private?

@mhdawson Yes, this can be configured on a per-poll basis.
If it's helpful, here is the poll creation page, which lays out all of the available options: https://civs.cs.cornell.edu/civs_create.html

They both seem to work pretty well.  Of the 2 though for some reason I'm thinking being able to vote for as many as I'd like without having to rank them might work best in the situation we are in.

Besides the actual voting method, I have three questions:

Do you envision some platform for candidates to present themselves before the vote? As the timeframe is getting rather tight here if this is expected to be concluded by end end of the month (or earlier?), I'd suggest opening an issue in this repo with candidate presentations in its comments.
Are emeritus projects eligible to vote for representatives?
What's a "voter" in this case, is it a project or an individual? If an individual has a controlling interest in more than one project, are they allowed to cast more than one vote?

I too am wondering what a voter is.
If it's an individual, assuming any maintainer of a project could vote, projects with a greater number of maintainers would have more representation.
If it's a project, then each project needs to vote for who they want to vote for.  Jeez, I hope my project votes for me...

My understanding would be that a voter would be a representative from the project (up to the project to decided how to select their representative). Each project would have the same number (we discussed 2).  There may be one or more candidates from each project.  Depending on the voting method chosen the representatives can potentially vote for more than 2 candidates, possibly in a ranked order depending on the system.  For example, in one system they can vote for any number of candidates and the weighting is equal, in another, the votes are ranked in order of preference.  In either case you will need votes from other projects as well to win.

PR with initial cut: https://github.com/openjs-foundation/cross-project-council/pull/220
Key thing to note is that as written there is no ranking of candidates, voters either vote or candidate or leave them out.  This is one of the 2 options we've discussed in this issue so if you feel ranking should be included please comment on the PR.


Print the installed dependency tree on resolve

Once you install a dependency, it should print that dependency tree in the CLI to render "successful".
The same thing should happen after typings install to show what actually got installed. That will basically be typings ls output.

Released with v0.1.3


Ignore empty folders

We have the "sync bookmarks with highlights" option, but when we run a sync, the collection structure is replicated as empty folders. It would be nice if the plugin avoided creating empty folders.

Implemented in 0.0.15


Using vswhere to find BuildTools

Someone suggests to use vswhere to locate msbuild. However, it seems that current release of vswhere does not list "BuildTools edition of VS". I understand that BuildTools is not a real edition of VS, but rather an extracted component from VS. (It is located inside VS install directory.)
Could vswhere also list plain BuildTools installation? Or could anyone suggest a proper way to locate msbuild? Or, is checking the directories the only proper way to locate msbuild as, for instance, gulp-msbuild does.)

@n9 see #61

Thanks.


Tab-Navigation

Tab-Navigation is important for users who are unable to use a mouse (or prefer not to use one) to properly navigate through a web application. Two main things I've noticed:
1. The tab order is not always correct and sometimes confusing. In some places, the focus doesn't shift where you expect it to.
My Firefox accessibility tab (right click > inspect > accessibility) and my Wave extension show the correct tab order. So I'm not exactly sure what's causing this.
Example:
When I navigate to "Speakers" (and open this view/page with enter) and press Tab again, the focus isn't where I expected it to be. I would expect the focus to be on "Home"  ("Startseite") in the navigation, or back to the logo "Opencast University", or the breadcrumbs' home icon.
Instead the focus is:

on "D-BSSE: Lunch Meetings Molecular Systems Engineering" (see screenshot) [Firefox 108 (Win 11) & FF 107 (Fedora 35)]
or on "D-ARCH" [Chrome 108 (Win 11 & Fedora 35)]

2. The focus-border is very thin and not consistent everywhere, there are a few elements that have a different border-color and border-with. The color contrast is about 4.5 which is good, but I would make the border stand out more, maybe a bit thicker.
Example:
The buttons have a different border-color and border-width than other elements (like the navigation, see screenshot above). The border is thick and grey. Exception is the login button, here the border-color is black (in Firefox and Chrome)
Depending on the Browser, links have a different border-color. Links are outlined black in Chrome and blue (a different blue like the navigation has) in Firefox (see last two pictures).

Focus border in Chrome:

Focus border in Firefox:

The tab order appears to have been fixed, I believe with #680.


[Bug]: NeoPixel is not functioning properly

What happened?
The NeoPixel should be lighting and flashing different colors when in the different operating modes. Currently it does not work in normal operation. However, it works fine when an error occurs. This suggests a software issue.
Version
v1.5.0
What board revisions are you seeing the problem on?
Rev F4
Relevant PlatformIO log output
No response
Relevant ESP Debug log output
No response

NeoPixel debug printout from pulseLED():
[1970-01-01T00:11:38.458] [DEBUG] Color: 65280
[1970-01-01T00:11:38.459] [DEBUG] Brightness: 0
[1970-01-01T00:11:38.461] [DEBUG] Increasing: 1
[1970-01-01T00:11:38.462] [DEBUG] Color: 65280
[1970-01-01T00:11:38.463] [DEBUG] Brightness: 0
[1970-01-01T00:11:38.464] [DEBUG] Increasing: 1
[1970-01-01T00:11:38.470] [DEBUG] Color: 65280
[1970-01-01T00:11:38.471] [DEBUG] Brightness: 0
[1970-01-01T00:11:38.471] [DEBUG] Increasing: 1
[1970-01-01T00:11:38.473] [DEBUG] Color: 65280
[1970-01-01T00:11:38.474] [DEBUG] Brightness: 0
[1970-01-01T00:11:38.474] [DEBUG] Increasing: 1
[1970-01-01T00:11:38.480] [DEBUG] Color: 65280
[1970-01-01T00:11:38.482] [DEBUG] Brightness: 0
[1970-01-01T00:11:38.483] [DEBUG] Increasing: 1
[1970-01-01T00:11:38.484] [DEBUG] Color: 65280
[1970-01-01T00:11:38.485] [DEBUG] Brightness: 0
[1970-01-01T00:11:38.487] [DEBUG] Increasing: 1
[1970-01-01T00:11:38.493] [DEBUG] Color: 65280
[1970-01-01T00:11:38.494] [DEBUG] Brightness: 0
[1970-01-01T00:11:38.494] [DEBUG] Increasing: 1
[1970-01-01T00:11:38.495] [DEBUG] Color: 65280
[1970-01-01T00:11:38.497] [DEBUG] Brightness: 0
[1970-01-01T00:11:38.498] [DEBUG] Increasing: 1
[1970-01-01T00:11:38.503] [DEBUG] Color: 65280
[1970-01-01T00:11:38.504] [DEBUG] Brightness: 0
[1970-01-01T00:11:38.505] [DEBUG] Increasing: 1
[1970-01-01T00:11:38.507] [DEBUG] Color: 65280
[1970-01-01T00:11:38.508] [DEBUG] Brightness: 0
[1970-01-01T00:11:38.509] [DEBUG] Increasing: 1
[1970-01-01T00:11:38.514] [DEBUG] Color: 65280
[1970-01-01T00:11:38.515] [DEBUG] Brightness: 0
[1970-01-01T00:11:38.516] [DEBUG] Increasing: 1
[1970-01-01T00:11:38.517] [DEBUG] Color: 65280
[1970-01-01T00:11:38.519] [DEBUG] Brightness: 0
[1970-01-01T00:11:38.520] [DEBUG] Increasing: 1
[1970-01-01T00:11:38.525] [DEBUG] Color: 65280
[1970-01-01T00:11:38.526] [DEBUG] Brightness: 0
[1970-01-01T00:11:38.527] [DEBUG] Increasing: 1
[1970-01-01T00:11:38.529] [DEBUG] Color: 65280
[1970-01-01T00:11:38.530] [DEBUG] Brightness: 0
[1970-01-01T00:11:38.531] [DEBUG] Increasing: 1
[1970-01-01T00:11:38.537] [DEBUG] Color: 65280
[1970-01-01T00:11:38.538] [DEBUG] Brightness: 0
[1970-01-01T00:11:38.539] [DEBUG] Increasing: 1
[1970-01-01T00:11:38.540] [DEBUG] Color: 65280
[1970-01-01T00:11:38.541] [DEBUG] Brightness: 0
[1970-01-01T00:11:38.542] [DEBUG] Increasing: 1
[1970-01-01T00:11:38.550] [DEBUG] Color: 65280
[1970-01-01T00:11:38.551] [DEBUG] Brightness: 0
[1970-01-01T00:11:38.552] [DEBUG] Increasing: 1
[1970-01-01T00:11:38.553] [DEBUG] Color: 65280
[1970-01-01T00:11:38.554] [DEBUG] Brightness: 0
[1970-01-01T00:11:38.556] [DEBUG] Increasing: 1
[1970-01-01T00:11:38.561] [DEBUG] Color: 65280
[1970-01-01T00:11:38.562] [DEBUG] Brightness: 0

Fixed by adding ++ to the brightness incrementer. Also added state change functionality. Closing


One-page UI for the "Deploy Bicep File" flow

Currently the "Deploy Bicep File" command takes inputs one after the other from the user via textboxes or dropdowns, and display results in a console window. This is OK for showing 1 or 2 dialogs, but becomes quite clunky when taking many inputs, especially when there is a pause between showing dialog boxes. It would be really nice if we could instead show all of the options on a single pane.
Prototype available on this branch.
See Installing Nightly if you'd like to try it out and give feedback.
Here's a demo of the prototype:
https://user-images.githubusercontent.com/38542602/210488890-173c6d59-bb0c-45f2-884b-911207c60db2.mov

Pros: It would be nicer to be able to go to a page and quickly change only the option you want to change, without having to go through a bunch of prompts.  (NOTE: There are ways to improve the current system while still using prompts, such as adding buttons, e.g. for settings or to easily save/repeat a previous deploy, etc.)
Cons: It opens ourselves up to more responsibility with accessibility design and testing.

As a team that makes heavy use of modules as building blocks for larger Bicep projects, this tool would be invaluable during the module development process.  We often find it difficult to properly "test" the module beyond some cursory linting and maybe PSRule until we get it incorporated into a larger project.
If we had a super easy way to run the Validate step for the modules against a real Azure RG like the recent demo showed, that would greatly enhance the feedback loop at the module level.
A few things to think about (as others had mentioned in the recent call):

Persistence of param values across VS Code restarts.
Persistence of login, like with a PowerShell Terminal session (not necessarily across restarts).
Easily set the Scope - if based on the login, at least easily switch the target RG.
If doing deployments, auto-increment/update the Deployment name to avoid wiping out history in the RG.


refactor eval_semantic_segmentation

split from #869
refactor eval_semantic_segmentation
use same format as eval_detection

pfnCI,test this please

pfnCI,test this please

Can you use batchsize here?
https://github.com/chainer/chainercv/blob/0557b8abe6df2bae50bbda83478762ab96ec25ba/examples/semantic_segmentation/eval_semantic_segmentation_multi.py#L40
After the change, the code should look like here https://github.com/chainer/chainercv/blob/master/examples/detection/eval_detection_multi.py#L39

Thanks, I updated.


remove sensitive git credential log

To solve https://github.com/rancher/rancher/issues/10694

LGTM


base64_decode() issue

i'm getting  segfault on conversion of "MA==" base64 string to Opaque from utils_base64ToOpaque function in the following line:
*bufferP[result_index - 3] = (tmp[0] << 2) | (tmp[1] >> 4);

Yes, this implementation is bugged.
I am considering removing it as it is not used currently in wakaama and it is not exposed.

actually i think that such api is required(#273 ), i'm not sure that the best way is to implement it from scratch.

In #271 I moved the base64 decode function to examples/shared/commandline.c until we figure something adressing #273.

utils_base64ToOpaque() is now base64_decode() and part of examples/shared

Is there a plan to fix this api?

Personnaly, like every other issues tagged examples, it is pretty low on my TODO list.
base64 is very common so it should be easy to replace the code with a working version.

I think this is resolved by utils_base64Decode introduced in #428.

It should be fixed.
(should if be backported in a 1.x version ? #487)


removed --install option from --namespace to solve inconsistency with the helm lint documentation

Solves https://github.com/kubernetes/helm/issues/4038
The bug was that, in the docs, when using the --namespace flag, it also requires the --install flag, which doesn't exist. I have changed the wording and ran make docs to auto update the docs accordingly

thanks @yenicapotediaz for pointing this out. :)


insecure injection is crashing since last upd

globals = **reinterpret_cast< c_global_vars_base *** >( ( *reinterpret_cast< uintptr_t ** >( client )[ 11 ] + 10 ) );
this line seems crashing, is indexes was updated?

0 + 27

Idk why but 11 + 10 works fine for me but 0 27 im getting insta crash?

globals = **reinterpret_cast< c_global_vars_base *** >( ( *reinterpret_cast< uintptr_t ** >( client )[ 0 ] + 0x1F ) );
working fine (tested in insecure mode)


Auto Tenant Mount + Limits

"Do not enable this setting for libraries with more than 5,000 files or folders."
This line is still quite confusing in the docs as it is not clear whether this is a only a strong recommendation or a functionality requirement i.e. it will break - and has come up multiple times in previous issues
It was discussed in https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/issues/1834
Where a PR was submitted and then @aarins stated that the recommendation is not to use this policy on libraries with more then 5000 files.
As previously stated by others, the service descriptions
https://docs.microsoft.com/en-gb/office365/servicedescriptions/sharepoint-online-service-description/sharepoint-online-limits#sync
We then have https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/issues/2523 which was opened asking for clarification then closed stating this is specifically about the tenant automount policy.
https://docs.microsoft.com/en-us/onedrive/deploy-on-windows?WT.mc_id=EM-MVP-5004228 states that you can auto-configure sharepoint site synchronisation by called odopen:/sync/... - and then also references that you can use the policy do this
The support article at https://support.microsoft.com/en-us/office/map-a-network-drive-to-a-sharepoint-library-751148de-f579-42f9-bc8c-fcd80ccf0f53?msclkid=6695f2cdcff211ecb04ae627ee977064 states that whilst you can use a network drive to map to sharepoint, that is uses a component linked to internet explorer which has been deprecated and recommends that sync is used instead
I'm therefore trying to understand whether:
a) it's OK to use odopen://sync... on a library with >5000
b) Whether the "do not enable this setting for libraries" on the auto mount policy is just a recommendation (or actually a fixed limit aka groove.exe)
c) Whether the behaviour of the client when connecting to the library that has been shared by the auto mount policy is different to the behaviour of the client when it has been sync'd via odopen:// url or manually
d) What happens if a tenant auto mount policy is enabled on a library with <5,000 files and then the library were to grow to exceed 5,000
Thanks

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 04ad2f16-c861-7a1b-5c1d-e4601e8f3855
Version Independent ID: c47df4cd-f706-d807-5eac-172fba1e500f
Content: Use OneDrive policies to control sync settings - OneDrive
Content Source: OneDrive/use-group-policy.md
Service: one-drive
GitHub Login: @adeejoseph
Microsoft Alias: adjoseph

Hello @grangeway
I am looking into this

Hello @grangeway I am still waiting on an answer from the right people

This line is still quite confusing in the docs as it is not clear whether this is a only a strong recommendation or a functionality requirement i.e. it will break - and has come up multiple times in previous issues

I received feedback from the Team that this is a soft limit / recommendation

so I think that covers that A,B,D are soft limits - what about C on the implementation?

Hello @grangeway how are you?
About C

If you enable this setting, the OneDrive sync app automatically syncs the contents of the libraries you specified as online-only files the next time the user signs in. The user isn't able to stop syncing the libraries.

@get-itips - not too bad thanks. I guess that answers all the questions I raised - so to move this back to the documentation and whether we should just close this issue, or as it's caused confusion in the past, I'll suggest a proposal to reword the following:
Do not enable this setting for libraries with more than 5,000 files or folders. Do not enable this setting for the same library to more than 1,000 devices.
To:
We recommend you consider whether automount is appropriate for your environment and libraries:

Do not sync the same library to more then 1,000 devices, due to Windows Push Notification Services limits.
The current recommendation is that this setting should not be used for libraries with more than 5,000 files or folders, and consideration should be given to the SharePoint limits


[feature] Ctrl + Click to duplicate a shape

A common feature in other drawing programs that folks may be used to using is using Ctrl + click to duplicate a shape. Currently, to duplicate a shape, we can do Ctrl + c, Ctrl + v to copy-paste and the duplicated shape is overlaid on the original shape leaving the success of the copy-paste ambiguous ("Did it do anything?...Oh, wait, yes, I can drag a duplicated shape off").
It would be much faster to be able to just use Ctrl + click especially since I think one of the common use cases for the app is drawing flow charts or other diagrams that have repetitive shapes.
Thanks for the consideration!

Hi, closing this as we won't be adding new features to this version of tldraw. Check https://github.com/tldraw/tldraw for the latest!


with mask output is nan

I am trying to run image captioning example with the mask for caption. Without mask forward pass runs properly but with mask I get the nan. You can reproduce by running following simple example.
import torch
from x_transformers import ViTransformerWrapper, TransformerWrapper, Encoder, Decoder

encoder = ViTransformerWrapper(
    image_size = 256,
    patch_size = 32,
    attn_layers = Encoder(
        dim = 512,
        depth = 6,
        heads = 8
    )
)

decoder = TransformerWrapper(
    num_tokens = 20000,
    max_seq_len = 1024,
    attn_layers = Decoder(
        dim = 512,
        depth = 6,
        heads = 8,
        cross_attend = True
    )
)

img = torch.randn(1, 3, 256, 256)
caption = torch.randint(0, 20000, (1, 1024))
mask = torch.ones_like(caption, dtype=torch.bool)
encoded = encoder(img)
decoder(caption, context = encoded, mask = mask)

output:
tensor([[[nan, nan, nan,  ..., nan, nan, nan],
         [nan, nan, nan,  ..., nan, nan, nan],
         [nan, nan, nan,  ..., nan, nan, nan],
         ...,
         [nan, nan, nan,  ..., nan, nan, nan],
         [nan, nan, nan,  ..., nan, nan, nan],
         [nan, nan, nan,  ..., nan, nan, nan]]], grad_fn=<UnsafeViewBackward>)

@DrHB hmm that's weird, i'm running your example and i see
tensor([[[-0.4690, -0.1911, -0.3346,  ..., -0.5400, -0.2755,  0.9568],
         [-0.2044, -0.1291, -0.0293,  ..., -0.5013, -0.7330,  0.7467],
         [-0.2840,  0.3205, -0.2971,  ..., -0.7514, -0.6133,  0.6637],
         ...,
         [ 0.3447, -0.6681, -0.8066,  ..., -1.1617, -0.4271, -0.5544],
         [ 0.2771, -0.7323, -0.8410,  ..., -1.0202, -0.3535, -0.5067],
         [ 0.3569, -0.7768, -0.7122,  ..., -0.9473, -0.4585, -0.6757]]],
       grad_fn=<AddBackward0>)

tensor([[[-1.0632,  0.2720,  0.1282,  ...,  0.2447, -0.7386,  0.3464],
         [-0.8407,  0.1912,  0.1427,  ...,  0.3989, -0.9206,  0.4414],
         [-0.5831, -0.0275,  0.2718,  ...,  0.2846, -0.9695,  0.4377],
         ...,
         [ 1.2271,  1.1882,  0.2487,  ...,  0.4520, -0.8317,  0.6442],
         [ 1.1818,  1.1907,  0.1437,  ...,  0.4029, -0.7247,  0.7719],
         [ 1.1336,  1.1832,  0.1195,  ...,  0.4593, -0.6084,  0.6281]]],
       grad_fn=<AddBackward0>)

hmm i get an output - what version of x-transformers are you on? (and version of pytorch, etc)

Pytorch version 1.7.1+cu101,
x_transformer   x_transformers-0.10.1

I updated Pytorch. It works now. Thank you.


Depend on js-beautify directly

vscode-html-languageservice depends on js-beautify directly. However, it's not aware of scss, less regions. It's also causing problems like #77.
js-beautify actually supports scss and less, so vetur will just depend on it directly.
Overall:

html/css/scss/less/js formatting will be supported using js-beautify
Have a default setting for each supported languages, but also expose settings passing to js-beautify, for example:

"vetur.vue-html.format.config": ".htmlbeautifyrc"
"vetur.css.format.config": ".cssbeautifyrc"
"vetur.js.format.config": ".jsbeautifyrc"

Other languages don't have any reliable formatters yet, so just disable them all
If someone is interested in having formatting for a specific language, open a new issue with link to an actively maintained formatter

Will use https://github.com/mrmlnc/vscode-pugbeautify for jade/pug.

wonderful~! waiting for the new version~~

Formatters are temporarily disabled until this feature is addressed.

Looking forward to the new version..
I really need the formatter..

I really need the formatter too !~~~~

+1

@octref Couldn't you just disable the formatter per default and make it accessible per workspace settings? I don't think that the added new lines are such an big problem.

It was working fine for me for basic setups, wasn't it? Would like to see it enabled back.

It was working fine for basic setups, wasn't it? Would like to see it enabled back.

This is top on my list. Give me a day or two to work on it.

So here is how it goes. Notice html/css/js/scss/less are all formatted, whereas sass/stylus/pug are left alone.

Will add initial indentation to the template part and remove the initial indentation on js and make a release.

Stole these config from https://github.com/victorporof/Sublime-HTMLPrettify
const htmlOptions = {
  brace_style: 'collapse', // [collapse|expand|end-expand|none] Put braces on the same line as control statements (default), or put braces on own line (Allman / ANSI style), or just put end braces on own line, or attempt to keep them where they are
  end_with_newline: false, // End output with newline
  indent_char: ' ', // Indentation character
  indent_handlebars: false, // e.g. {{#foo}}, {{/foo}}
  indent_inner_html: false, // Indent <head> and <body> sections
  indent_scripts: 'keep', // [keep|separate|normal]
  indent_size: 2, // Indentation size
  max_preserve_newlines: 0, // Maximum number of line breaks to be preserved in one chunk (0 disables)
  preserve_newlines: true, // Whether existing line breaks before elements should be preserved (only works before elements, not inside tags or for text)
  unformatted: ['a', 'span', 'img', 'code', 'pre', 'sub', 'sup', 'em', 'strong', 'b', 'i', 'u', 'strike', 'big', 'small', 'pre', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6'], // List of tags that should not be reformatted
  wrap_line_length: 0 // Lines should wrap at next opportunity after this number of characters (0 disables)
};

const cssOptions = {
  end_with_newline: false, // End output with newline
  indent_char: ' ', // Indentation character
  indent_size: 2, // Indentation size
  newline_between_rules: true, // Add a new line after every css rule
  selector_separator: ' ',
  selector_separator_newline: true // Separate selectors with newline or not (e.g. 'a,\nbr' or 'a, br')
};

These will be used as initial default, let me know what you agree & don't agree with.
I'll add capability to specify your own js-beautify config later.

Check out 0.5.2 and let me know how it works.
Still yet to be done:

[ ] allow to specify own options
[ ] pug formatter

pressing shift-alt-f for multiple times will increase the indentation of html <!-- --> comments:

became

and became

0.5.4 preserves new lines for html, and uses force-aligned to align attributes as @beeplin suggested in #77
Before:

After:

Seems css/scss/less preserve new lines option is being added this weekend, https://github.com/beautify-web/js-beautify/pull/1146
I'll add it once it lands in js-beautify.

v0.5.4 is wonderful :)

0.5.6 brings CSS preserve_newlines from js-beautify, and is set as default:

Thanks to @beeplin for submitting the bug, but please, please, please @octref find a way to specify:
"html.format.wrapAttributes": "auto"
as you mentioned previously in this thread (allow to specify own options).
Thank you for your work!

@danikane Will do soon.

@danikane This is already in master so closing. Also auto is set as default but people can set wrap_attributes to force-aligned if they want. Will be available in 0.6.

Many thanks!

@octref Any news on status of pugbeautify integration?

@x8x I forgot that. You can track https://github.com/vuejs/vetur/issues/527.

@octref Amazing! Thx! :-)


fix(docs): clarify live site creation from tests closes #2541

- Summary

Ref: https://github.com/netlify/cli/issues/2541
This PR clarifies that the deploy test suite use a live site to run integration tests which require an active Netlify account.
To make things simpler to configure, the IS_FORK environment variable (which disables these tests) has been renamed to NETLIFY_TEST_DISABLE_LIVE.
- Test plan

npx ava -v -s for https://github.com/netlify/cli/commit/a134b72409550aec4676a992d47dcca668322eb9 on Node.js 10

@erezrokah Just linking my comment on the issue here, https://github.com/netlify/cli/issues/2541#issuecomment-877032084 in case you missed it.

Hey @erezrokah, I'm linking my comment on the issue here just in case you missed it: https://github.com/netlify/cli/issues/2541#issuecomment-877032084


browserList Configuration doesn't work

Hi,
Thanks for this great extension,
I just noticed that the configuration option browserList doesn't seem to work, I am wondering if there isn't a mismatch with
browsersToCheck which is used in the code?
Thanks!

Hi,
Good find, the issue should now be fixed in version 1.1.2.
Thanks for your feedback!


Implement readlink

Fixes #111

Sorry it took so long to get to this!  I was on my holiday break.
I think everything else is fine, but you should probably make sure the code still works with the latest Rust.

Thanks for reviewing, Arcterus! And all comments are addressed.

Thanks!


Competitive Programming: Binary Search Problems

Description 📜

Adding questions related to binary search in documentation format

Domain of Contribution 📊

[x] Competitive Programming

/assign

/assign


💡[FEATURE]: Improving Contact us page

Is your feature request related to a problem? Please describe.
I want to improve Contact us page
Describe the solution you'd like
I'll improve it by using some CSS properties.
Additional context
I am SSOC'24 Contributor.
Please assign me this task.
I want to work on this issue.

I hope you're doing great! As a SSOC contributor, I'm keen on ramping up my involvement for SSOC'24. Could you please assign this issue to me? I'm excited to continue contributing to the project. Thanks a bunch!


Time out exception for http operator

Hi when I am trying to make http post request , task is failed due to java.util.concurrent.TimeoutException (runtime)  exception. I changed the configuration 'server.http.no-request-timeout ' by increasing the time interval but still same issues .
Can you please explain how to solve this

Hello, @nyerramaneni
Could you try the following?
http>: xxx
timeout: 300 # default 30sec.

It seems that server.http.no-request-timeout doesn't affect http> operator.
Ref: https://github.com/treasure-data/digdag/blob/master/digdag-standards/src/main/java/io/digdag/standards/operator/HttpOperatorFactory.java#L130

yeah thank you


KeyError: '_indices_files' in arrow_dataset.py

After pulling the latest master, I'm getting a crash when load_from_disk tries to load my local dataset.
Trace:
Traceback (most recent call last):
  File "load_data.py", line 11, in <module>
    dataset = load_from_disk(SRC)
  File "/opt/conda/envs/py38/lib/python3.8/site-packages/datasets/load.py", line 784, in load_from_disk
    return DatasetDict.load_from_disk(dataset_path, fs, keep_in_memory=keep_in_memory)
  File "/opt/conda/envs/py38/lib/python3.8/site-packages/datasets/dataset_dict.py", line 692, in load_from_disk
    dataset_dict[k] = Dataset.load_from_disk(dataset_dict_split_path, fs, keep_in_memory=keep_in_memory)
  File "/opt/conda/envs/py38/lib/python3.8/site-packages/datasets/arrow_dataset.py", line 634, in load_from_disk
    if state["_indices_files"]:
KeyError: '_indices_files'

I believe this is the line causing the error since there may not be a _indices_files key in the older versions:
https://github.com/huggingface/datasets/blob/b70141e3c5149430951773aaa0155555c5fb3e76/src/datasets/arrow_dataset.py#L634
May I suggest using state.get() instead of directly indexing the dictionary?
@lhoestq

It seems a backward compatibility issue...

Thanks @samsontmr this should be fixed on master now
Feel free to reopen if you're still having issues


MariaDB 10.0

I am starting a new project, could you please inform me if mariadb 10.0 is and will be fully supported in this version and in the next version of yank?

It should work. Yank will work with any database that has a JDBC driver. For mariaDB you'd probably use the most current one: https://mvnrepository.com/artifact/org.mariadb.jdbc/mariadb-java-client/2.0.3


How to use multiple orderBy

It's simple.
When I use ->orderBy('sort', 'ASC')->orderBy('tier', 'ASC'), It seems only the last one is working, and previous one has been overridden. Wonder if there is any work around.
Thanks in advance!

Hi,
i think this currently not possible, see this one:
https://github.com/rinvex/repository/blob/master/src/Repositories/BaseRepository.php#L380
Current workaround... create your own Repository... extend the existing one (BaseRepository or EloquentRepository) and overwrite the orderBy functionality :)

@noxify Thanks a lot!
Looks like I have to do it by my self. Hope the author will add those new feature any time soon, it's a nice repo.

If you found a solution - send a PR :) I think I need it also very soon :)

Well, after looking into this it seem that current implementation isn't quite right, so I guess your way is the intended behavior 👌 To be implemented, of course PR always welcome 🙂

#117 adds support to it. @Omranic  keen to merge it?

#117 merged, thanks guys for pushing forward 👍


Discussion: Extension Branding

In the pull request #1 it came up that we should align on the branding of the extension.
There are two manifest files that we need to agree on:

vss-extemsopn.sjon manifest
task.json manifest of the pipeline task.

I will write down the current information that is in the manifests and is up to us to decide.
vss-extension.json
{
    "id": "pnp-sp-alm-devops-extension",
    "name": "O365 And PnP Pipelines Tasks",
    "publisher": "SharePoint PnP",
    "description": "Tasks for Builds and Releases empowered by the PnP Community.",
    "tags": [
        "SharePoint", "PnP","SharePoint Online","SharePoint 2016","SharePoint 2013",
        "xml", "deployment","O365",
        "PowerShell","Provisioning", "Provisioning Engine"
    ],
    "icons": {
        "default": "Images/Icon128.png",
        "large": "Images/Icon512.png"
    },
    "content": {
        "details": {
            "path": "overview.md"
        }
    },
    "branding": {
        "color": "rgb(240,240,240)",
        "theme": "light"
    }
}

task.json for PnP Xml Task
{
    "name": "PnPDeploySpArtifacts",
    "friendlyName": "Deploy SharePoint PnP Artifacts",
    "description": "Deploys SharePoint artifacts with the PnP provisioning engine.",
    "author": "Sebastian Schütze",
    "helpMarkDown": "It uses the Apply-PnPProvisioningTemplate command from the PnP PowerShell Module.

[More Information](https://docs.microsoft.com/en-us/powershell/module/sharepoint-pnp/apply-pnpprovisioningtemplate?view=sharepoint-ps)",
    "demands": ["PowerShell"],
    "instanceNameFormat": "Deploy SharePoint Artifacts for $(SharePointVersion)"
}

These are the current information. So let's discuss which information make sense and which not.

@estruyf somehow I can't mention Vincent. Can you please?
... btw. do you know why I can't?

@baywet and @estruyf  could you give some opinion in the most important point like logo and naming? Those are the most important points

For the logo why don't we simply the PnP Logo?

Do you have a good resolution of the PnP Logo?

Not myself, we should ping Vesa internally on that request, go ahead and send him a Dear Vesa email ;-)

@SebastianSchuetze from the ongoing pnp call https://github.com/pnp/media :)