[RFC] libssl abstraction, default to libressl instead of openssl

This is a RFC to add a generic libssl attribute to depend on an openssl compatible libssl implementation. Also, this changes the default libssl implementation to libressl.
Some software doesn't work yet with libressl, so there are some hardcoded dependencies on openssl where I stumbled on problems, but not all packages were tested. My laptop and some service VMs are working flawlessly. This is a work in progress.
Currently, libssl also includes libcrypto and the openssl utility (both included in libressl) but this could also be split out if needed.
I'd like some feedback if this change is welcome or if you prefer to add this in another way.
Side note: The libressl folks are working on a new TLS API called libtls, thus the choice to name the old API libssl (which is also the actual name of the library in question), which is already available in libressl today: http://www.openbsd.org/papers/libtls-fsec-2015/

Why is libresslpreferable to openssl?

@peti Personally I would prefer LibreSSL because their aim is to clean up the code in OpenSSL and make it at least somewhat maintainable, which I, having unfortunately spent some time looking at the original code, can only welcome.
See also (very informal) http://www.openbsd.org/papers/bsdcan14-libressl/mgp00001.html -- it's very biased towards LibreSSL of course, but it shows main pain points.

Funny that libressl got a security advisory a few days ago (doesn't affect openssl) http://seclists.org/oss-sec/2015/q4/87

Generally openssl has had much more CVEs than openssl since libressl forking off and libressl aim to clean up a lot of the old cruft from which is totally worthless now.
See https://wiki.freebsd.org/LibreSSL for a list of vulnerabilities.

How do other distributions handle this? Does anyone else prefer libressl over openssl?

I think no, apart from OpenBSD but they don't qualify as a Linux distribution ^_^.

I can't even find the package in major distros, but I suppose it would be nontrivial for them to have a different version of libssl along with the default. Void Linux sounds as a Linux distribution, though https://en.wikipedia.org/wiki/LibreSSL#Adoption

I also remember several Arch Linux packages in AUR and guides for replacing OpenSSL with LibreSSL on it; the biggest problem is, as @vcunat said, a big difficulty in having two libssl versions -- some packages use OpenSSL APIs that LibreSSL has discontinued. This is a problem that Nix solves elegantly.

@abbradar up to libressl 2.2* there should be no problems with discontinued APIs, only 2.3 removes all SSLv3 code which I have seen break 2 packages so far, one fixed on master (#10463), the other open in #10465

I personally would prefer using libressl 2.2.4 as default for now in NixOS as that is the latest stable release, 2.3 being the current snapshot releases.

Might I suggest to first only introduce pkgs.libssl as an abstraction for "a libssl-compatible library" ? Reaching consensus for this might be quicker than mixing both items. This branch touches a lot of packages and is likely expensive to maintain. I believe that there is also more that two choices: gnutls and boringssl also come to mind (although boringssl seem like a pain to bootstrap).
In regards to pkgs.libss. Is aliasing a good-enough solution or do we need a mechanism to fallback to openssl for well-known broken libraries ?
Also related, how do we prevent package authors to link openssl instead of libssl when creating new packages ?

:+1:

Void Linux sounds as a Linux distribution, though

Also see Gentoo's overlay.

How do we prevent package authors to link openssl instead of libssl when creating new packages ?

This seems impossible; openssl is what is in all the documentation etc., NixOS is not powerful enough to make everyone switch to using libssl instead.
Here's how I would allow libressl:
openssl-official = <current openssl>
openssl = if config.useLibressl or false then libressl else openssl-official;

openssl is a generic[1] term for both the official OpenSSL library and its forks, and openssl-official can be used for packages that don't work with libressl, like so:
mypkg = callPackage ../development/mypkg { openssl = openssl-official; };

[1] Generic terms are generic, not the first user owns them -- Kay Sievers

This seems impossible; openssl is what is in all the documentation etc., NixOS is not powerful enough to make everyone switch to using libssl instead.

We can always solve the problem with another layer of indirection :p Maybe pkgs.libssl would become a function that takes a white and a black list and returns the right derivation. Then all SSL libraries are removed from the top-level and then the only way to access them is trough that function.
That being said, I don't think that most people will want to switch libraries. After all you need the recompile half of the programs in the system and don't benefit from the hydra builds anymore.
I like your idea of taking openssl as the generic name, this is the library I would look for when developing packages and not libssl. Then I would read the all-packages.nix and understand what's going on from a comment. Just having openssl = libressl is probably enough as it can be changed with overrides and is not likely to be frequent.

I like your idea of taking openssl as the generic name

Me too. The switch shouldn't involve touching hundreds of expressions. That tends to create merge interactions, e.g. with the closure-size branch. And there's not just libssl but libcrypto in there, too.
The line openssl = if ..... is probably unnecessary, as packageOverrides seems perfectly suited for such changes.

Indeed. I don't see a reason for this change, packageOverrides is perfectly enough.
Also for the discussion and a friendly reminder, that libressl and all other alternatives have seen less vulnerabilities because they are much less used than openssl.

We have stopped using this ourselves and changed to an approach overriding openssl with libressl_2_3 with the help of #11673 and #11653.
Then one can either set openssl_1_0_1 explicitly on packages that need ABI compatibility or patching software that relies on obsolete libssl code (#11674)

Okay, thanks for all the feedback. We will move forward by keeping the openssl attribute name for generic openssl API compatible implementations.


Dragging a file on to Graph Editor background in Cloud mode is not uploading file

If you drag a file on to Graph Editor background in Cloud mode it is not uploading file, but instead freezes.
At best we should upload the file.
At minimum we should do nothing/error/warn.

I did reproduce the issue only once, where the upload started but didn't progress at all. I'm not able to trigger it again, seemingly all cloud uploads work just fine for me since then. Are there any reliable reproduction steps?


Deprecate SingletonFlutterWindow

The ultimate goal is to remove SingletonFlutterWindow from the code base and replace it with just a regular FlutterWindow to prepare apps/packages for a multi-window world and migrate existing apps to use the PlatformDispatcher API directly. Single-windowed apps (just like multi-windowed apps) would interact with a plain FlutterWindow and the PlatformDispatcher instead of a SingletonFlutterWindow, which combines both APIs in one.
The existence of the SingletonFlutterWindow is confusing because it allows a developer to access window-agnostic functionality via the window property and may lead to the incorrect assumption that there is only one window.
Suggestions:

Put a deprecation notice on all methods of SingletonFlutterWindow that forward to the platformDispatcher informing people that they should use the PlatformDispatcher directly, e.g. via WidgetsBinding.instance.platformDispatcher or PlatformDispatcher.instance or FlutterView.platformDispatcher.
Put a deprecation notice on SingletonFlutterWindow and advise people to use FlutterView instead. Since SingletonFlutterWindow can't be instantiated, this will only prevent developers from using the type in code (see example below) and it will teach people that window-agnostic API's shouldn't be accessed from the window property.

// Deprecation notice on the next line that `SingletonFlutterWindow` should be replaced
// with `PlatformDispatcher` (if the functionality is window-agnostic) or `FlutterView` (if window-based).
// In the latter case, `FlutterView.platformDispatcher` can be used for API from `SingletonFlutterWindow`
// that's not directly available on `FlutterView`.
void fooMethod(SingletonFlutterWindow window) {
  // ...
}

/cc @gspencergoog Double-checking with you to see if you also just saw SingletonFlutterWindow as a temporary construct to move to a multi-window world.

Yes, it was a band-aid to keep from breaking changes until we had real multi-window support.  Ideally, we eventually deprecate and remove the window singleton, and SingletonFlutterWindow along with it.

This is done now: https://github.com/flutter/flutter/issues/116929


Fix JSON number parse interface of float64

Fix #10

Pull Request Test Coverage Report for Build 41

9 of 9 (100.0%)  changed or added relevant lines in 1 file are covered.
No unchanged relevant lines lost coverage.
Overall coverage remained the same at 100.0%

Totals

Change from base Build 39:
0.0%

Covered Lines:
1197

Relevant Lines:
1197

💛  - Coveralls


dep: Upgrade webpack 4 to latest

These are the latest working versions with webpack 4 that do not require any changes to the webpack config.

webpack: 4.43.0 => 4.47.0
style-loader: 1.2.1 => 2.0.0
sass-loader: 9.0.2 => 9.0.3
mini-css-extract-plugin: 0.9.0 => 1.6.2
clean-webpack-plugin: 3.0.0 => 4.0.0
compression-webpack-plugin: 4.0.0 => 5.0.2

I just squashed the commits from #895 that were related to upgrading to latest webpack 4.


Fix auto-magical addition of health_check/ route to app.

After updating from 1.5.1 to 2.1 we've discovered that the auto-magically added route of /health_check/:checks is no longer available in production.  I'm not sure why this is only affecting rails apps in production mode, but I believe it is due to HealthCheck::Engine.routes_already_defined beings set to true unconditionally, instead of being set to false from the route addition in config/routes.rb.
Calling health_check_routes from our apps' config/routes.rb adds the route back in, but it would be nice to not have to call that.
I couldn't get any of the test system to work locally, but I've confirmed this commit fixes the issue.

I think the above failure is because of an existing issue and isn't related to this PR.

Bump

That is weird - basically your fix implies that the code is being executed at least twice with the route being set the first time being discarded.  What version of rails are you using? Can I see your Gemfile and Gemfile.lock pls. I will also experiment to see if setting the route twice actually matters and if not then get rid of the condition all together.

Oops . and which ruby version as well

I am rerunning the tests with the latest master merged in omadahealth-master -- see if the tests pass

And a copy of the config/routes.rb file as well pls - I double checked and yes my tests do check that the route is automatically added for all rails versions, so something in your configuration is different than what I am testing.

Wow, that was really subtle to reproduce.  It looks like the problem is with how this gem interacts with devise.  I've made a rails app that demonstrates the bug.
You can see it here with instructions to reproduce:
https://github.com/omadahealth/buggaboo
This is a standard rails 4.2.6 app made with rails new.  The only changes are to add a route_test environment, and the gems health_check and devise.

Bump

I suspect this would be better fixed on devise's side - I am hesitant with adding routes twice to work around an issue with another gem. I will note it as a conflict in README with the workaround For the time being.
Does anyone else want to comment?
I wonder if the order in the Gemfile matters.
It may be interesting to see if the example rails engine has the same issue.

I think it's hard to say this should be fixed in devise because: 1) the breaking change was in this gem, 2) we have no theories about what devise is 'doing wrong' that needs to be fixed.  I think it's entirely possible that devise isn't doing anything 'wrong', and simply doing something that causes rails to re-evaluate the routes.
The order of the Gemfile shouldn't matter.
I'm not sure what you mean by 'example rails engine'.  My example buggaboo app has the fewest changes from rails new to reproduce the problem.

On 10/08/16 03:04, Chris Constantine wrote:

I think it's hard to say this should be fixed in devise because: 1)
the breaking change was in this gem,

My guess at this point (without further investigation) is that devise is
affecting how routes are working - otherwise we wouldn't need routes
added twice.
I presume it is calling
|Rails.application.reload! |  (see http://api.rubyonrails.org/classes/ActionDispatch/Routing.html)

we have no theories about what devise is 'doing wrong' that needs
to be fixed. I think it's entirely possible that devise isn't doing
anything 'wrong', and simply doing something that causes rails to
re-evaluate the routes.

The rails API doesn't include callbacks for re-evaluation of the routes
(so that gems can hook in), so to me that implies routes should
(generally) not be cleared and re-evaluated by gems OR the implication
is that you should always add routes in manually and not attempt to do
it automatically like I am. I am curious how other gems handle devise,
or does everyone just add a line into the routes.rb file and solve it
that way.

The order of the Gemfile shouldn't matter.

I have seen comments in other gems that sometimes it does matter.

I'm not sure what you mean by 'example rails engine'. My example
buggaboo app has the fewest changes from |rails new| to reproduce the
problem.

I was thinking of trying something like https://github.com/ghodum/blorgh
"This is an example Rails Engine based on the Rails Engine tutorial at:
guides.rubyonrails.org/engines.html
http://guides.rubyonrails.org/engines.html" and seeing if it also had
the same trouble with devise.

—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/ianheggie/health_check/pull/37#issuecomment-238620272,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AACt8xu1gN8aa3rKQ_eRrLHz7CysHLGSks5qeLMlgaJpZM4JLrt8.

--
Ian Heggie
Heggie Enterprises Pty Ltd
Australia
e<EMAIL_ADDRESS><EMAIL_ADDRESS>| m: +61 (0)425 856 328
callto:+61425856328 | skype: ian.heggie skype:ian.heggie / 03 9005
6328 callto:0390056328
linkedin: ianheggie https://au.linkedin.com/in/ianheggie | github:
ianheggie https://github.com/ianheggie
NOTE: This email, and any attachments, is intended for the named
recipients and may be confidential. If received in error, please delete
the email without acting upon it or disclosing it to other parties.
Heggie Enterprises cannot guarantee that what you receive is what we
sent, so please exercise caution. If you have any doubts about the
authenticity of an email from Heggie Enterprises, please contact us
immediately. Thank You.

On Tue, Aug 9, 2016 at 5:59 PM, Ian Heggie<EMAIL_ADDRESS>wrote:

My guess at this point (without further investigation) is that devise is
affecting how routes are working - otherwise we wouldn't need routes
added twice.
I presume it is calling
|Rails.application.reload! | (see http://api.rubyonrails.org/
classes/ActionDispatch/Routing.html)

That seems possible, but it's strange that it's not happening in
development or test.  If it was always calling Rails.application.reload! I
would expect this behavior in dev.

The rails API doesn't include callbacks for re-evaluation of the routes
(so that gems can hook in), so to me that implies routes should
(generally) not be cleared and re-evaluated by gems OR the implication
is that you should always add routes in manually and not attempt to do
it automatically like I am. I am curious how other gems handle devise,
or does everyone just add a line into the routes.rb file and solve it
that way.

The presence of Rails.aplication.reload! and lack of callback for
re-evaluating routes makes me think that rails assumes that the routes are
re-evaluatable at any time and the routes dsl should always give the
desired route set.  Without this (or a similar change) this gem only adds
the desired route the first time it's evaluated.  It might be arguable that
the 'callback' is the re-evaluation of the routes.
I'm not sure how other gems handle it, but I appreciate that this gem
automatically adds the routes.

The order of the Gemfile shouldn't matter.

I have seen comments in other gems that sometimes it does matter.

I'm not sure what you mean by 'example rails engine'. My example
buggaboo app has the fewest changes from |rails new| to reproduce the
problem.

I was thinking of trying something like https://github.com/ghodum/blorgh
"This is an example Rails Engine based on the Rails Engine tutorial at:
guides.rubyonrails.org/engines.html
http://guides.rubyonrails.org/engines.html" and seeing if it also had
the same trouble with devise.

Hmm, ok.  I would expect it to affect that engine assuming the app has
devise in it.
Have you had a chance to clone the repo I linked and reproduce the problem?

I think the time has come to stop fighting against the flow - I will make a note in README that although the plugin will attempt to insert itself into the routes, that explicitly including it in routes is required if you use catch all routes, the devise gem or anything else that will trigger a revaluation of routes.
If you work out a way of having it work when devise is used, that passes the tests, then I will accept that pull request.

Please try the fix I added into master - hopefully that solves your problem (master is rails 4.0 onwards)

Thanks for the pull request and your correspondence - I have tested my alternative fix using your test app, and it solves your problem, so I will close this pull request.


Change the Logo / title / subtitle

Goal
Update your batch's mainpage.

 Honestly shows true buidler power 🦾

The logo seems legit to me as well!

@BillSchumacher are you gonna pick this up and get our batch a customized logo? let me know if you need any help!!

I can after work, if someone else wants to implement feel free.

Could use a bit more love

Amazing logo @BillSchumacher! Liked it a lot!
Did you already made changes in the frontend to include it? I can make it here if needed!

Fixed on #27


0.1.4 Test case log

Log test cases added to 0.1.4 not related to any other issue on the release.

Test is closed for 0.1.4.


Update flow of release being available

Intends to check whether release is available before running the PRSuite and return a message, status and set of labels if not.
related: #47

this will have to wait until tests


Chuck Norris depends on nobody

Much as I appreciate the humor, I predict some users would find that message confusing.


full scan when connecting to WiFi (IDFGH-4962)

fix WiFi problems described in #6595

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.

Thanks for your contribution.

Hi @BugerDread, @Alvin1Zhang
We already have an internal program to fix the #6595 issue, and it will be synced to Github soon. Thank you for your contribution. The PR can be closed.

@BugerDread Thanks for your contribution again, please help check the fix on https://github.com/espressif/esp-idf/issues/6595, and https://github.com/espressif/esp-idf/issues/6595 will close automatically once the fix is on GitHub. Will close the PR now.


arch: add big endian support

This patch adds Big Endian architecture support.  Even if a compiler
generating big endian object files is used, our linker script, or
include/linker/linker-tool-gcc.h to be precise, has default output
format as little endian.
This patch adds a hidden config CONFIG_BIG_ENDIAN, which should be set
by big endian architectures or a SoC's, and adds an condition to
switch OUTPUT_FORMAT in our linker.cmd.
Signed-off-by: Yasushi SHOJI<EMAIL_ADDRESS>

Codecov Report

Merging #10457 into master will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master   #10457   +/-   ##
=======================================
  Coverage   53.14%   53.14%
=======================================
  Files         210      210
  Lines       25747    25747
  Branches     5673     5673
=======================================
  Hits        13682    13682
  Misses       9755     9755
  Partials     2310     2310

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 4db9731...9cd03c7. Read the comment docs.

I'm building two big-endian arches and they are running on real hardwares, AFAICT.
I'll add --big-endian to gen_isr_tables.py as @endofexclusive pointed out at #10456.
One more thing I found is that some arch is natively big-endian and would love to set CONFIG_BIG_ENDIAN in arch/$ARCH/Kconfig I assume.  To do that I think I need to move config BIG_ENDIAN in arch/Kconfig before source "arch/$(ARCH)/Kconfig".  Is it OK for you all?


Ability to configure spec tasks

So. I think it'd be nice if we could generate spec tasks based on configuration. We could have config/specs.yml with:
integration: spec/integration/**/*_spec.rb
unit: spec/unit

...by default and let devtools generate tasks based on that.

Devtools spec task only exists to serve the ci task. running specs for local development should IMO be done via the rspec binary. Closing this issue as this is an opinionated tool ;)


Possible Bug - Prompt Generation does not work openrouter

I only get the generation complete dialog and no content generated when using this feature.  Works with ollama with MOST of the models I tried.  Some that are tuned in the modelfile with a custom SYSTEM dont respond. -- I recommend a small model like Mistral for a quick response.
Verified that it works with Openai GPT4

Let me know if v1.8.7 resolve the prompt generation for OpenRouter.
I will continue to refactor the models in the upcoming weeks.

Yes works as expected.  TYVM


Giving 'gitea' capability to listen on port below 1024 as non-root user in Docker

Usually, the program started by a non-root user will not capable listen on a port below 1024. The restriction can be lift by given specific program CAP_NET_BIND_SERVICE capability, see 'man 7 capabilities'.
This commit added the CAP_NET_BIND_SERVICE capability to /app/gitea/gitea program in the docker, so the gitea service can listen at port below 1024, even it's running as a non-root user git.
It also removed chown and chmod on /app/gitea/ directory, which is not necessary and will cause problem of setcap command.

To easy the testing, I build the docker image with TAGS="sqlite" make docker command, and retagged, pushed to docker hub at twang2218/gitea:addcap
Here is the app.ini I used to let gitea listen on port 80:
[repository]
ROOT = /data/git/repositories

[repository.upload]
TEMP_PATH = /data/gitea/uploads

[server]
APP_DATA_PATH = /data/gitea
HTTP_PORT     = 80

[indexer]
ISSUE_INDEXER_PATH = /data/gitea/indexers/issues.bleve

[database]
DB_TYPE = sqlite3
PATH    = /data/gitea/gitea.db

[session]
PROVIDER_CONFIG = /data/gitea/sessions

[picture]
AVATAR_UPLOAD_PATH = /data/gitea/avatars

[attachment]
PATH = /data/gitea/attachments

[log]
ROOT_PATH = /data/gitea/log

[security]
INSTALL_LOCK   = true
SECRET_KEY     = JPuNRXxX2G

And here is the command I used to run the docker image:
$ docker run -it -p 80:80 -v $PWD:/data/gitea/conf gitea/gitea:latest                          [c3ec419c]
Generating /data/ssh/ssh_host_ed25519_key...
Jul 23 04:00:04 syslogd started: BusyBox v1.25.1
Generating /data/ssh/ssh_host_rsa_key...
2017/07/23 04:00:04 [T] Custom path: /data/gitea
2017/07/23 04:00:04 [T] Log path: /data/gitea/log
2017/07/23 04:00:04 [I] Gitea v1.1.0+440-g6631631d built with: bindata, sqlite
2017/07/23 04:00:04 [I] Log Mode: Console(Trace)
2017/07/23 04:00:04 [I] XORM Log Mode: Console(Trace)
2017/07/23 04:00:04 [I] Cache Service Enabled
2017/07/23 04:00:04 [I] Session Service Enabled
2017/07/23 04:00:04 [I] PING DATABASE sqlite3
2017/07/23 04:00:04 [I] [SQL] SELECT name FROM sqlite_master WHERE type='table' and name = ? [version]
...
2017/07/23 04:00:13 [I] SQLite3 Supported
2017/07/23 04:00:13 [I] Run Mode: Development
2017/07/23 04:00:13 Serving [::]:80 with pid 15
2017/07/23 04:00:13 [I] Listen: http://<IP_ADDRESS>:80

I find more logic to do -p 80:3000 to publish on lower public port than add cap to a binary.

Plus, from a specification point of view we use EXPOSE 22 3000 in Dockerfile so gitea container should respond only on thoses ports.

@sapk The use case is described here: https://github.com/go-gitea/gitea/issues/1190#issuecomment-316340053
We got problem when integrate gitea withdrone inside docker. Drone is trying to access port 80 of the gitea service, as it's ROOT_URL said so, however, the gitea is listen on port 3000, which cause the problem.
The port mapping only available to the access from outside of docker network, not from inside of docker network.

@twang2218 I have seen it after and reply to it ;-)
Adding cap to a binary is not the good solution in this case one of the role of docker container is to run with the less required privilege. This limit responsability and potential escape or dommage after escape of container.

docker's -p implicates EXPOSE as well. That is, -p 80:80 is not only do the port mapping, it implicates EXPOSE 80 as well. And during the runtime, --expose can add more EXPOSE port as well.
So EXPOSE 3000 in the Dockerfile is kind of indicator for better understanding of the image, not the restriction, user should be able to bind whatever the port they specified in the app.ini file.
And about the cap, it's given to a binary inside the docker, not on the host. And the cap is limited to CAP_NET_BIND_SERVICE, which means gitea binary can only have the capability to bind the port below 1024 inside the docker, nothing more. And as it's all about inside the container, gitea binary cannot do anything on the host.
I didn't see any security concern here, as the s6, ssh and syslog process are already running as root in the container, allowing gitea process, which run as normal git user, binding the port below 1024 inside the container shouldn't affect security match.

@twang2218
I know EXPOSE is not enforcing us to listen on those ports but it is better to follow as some tools around docker could use this information as a base.
The fact that they are allready process running as root is not ideal and we aim to remove that and we should not go the other way around and add more CAP to process that are not needed in most cases. And don't forget that the binary in also accessible (normally only by root) on host filesystem so this add a binary with a not need CAP on host. I understand that this is a limited risk but not a necessary one for most cases.
As I am not the only maintainer maybe others would agree with you. In the meantime, you should create your own image over the gitea one. It would be quick to build and you could even delegate this task to any builder (like docker-hub or other).

For the problem this is solving I'd much rather have an option for WebHooks to get either the external or internal IP. Using setcap without a good cause is not a good practice. And even though our container has bad practice in there, that doesn't justify adding more of them.

Closing per reasons above.


SelectTokens to Select multiple JsonTokens using a JPath expression

I see SelectToken to select a single JsonToken, but I do not see SelectTokens to select a list or array of JsonTokens.
For example if one were to select all order_lines having line_no > 20000 in the following JsonToken:
{
"order_no": "Test01",
"order_line": [
{
"line_no": 10000,
"item_no": "0000"
},
{
"line_no": 20000,
"item_no": "0001"
},
{
"line_no": 30000,
"item_no": "0002"
},
{
"line_no": 40000,
"item_no": "0003"
}
]
}
Then it could be nice to be able to process it with something like:
<EMAIL_ADDRESS>> 20000)]',JsonArray);
foreach JsonToken2 in JsonArray do begin
...
end;

Can't you already do this?
if<EMAIL_ADDRESS>> 20000)]', JsonToken)) then begin
  JsonArray := JsonToken.AsArray();
  foreach JsonToken in JsonArray do begin
    // processing
  end;

SelectToken gives an error, if the JPath expression returns more than one token...
I tested in Cu7 and have not tried in latest...
Maybe this has already been adjusted?

Maybe this has already been adjusted?

It hasn't, see my edit. It was my mistake. It's logical that it wouldn't work since it's newtonsoft's json.net under the hood, and that has a separate method for it... which is silly anyway, but it is what it is.

Yep, I saw the edit after.
Aha, I thought the methods looked familiar.

Hi there,
I just stumbled upon this as I encountered the exact same issue today, I query a webshop for a customer and the json it gives me back holds order related informations and some of the nested elements can contain multiple tokens that hold the same values in the current root object some example json would be:
{
    "included": [
        {
            "id": 12345,
            "type": "order_product",
            "attributes": {
                "label": "some_product_name"
            }
        },
        {
            "id": 54321,
            "type": "customer",
            "attributes": {
                "first_name": "Jon",
                "last_name": "Doe",
            }
        },
        {
            "id": 54321,
            "type": "customer",
            "attributes": {
                "first_name": "Jon",
                "last_name": "Doe"
            }
        }
    ]
}

when I now use a filter JPath expression to just give me the attributes where the id = 54321 and the type = "customer", I would receive an runtime error when using the .SelectToken() method on the JsonObject, JsonArray and JsonToken AL datatypes and not catching the return type to handle the error.
My query looks like this:
SanitizedQuery :=<EMAIL_ADDRESS>&& @.type==''%2'')].attributes', 54321, 'customer');

Is there a specific reason why the AL native data types for JSON handling do not support the SelectTokens method, because that would make it possible to select the tokens if multiple of the same tokens exist, or an array of the same tokens and so on.
I know that you could iterate over the actual  included json array and check every object itself if it matches that condition, that could result in iterating many times before even getting to the right json object in my scenario.
And I think the solution when just using the .SelectTokens method would also result in neat code instead of iterating over the json array structure itself.
So would it possible to implement the .SelectJsonTokens methods of the underlying NewtonSoftJson C# classes for the native AL data types?

Since this is feature request: Here is the Idea to vote for this missing feature:
https://experience.dynamics.com/ideas/idea/?ideaid=8e2a7975-e87e-ee11-a81c-6045bd8043ad


Suggestion - Mermaid diagrams rendering

Dear Sirs,
What would be the effort to create a scope for Mermaid JS diagrams rendering with Kaleido? That would be a nice proof that Kaleido can perform beyond the scope of vizualisation libraries...
Unfortunately I have limited skills to implement such scope myself :(
Best regards

Probably not too hard, just a bit of Python and a bit of JS, following the example of Plotly.js. We'd gladly accept a PR :)

Hi @ghuserlb & @alexcjohnson,
If you are still interested into Mermaid.js diagrams rendering, untill plotly team makes a decision on my pull request, you can use it from my fork of Kaleido ! 😄


Host DNS broken after installing calico-vpp

Environment

Calico/VPP version: 0.13.0
Kubernetes version: 1.20
Deployment type: AWS VMs, tried Ubuntu 18.04 and Ubuntu 20.04, installed using kubeadm.
Network configuration: Used https://raw.githubusercontent.com/projectcalico/vpp-dataplane/release/
v0.13.0-calicov3.17.1/yaml/generated/calico-vpp-nohuge.yaml .  Set VPP interface to ens5 and pod-cidr to <IP_ADDRESS>/16.

Issue description
After applying calico-vpp-nohuge.yaml, the nodes were unable to do DNS lookups, so core-dns and calico-kube-controllers pods were stuck in ImagePullBackoff.
To Reproduce
Steps to reproduce the behavior:

Setup cluster
kubectl apply -f calico-vpp-nohuge.yaml

Expected behavior
I'd expect core-dns and calico-kube-controllers pods to be pulled correctly.
Additional context
Discussed with Aloys in slack.
Running sudo tcpdump -v -n -i vpptap0 port 53 I don't see anything when I run nslookup www.google.com on one of my hosts.  The nslookup gets
** server can't find www.google.com: SERVFAIL

instantly (no delay or timeout)
This works though:
ubuntu@ip-172-16-101-168:~$ nslookup microsoft.com <IP_ADDRESS>
Server:		<IP_ADDRESS>
Address:	<IP_ADDRESS>#53
Non-authoritative answer:
Name:	microsoft.com
Address: <IP_ADDRESS>
Name:	microsoft.com
Address: <IP_ADDRESS>
Name:	microsoft.com
Address: <IP_ADDRESS>
Name:	microsoft.com
Address: <IP_ADDRESS>
Name:	microsoft.com
Address: <IP_ADDRESS>

Aloys Augustin  2 days ago
Could you try running :
sudo systemd-resolve --interface vpptap0 --set-dns <IP_ADDRESS>
If that solves the issue, I’ll look into how we can do it automatically when configuring the interface

And that did indeed solve the issue.

Thanks @lwr20 for opening this. In order to fix this without writing distro-specific code, the approach we have taken is to rename the vpptap0 interface to the name of the original interface. This has a number of consequences because the initial interface linux configuration will be applied to the tap interface provided by VPP. As a result, we'll also have to switch the interface type to tap instead of tun, to support deployments using DHCP (such as in EC2).

Hi @lwr20 ,
We recently merged some changes that should fix this issue. I just pushed two images with the prerelease tag (for the nodeand vpp images) that you should be able to try. Let us know if you are able to try them and if they fix the problem :)

Btw - these images should fix #139 as well.

I'll give them a spin tomorrow.

This should be fixed in the 0.14 release, please reopen if it is not the case.


Moving Attributes between Classes

Once an Attribute has been created, it is often necessary to move it due to changing specifications or following review.
Currently, Mauro does not allow this.
Can Mauro be enhanced please to enable to moving of Attributes between Classes?
It will take unnecessary time if they had to be deleted and created on a different Class.

System C says this isn't part of the SOW, but is required for Migration.
James says this can be done but needs further discussion.

30/07/24 - It is a Mauro feature that will be useful to others.

We have a workaround but would still like this investigating please.

James will investigate to see if it can be resolved for migration.


run_tests.py file is missing

When I run test, I noticed that the run_tests file under avb/validate directory is missing? Therefore,in the test period, the avb/avb/test.py cannot produce results properly.

sry to bother, I found it afterwards. :bowing_man:


amf-headers: 1.4.33 -> 1.4.34

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://repology.org/project/amf-headers/versions.
meta.description for amf-headers is: Headers for The Advanced Media Framework (AMF)
meta.homepage for amf-headers is: https://github.com/GPUOpen-LibrariesAndSDKs/AMF
Updates performed

Version update

To inspect upstream changes

Release on GitHub

Compare changes on GitHub

Impact
Checks done

built on NixOS
The tests defined in passthru.tests, if any, passed
found 1.4.34 in filename of file in /nix/store/pzzkg7z19fn5q2rrc5ir5676a290a88b-amf-headers-1.4.34

Rebuild report (if merged into master) (click to expand)

3 total rebuild path(s)

3 package rebuild(s)

First fifty rebuilds by attrpath

amf-headers
sunshine

Instructions to test this update (click to expand)

Either download from Cachix:
nix-store -r /nix/store/pzzkg7z19fn5q2rrc5ir5676a290a88b-amf-headers-1.4.34 \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.
Or, build yourself:
nix-build -A amf-headers https://github.com/r-ryantm/nixpkgs/archive/110a2fff3bbf35085eda0d813efda3436ce61fca.tar.gz

Or:
nix build github:r-ryantm/nixpkgs/110a2fff3bbf35085eda0d813efda3436ce61fca#amf-headers

After you've downloaded or built it, look at the files and if there are any, run the binaries:
ls -la /nix/store/pzzkg7z19fn5q2rrc5ir5676a290a88b-amf-headers-1.4.34
ls -la /nix/store/pzzkg7z19fn5q2rrc5ir5676a290a88b-amf-headers-1.4.34/bin

Pre-merge build results
We have automatically built all packages that will get rebuilt due to
this change.
This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.
Result of nixpkgs-review run on x86_64-linux 1

2 packages built:

amf-headers
sunshine

Maintainer pings
cc @devusb for testing.

Result of nixpkgs-review pr 323037 run on x86_64-linux 1

2 packages built:

amf-headers
sunshine


Cannot run specs when cursor is inside string interpolation

When I have the cursor inside a string interpolation and press Cmd+R to run the specs I get an error. Here's an example of a spec that shows the problem:
describe 'subject' do
  it 'does something' do
    expect(true).to be "#{tru|e}"
  end
end

In the above code, the pipe symbol (|) represents the position of the cursor. This is the error I get:
NoMethodError: undefined method ‘describe’ for main:Object

method <main>	in foo_spec.rb at line 1

If I place the cursor outside the curly braces, but still inside the string literal it works. I'm guessing there's some issue with the scope and that it's the regular Ruby runner that is executed instead of the RSpec runner. When I run Bundles -> Ruby -> Run I get the same error regardless of where the cursor is located.

Thanks, should be fixed now. Bundle should be updated automatically soon (cc @infininight).

This issue also occurs for the "Run Single Example" command.

Thanks, fixed in ee5e22fd015bd463!

Deployed, you should see your bundle in TextMate update within a few hours.

It works now. Awesome, thanks :smiley:


Test commit specific cla checks

This pull request is created to test the CLA checks of brackets repository. 'Checking CLA Signature' workflow should give a fail on this pull request and put an appropriate comment using comment bot.
Testing part of task 3 in issue https://github.com/brackets-cont/contributor-license-agreement/issues/26#issue-1221868254

Error: Contributor Licence Agreement Signature Missing
The following commiter(s) has not signed the Contributor Licence Agreement:
psdhanesh2000
Please sign the Contributor Licence Agreement by clicking the following link.
 Click here to sign the CLA

'Checking CLA Signature' workflow failed. The CLA checks are working as expected and commenting is also working as expected. Hence closing this pull request.


not use gpu calcuation with dora

--network_module="lycoris.kohya",
--network_args "algo=lora" "dora_wd=True""
Hello. I used Lycoris for train dora. but It is really slow when train dora and I got warning in this code
def apply_weight_decompose(self, weight):
    return (
        weight / weight.mean(dim=self.dora_mean_dim, keepdim=True) * self.dora_scale
    )

I think apply_weight_decompose use CPU calucation.
how can i fix it?

I can ensure this is running on GPU.
Give me more context or how to reproduce the problem

│ C:\Users\te\anaconda3\envs\kohya_ss\lib\site-packages\lycoris_lora-2.2.0.dev4-py3.10.egg\lyco │
│ ris\modules\locon.py:183 in apply_weight_decompose                                               │
│                                                                                │
│   180 │                                                                                │
│   181 │   def apply_weight_decompose(self, weight):                                              │
│   182 │   │   return (                                                                           │
│ ❱ 183 │   │   │   weight / weight.mean(dim=self.dora_mean_dim, keepdim=True) * self.dora_scale   │
│   184 │   │   )                                                                                │
│   185 │                                                                                │
│   186 │   def custom_state_dict(self):                                                           │
╰──────────────────────────────────────────────────────────────────────────────────────────────────╯
RuntimeError: Expected all tensors to be on the same device, but found at least two devices, cuda:0 and cpu!
===
I got this error when I tried this command
accelerate launch --num_cpu_threads_per_process=2 C:/Users/te/ML/kohya_ss/sdxl_train_network.py --pretrained_model_name_or_path="E:\diffusion-models\Stable-diffusion\mixgirl.safetensors" --train_data_dir="C:\Users\te\ML\diffusion-benchmark\temp\pl9ia1o0" --resolution=1024,1024 --output_dir="E:/diffusion-models/Lora\test16" --logging_dir="C:/Users/te/ML/kohya_ss/logs" --network_alpha=1 --save_model_as=safetensors --network_module=lycoris.kohya --network_args "algo=lora" "dora_wd=True" --text_encoder_lr=0.0004 --unet_lr=0.0004 --network_dim=64 --output_name=woman_young_64rank --lr_scheduler_num_cycles=8 --no_half_vae --learning_rate=0.0004 --lr_scheduler=constant --train_batch_size=1 --max_train_steps=2000 --save_every_n_epochs=1 --mixed_precision=fp16 --save_precision=fp16 --optimizer_type=Adafactor --optimizer_args scale_parameter=False relative_step=False warmup_init=False --max_data_loader_n_workers=0 --bucket_reso_steps=64 --seed=1234 --gradient_checkpointing --full_fp16 --xformers --bucket_no_upscale --noise_offset=0.0 --lowram --cache_latents --cache_latents_to_disk
this command is working when remove the "dora_wd=True" option

I guess this is caused by --lowvram.

I changed the code
    if use_scalar:
        self.scalar = nn.Parameter(torch.tensor(0.0))
    else:
        self.scalar = torch.tensor(1.0, device=torch.device('cuda'))

this is working for me

This is not how it works.
I mean you should try disable --lowvram

I tried with --lowvram but I got same issue

No
I mean
You should REMOVE lowvram

@SlZeroth Should be solved in 2.2.0.dev7

Will close this issue on the weekend if no reply.
LyCORIS 2.2.0 should have correct implementation

I got same issue now on 2.2.0 version. can you share any idea for debugging this issue? I will share information

this issue is occurs 2.2.0.dev8  ~ version. 2.2.0.dev7 is working good

This issue was resolved in version 2.2.0.dev7, but the same error has reoccurred in versions released after 2.2.0.dev8.

Thx for info

@KohakuBlueleaf  thank you for check!

@KohakuBlueleaf thank you I checked latest update version ! it works fine

Hi KohakuBlueleaf,
The recent changes to the apply_weight_decompose function might have caused the [Expected all tensors to be on the same device] issue to resurface. The dora_scale in the return value of this function might be running on the CPU.
def apply_weight_decompose(self, weight):
    weight_norm = (
        weight.transpose(0, 1)
        .reshape(weight.shape[1], -1)
        .norm(dim=1, keepdim=True)
        .reshape(weight.shape[1], *[1] * self.dora_norm_dims)
        .transpose(0, 1)
    )
    return weight * (self.dora_scale / weight_norm)

After making some test adjustments to the "lycoris/modules/locon.py" file, I was able to run it successfully, but I'm not sure if these changes are entirely correct.
    def make_weight(self, device=None):
        ...
        ...
        ...
        if self.wd and self.dora_scale.device != weight.device:
            #print("self.dora_scale.device:", self.dora_scale.device) => self.dora_scale.device: cpu
            #print("weight.device:", weight.device) => weight.device: cuda:0
            self.dora_scale = self.dora_scale.to(weight.device)

        return weight * self.scalar.to(device)

Could you please help verify this? Thank you.


Firmware

Hi All,
1st sorry if this is in the wrong place. Now the Q: Does anyone have the factory FW for a DPS5015? Please... If any better place to get that please direct me. Thank you.

Do you mean the FW used in production to test the units after SMT/assembly?

Do you mean the FW used in production to test the units after SMT/assembly?

I mean the FW the unit comes with when u buy new...

but i would get both if you have them. Thanks

Neither of them are available online unfortunately.


GitHub Actions autoformatting of all C# files

Use the following: https://github.com/marketplace/actions/dotnet-format
This would make the code look better when removing/adding missing spaces etc.
Yay or nay? @Marco-Pellegrino @andosca?

If automatically run I would be somewhat worried about it breaking something.

Now that we have a github action that checks if the repo can be built (and runs unit tests) this cannot silently break anything 😉


Adjust the number of color components written to the pdf according to the color space

This is an attempt at resolving this issue: https://github.com/typst/typst/issues/4422 .
~As it stands, the proposed change may create more problems than it solves. (Mupdf now throws warnings when gradients in a non-CMYK color space are present, and the use of unsafe code should probably be avoided.)~
~I'm not sure how to resolve the issue in a cleaner way without making more substantial changes to the code, though, which I am definitely not familiar enough with the code-base for.
Submitting it as a draft PR for the moment. If you think it could be useful after the above problems (and others that I may not have seen) are resolved, please let me know and I'll be happy to work more on it. If not, please feel free to close it.~
Edit:  The aforementioned problems were solved thanks to the help of @Dherse and @EpicEricEE .

Good catch!

Thanks a lot @Dherse for these helpful comments! I agree with all of them.
I'll try to find some time to correct these in the next few days. (Or if someone wants to have a go, you're of course more than welcome to!)

Thanks a lot @EpicEricEE ! Your suggestions are super useful!
I agree that using &'static slices for the range function would likely be better. I'm not sure what the best way to do that is. I tentatively implemented it as shown here and added explicit conversions to SmallVec where a [f32] is expected instead of an &[f32] (here, here and here). I suspect there may be a better solution, though.

I don't know if it's the best way, but you could do range.iter().copied() to get an iterator of owned f32 values without creating a SmallVec. In all the cases here, this would be enough as the methods all take an impl IntoIterator<Item = f32>.

Oh, nice! That's certainly much better than my version. Thanks!

Thank you!


Propose a few doc changes to make the use of namespace more clear

A few documentation updates to attempt to make the use of namespace more clear. Specifically around issues that arise when using the wrong namespace.
I got stuck for a few days when first trying out external-dns when I didn't quite understand where the namespace came into play. Specifically I was seeing an error like below which I added to the FAQ. Might be helpful for folks we get stuck to be able to find this and a (potential) solution.
FATA[0060] failed to sync cache: timed out waiting for the condition

Open to making tweaks as necessary for this to fit in with existing docs.
Fixes #1216

/lgtm
/approve


Invalid content /en/marlowe/getting-started/sample-marlowe-smart-contracts/

Where does the issue occur?
https://testnets.cardano.org/en/marlowe/getting-started/sample-marlowe-smart-contracts/
Describe the issue
Both links "section 3" and "section 13" on this page are broken.
<Error> NoSuchKey <Message>The specified key does not exist.</Message> <Key>tutorial</Key> <RequestId>81842F5028A8A4A9</RequestId> <HostId>l/pejS0BpLGNYDXC0rmF9hlWBcTtRj6aup1f79dMFRmLRNeqz9shKQK3Gau5ni13KNJfGyFFgNA=</HostId> </Error>
Expected changes
Fix the links to the sample contracts.

These links were recently fixed, thank you for your input.

These links were recently fixed, thank you for your input.


[FEATURE] Custom artist profile pictures

This would be helpful for the cases where the app was unable to find an image, or came from a different artist of the same name.

@crackheadakira
I agree. This feature will be implemented in future, but I can't promise it will be in the next release. I'll build it when the features planned for the next release are done.
Thanks for the feature request.


Remove more obsoletes

Description

How Has This Been Tested?

Types of changes

[ ] Bug fix (non-breaking change which fixes an issue)
[ ] New feature (non-breaking change which adds functionality)
[X] Breaking change (fix or feature that would cause existing functionality to not work as expected)

Checklist:

[X] The PR is submitted to the correct branch (dev).
[X] My code follows the code style of this project.
[ ] I've added relevant tests.

Added to v7.0.0 Migration Guide https://github.com/MudBlazor/MudBlazor/issues/8447


Fix: Javascript Fehler Im Suchfeld bei drücken der Eingabetaste SW-20346

1. Why is this change necessary?
It reduces the amount of Javascript Errors on every Shopware store
2. What does this change do, exactly?
It calls the proper Javacript object instead of a missing one.
3. Describe each step to reproduce the issue or behaviour.
Just open any Shopware Store, type a search term into the search field and wait for the ajax search to load. Do not use the mouse, just hit the Enter key on your keyboard.
4. Please link to the relevant issues (if any).
https://issues.shopware.com/issues/SW-20346
5. Which documentation changes (if any) need to be made because of this PR?
None
6. Checklist

[ ] I have written tests and verified that they fail without my change
[ ] I have squashed any insignificant commits
[ ] This change has comments for package types, values, functions, and non-obvious lines of code
[ ] I have read the contribution requirements and fulfil them.

Thank you for your contribution. This will be released with the next release.


Transformer migrator

Description of changes
Adds in an auto-migrator that will run when schema is transformed, this can be triggered on a amplify api gql-compile or an amplify push. It will update the feature flag to the V2 transformer and it will write any old schema files to the same path but with a .bkp extension
As this is meant for migrating existing projects, it won't work if you initialize an amplify project and try to migrate before pushing your API.

Issue #, if available

Description of how you validated changes
Executed manually
Checklist

[x] PR description included
[x] yarn test passes
[x] Tests are changed or added

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Codecov Report

Merging #8587 (1752128) into master (f72e59b) will decrease coverage by 0.00%.
The diff coverage is 0.00%.

@@            Coverage Diff             @@
##           master    #8587      +/-   ##
==========================================
- Coverage   57.06%   57.06%   -0.01%
==========================================
  Files         725      725
  Lines       41095    41096       +1
  Branches     8429     8429
==========================================
  Hits        23452    23452
- Misses      16831    16832       +1
  Partials      812      812

Impacted Files
Coverage Δ

...amplify-cli-core/src/feature-flags/featureFlags.ts
83.62% <ø> (ø)

...-awscloudformation/src/transform-graphql-schema.ts
14.37% <0.00%> (-0.05%)
:arrow_down:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update f72e59b...1752128. Read the comment docs.

If we want to fast track this and have it disconnected from the rest of the CLI, the only files changed in this PR should be:

Things in packages/amplify-graphql-transformer-migrator
jest.config.js
yarn.lock


Modifying Episode Numbers in podcast-dl

Hello! I'd like to discuss how to dynamically adjust the episode_num value in the following PowerShell command for the podcast-dl tool:
& ".\podcast-dl-9.3.4-win-x64.exe" --url https://feeds.buzzsprout.com/100.rss --out-dir ".\Buzzsprout_Podcast\" --episode-template "{{episode_num}}. {{title}}" --archive ".\resources\Buzzsprout_Podcast\archive.json" --episode-digits 3 --reverse

For example, I want to achieve the following variations:

Increment Episode Number:

Command:& ".\podcast-dl-9.3.4-win-x64.exe" --url https://feeds.buzzsprout.com/100.rss --out-dir ".\Buzzsprout_Podcast\" --episode-template "{{episode_num + 2}}. {{title}}" --archive ".\resources\Buzzsprout_Podcast\archive.json" --episode-digits 3 --reverse

Expected Result: The episode_num will be incremented by 2.

Decrement Episode Number:

Command:& ".\podcast-dl-9.3.4-win-x64.exe" --url https://feeds.buzzsprout.com/100.rss --out-dir ".\Buzzsprout_Podcast\" --episode-template "{{episode_num - 2}}. {{title}}" --archive ".\resources\Buzzsprout_Podcast\archive.json" --episode-digits 3 --reverse

Expected Result: The episode_num will be decremented by 2.

Is there a way to achieve this in podcast-dl? If so, how can I use it?

Sorry for the delay! podcast-dl can now accommodate this with the new config option episode-num-offset available in v9.4.0.
./podcast-dl.exe  --url "https://feeds.buzzsprout.com/100.rss" --episode-num-offset 0  --episode-template "{{episode_num}}. {{title}}"


Test failure: WriteAfterConnectionCloseNoops

This test fails occasionally with the following error:

Other tests within that build may have failed with a similar message, but they are not listed here. Check the link above for more info.
This test failed on master.
CC @muratg
This issue was made automatically. If there is a problem contact ryanbrandenburg.

@halter73 you seem passionate about this issue 😄


Fix serialization of datetime param.

closes #432

Nice solution to the problem. I guess we'll need to keep any eye out for more of these as more DAGs are written...


[SPARK-44667][INFRA] Uninstall large ML libraries for non-ML jobs

What changes were proposed in this pull request?
Uninstall large ML libraries for non-ML jobs
Why are the changes needed?
ML is integrating external frameworks: torch, deepspeed (maybe xgboost in future)
those libraries are huge, and not needed in other jobs.
this PR uninstall torch, which save ~1.3G

Does this PR introduce any user-facing change?
no, infra-only
How was this patch tested?
updated CI

cc @LuciferYang @HyukjinKwon

thank you, merged to master


Passing key as an option doesn't work

Runnning the example code
https://github.com/elixir-nx/scholar/blob/c4780dbab895e7308821fb57d40700f321c9ccce/lib/scholar/cluster/k_means.ex#L107-L109 gives me
** (NimbleOptions.ValidationError) unknown options [:key], valid options are: [:num_clusters, :max_iterations, :num_runs, :tol, :weights, :init, :seed]     (nimble_options 1.0.2) lib/nimble_options.ex:343: NimbleOptions.validate!/2     (scholar 0.1.0) lib/scholar/cluster/k_means.ex:137: Scholar.Cluster.KMeans.fit/2     #cell:s5a4sk2ajniowihy7hlnzwxvdc773h7d:3: (file)
Perhaps the way key option is declared https://github.com/elixir-nx/scholar/blob/c4780dbab895e7308821fb57d40700f321c9ccce/lib/scholar/cluster/k_means.ex#L75-L81 is incorrect?

The key option only exists on main, not on the release v0.1.0. So you need to either use main or follow the docs for v0.1.0 :)


responses: support prettyprint

It is part of json.dumps but the serializer should not care about the response formatting
old code:
    @staticmethod
    def _format_args(prettyprint=False):
        """Get JSON dump indentation and separates."""
        if prettyprint:
            return dict(indent=2, separators=(", ", ": "),)
        else:
            return dict(indent=None, separators=(",", ":"),)

This was done a release or 2 ago.


Zero device memory allocation tensor ops support

Is there any way to do tensor ops(add/div/matmul...) without memory allocation?
eg:
let dst = Tensor::zeros((2, 2), DType::F32, &cuda_dev)?;
let lhs= Tensor::zeros((2, 2), DType::F32, &cuda_dev)?;
let rhs= Tensor::zeros((2, 2), DType::F32, &cuda_dev)?;
candle::add(&lhs,&rhs, &mut dst)?;  //zero device memory allocation here

This is not supported at the moment, tensors are immutable (which has the upside of making some parts of the code - especially backprop - easier to reason about). That said we're thinking about allowing in place ops though it's unlikely to land anytime soon.

@LaurentMazare is possible to offer methods like CustomOp1/CustomOp2/CustomOp3 without return Result<(Storage, Shape)>?  so we can do that in place ops outside of candle core
https://github.com/huggingface/candle/blob/9e824ec810fbe490f21b7404058b6cb47d24c6cf/candle-core/src/op.rs#L160

The internals are currently designed for immutable tensors so we wouldn't want to support such operations as they would easily break invariants of the current code - in place mutation might be available at some point but again that would be a larger refactoring and will take some time.


Create resources table and API

Fixes #28

table to store any resources such as documents and websites (only ever stores external URLs, no option to upload actual files)

Permissions by role

public: none
registered, no role: none
analyst: R (where draft = false, ADDED 19/10/)
manager: CRUD
admin: CRUD

@tmfrnz ready


Suggest an dependabot to keep GitHub Actions updated

Hi! I'm Diogo and I'm back (see #218) hoping to offer a bit more help with security enhancements.
I'm coming to confirm that tslib has Dependabot enabled for Security Updates (which I suppose it's true based on this dependabot PR), and also to ask if you have interest on a PR configuring dependabot to also make regular version updates on your actions and/or on your dev dependencies.
This would be specially handy in case you hash-pin your sensitive dependencies (as it's being made on this PR), because they become harder to update manually. Using a Dependency-Update-Tool would ease the maintenance of those dependencies and also keep you safer, as hash-pinned dependencies ensure that the code you're running is always the same (e.g., the tag can't be changed to point to a malicious code).
In case you have interest, I'd be happy to raise a PR shortly =)
Thanks

Feel free to send a PR that pins actions; we are already doing so for TS itself in https://github.com/microsoft/TypeScript/pull/56211.


Can I use my own mesh for Stage:Edit?

Thank you for the great work!
I have my own mesh and corresponding texture. I would like to directly edit the texture using the "edit" stage without going through the second "texture generation" stage that produces latent representations. Because I am not using a 3DMM model for UV mapping, I want to know if it’s possible to skip latent generation and directly perform texture edits on my input mesh and texture.

Yes it is possible to perform texture edits on your own mesh and texture.
As your own mesh's uv is different from our pretrained uv model, you can use editing SDS loss and the consistency regularization loss, and set the texdiffusion loss to zero. (w_tex = 0, w_texyuv=0)
https://github.com/JiejiangWu/FaceG2E/blob/edec481c0ac75250117dc0fdda86b46459b8e872/demo_editing.sh#L6-L7


code cleanup and documentation

in preparation for i18n support

cleaning up functions
remove unnecessary functions
streamline strings and repeat error messages
add proper comments and JsDoc blocks

just documenting -
proposal for running regex on !id
group calendars - @group.calendar.google.com
users - @gmail.com
domain users - @example.com
regex to allow for group calendars (matching character length, as new calendars are appended with _)
regex to allow for users
regex to warn domain users - add help section in website

group calendar
<EMAIL_ADDRESS>new calendar format - warn to remove pre_
<EMAIL_ADDRESS>a lot of calendars are just preceded with c_
<EMAIL_ADDRESS>import calendar
<EMAIL_ADDRESS>gmail address
<EMAIL_ADDRESS>domain calendars - warn about GSuite
<EMAIL_ADDRESS>


MenuNavbar

I can't display manu using Listener.
What I do?

Created into my bundle directory Model (AppBundle\Model)
Created into Model class MenuItemModel with MenuItemInterface and declared abstract method
Created directory EventListener into AppBundle
Created class MyMenuItemListListener

`
namespace AppBundle\EventListener;
use AppBundle\Model\MenuItemModel;
use Avanzu\AdminThemeBundle\Event\SidebarMenuEvent;
use Symfony\Component\HttpFoundation\Request;
class MyMenuItemListListener
{
public function onSetupMenu(SidebarMenuEvent $event) {
    $request = $event->getRequest();

    foreach ($this->getMenu($request) as $item) {
        $event->addItem($item);
    }

}

protected function getMenu(Request $request) {
    // Build your menu here by constructing a MenuItemModel array

    $menuItems = array(

        new MenuItemModel('ItemId1', 'Label1', 'rasfe', array(/* options */), 'iconclasses fa fa-plane'),
        new MenuItemModel('ItemId2', 'Label2', 'sad', array(/* options */), 'iconclasses fa fa-plane'),

    );

    return $this->activateByRoute($request->get('_route'), $menuItems);
}

protected function activateByRoute($route, $items) {

    foreach($items as $item) {
        if($item->hasChildren()) {
            $this->activateByRoute($route, $item->getChildren());
        }
        else {
            if($item->getRoute() == $route) {
                $item->setIsActive(true);
            }
        }
    }

    return $items;
}

}
Next I add services
parameters:         app.menu_listener.class: AppBundle\EventListener\MyMenuItemListListener services:         app.menu_listener:             class: %app.menu_listener.class%             tags:                 - { name: kernel.event_listener, event:theme.sidebar_setup_menu, method:onSetupMenu }
Problem is that menu item isn't visible.
`

  `

I suppose, you're using the 2.x version?
If so, you will either have to disable the knp_menu integration in order to use the theme.sidebar_setup_menu event or you follow this guide which describes how to work with the KnpMenuBundle.

I using Symfony 2.8.
I Install "avanzu/admin-theme-bundle": "~1.3" using composer.
But in this version instruction havent't KNpMenuBundle.
With version I should install? Master or 2.0?
When I try install 2.0 composer ger error:
Problem 1     - The requested package avanzu/admin-theme-bundle ~2.0 is satisfiable by avanzu/admin-theme-bundle[2.0.0-beta.1, 2.0.0-beta.2, 2.0.0-beta.3, 2.0.0-beta.4, 2.0.0-beta.5] but these conflict with your requirements or minimum-stability.

so what version I have to use? I try master brunch but isn't show menu.
This version didn't use KNpMenuBundle?

Any idea?

Install the 2.0 branch it by using this composer entry:
"avanzu/admin-theme-bundle": "dev-feature/2.0"

@avanzu why this knp menu functionality not added to master? I see master has last commits on march 2017 and feature/2.0 has last commit in 2016. Did you abandoned this feature?

@marczaq do you still have problems with version 2.x?

@marczaq waiting your feedback for master branch, I would like that you test if you have the chance, thanks!

@Arkemlar same for you, if you want test with latest master, it should work, but if not, please let me know

I would not test this functionality since I made my own menu system based on KNP menu.

@Arkemlar thanks for the feedback. If you think that it is interesting to contribute your modification to this bundle or make a pull request to merge your changes, pull request are always welcome!

@shakaran I have tested the same @ghost files in my project with dev-master and work well.

Debug info

Component
Version

Symfony version
3.3.10

AdminThemeBundle
dev-master

With dev-master menu isn;t working for me. With feature/2.0 is working. It would be better to make working with master

@krekas could you open a separate issue and paste the code that you are using to generate the menu? So I can help you to identify the error or fix the bug if it is the case. Thanks!


ngxtop no data gathering from access log

Can you help me what problem is?
no data summary from access log
ngxtop
running for 42 seconds, 0 records processed: 0.00 req/sec
Summary:
|   count | avg_bytes_sent   |   2xx |   3xx |   4xx |   5xx |
|---------+------------------+-------+-------+-------+-------|
|	0 ||     0 |     0 |     0 |     0 |
Detailed:
| request_path   | count   | avg_bytes_sent   | 2xx   | 3xx   | 4xx   | 5xx   |
|----------------+---------+------------------+-------+-------+-------+-------|246

Hi @kimjangnam , looks like it guessed the location of your access logs incorrectly, thus couldn't get any records. Would you mind sharing your nginx config so I can take a look?

same to me, and here is my http config part of nginx.conf file

@lebinh


chore(main): release faro-shop 0.28.0

:robot: I have created a release beep boop
0.28.0 (2024-07-19)
Features

Bump app to 0.33.1 (#579) (ba71643)

This PR was generated with Release Please. See documentation.

:robot: Created releases:

faro-shop-0.28.0
:sunflower:


Fixes the broken build - logger

The make fails with the broken build because the logger is not present in the repository.
What this PR does / why we need it:
Fixes the broken build
Which issue(s) this PR fixes will close the issue(s) when PR gets merged):
Fixes #1257
Special notes for your reviewer:

Please confirm that if this PR changes any image versions, then that's the sole change this PR makes.
NONE

Thanks for your PR, would you please also remove other useless target for logger, like docker-build-logger, docker-push-logger in Makefile, and also the dockerfile for logger?

Thanks for your PR, would you please also remove other useless target for logger, like docker-build-logger, docker-push-logger in Makefile, and also the dockerfile for logger?

@pugangxa  Took care of it. Thanks

/lgtm

/retest

/retest

@PatrickXYS Thanks!
Looks like the build succeeded!

Thanks @naveensrinivasan ! We have fixed this, so the PR is no longer needed, thanks for reporting the issue.

Thanks @naveensrinivasan ! We have fixed this, so the PR is no longer needed, thanks for reporting the issue.


No 1.12.2

The mainstream version in China is still 1.12.2. Many servers with many mods need this.
1.12.2 in the build site cannot be built. Please update it.

No 1.12.2 uncomfortable day

I need it for 1.12.2 SO VERY MUCH !!!


Add focus argument in Terminal.prototype.open

Fix #640

Coverage decreased (-0.1%) to 68.708% when pulling 35f746c92557d73490a340c84224b26f898d78a4 on issue-#640-do-not-focus-on-open into 944da2808906aa86b6ad096fd0b179e8cf87e0b8 on master.

Opened up a documentation PR as well: xtermjs/xtermjs.org#20.

I don't think we should add an option to the API, isn't this the same as doing this?
term.open(el);
term.focus();

We could call it out in the release notes as a minor change, I don't see it breaking many applications though.

@Tyriar, this will break all applications that use xterm.js actually, since the focus will be elsewhere now.
Since this is changing the way it works and it is a user facing issue, I don't want to break the API in a minor release. It's a very simple piece of code, which can go away in the next major release.

Would be better to use options object instead of last boolean argument in v3. This way:
term.open(container, {
    focus: true
});

It is much cleaner and obvious then last boolean parameter.
What if there should be some other options, not only focus in a future?

A new object might cause confusion with Terminal(options). I would prefer if we removed the parameter outright in v3 so it's ignored.

I agree. Keeping this in options sounds quite better.


feat(linter): implement eslint(constructor-super)

This doesn't yet cover all cases but it is a starting implementation. There are many edge cases and I think it'd be easier to derive all the "wrong" cases and check against those, rather than trying to verify all the "correct" cases.
See #127

Need to rebase and add nursery.

Done 👍🏼


Notice of Copyright/License Violation

This is an official notice of Copyright violation against the PIVX developers in which this project has been forked from. The MIT copyright license, and subsequent copyright headers in source files have been modified to explicitely exclude the PIVX developers.
You are hereby notified of an intention to pursue further action if this issue is not acknowledged and formally addressed with a resolution timeframe commitment wherein. Failure to acknowledge and correct the violation will result in a formal DMCA takedown notice filed with GitHub Proper after no less than five business days from the date of this notice.
Explicit acknowledgement and referencing progress to maintain compliance MUST be noted in this issue's comments or referred to in any subsequent pull requests to this repository.

don't change the title to something non-descriptive

Hello @Fuzzbawls , This issue is being addressed. We apologize for the inconvenience caused. We acknowledge that the code has been forked from PIVX and a blunder from our Editor caused it to changed the copyright to our organization name as well. Thank you for your patience and notification of this issue.


EmptyThrowable error

EmptyThrowable: The APK file /myapp/build/outputs/apk/myapp-debug-androidTest-unaligned.apk does not exist on disk.

Given this issue combined with #25, I really think the plugin needs to move to a pre-built apk model (similar to robotium's android studio plugin). The existing reliance on Gradle is too flaky.

@bootstraponline thank you for submitting the issues. I will try to evaluate new solution with pre-built apk, but this will not be soon :( because this will require a lot of changes.
As a workaround now you can call "assembleAndroidTest" gradle target and it should create necessary APK

@vpedak Google just announced at I/O a built in Espresso test recorder for Android Studio.

@bootstraponline thanks, I will take a look at Android Studio 2.2. So if new test recorder will work fine I will switch to another project, because this test recorder will be unnecessary.

@vpedak recorder is available now http://tools.android.com/recent/androidstudio22preview3available?pli=1

Thanks, I will check it.

http://www.philosophicalhacker.com/post/an-espresso-test-recorder-deep-dive/ explains the implementation.

Thanks a lot. Yes, I saw that it is using debugger for recording. This is
why it is so slow.., Now recorder from Google is not so good, but in any
case I think they will improve it.
On Sun, Jul 10, 2016 at 7:43 PM, bootstraponline<EMAIL_ADDRESS>wrote:

http://www.philosophicalhacker.com/post/an-espresso-test-recorder-deep-dive/
explains the implementation.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/vpedak/droidtestrec/issues/26#issuecomment-231598363,
or mute the thread
https://github.com/notifications/unsubscribe/ANNTMG39tEktQ-rh3GuN14-kv-PxgyZVks5qUSE5gaJpZM4IbU3A
.

Initializing ADB，IllegalStateException: AndroidDebugBridge.init() has already been called. when I using this
plugin，I want to know why and how to use it in a right way.


Embedding images in the mail

Describe the bug
I want to embed images in my mail. Facing issues with it, any help or guidance would be appreciated
Steps to Reproduce the Bug or Issue
What are these Images about?
These images are graphs of some statistical data, these graphs are generated with the help of Contex.
The graphs generated by Contex are in SVG form, so firstly my approach was to send the HTML mail with the SVG code directly.
But it turns out that the majority of Email clients don't support SVG
The second approach was to convert this SVG into PNG then into base64 string and place it in img tag. It was working fine in the local Swoosh mailbox, But in the production, the images weren't getting displayed (seems like the base64 way of displaying images was also blocked)
Expected behavior
The final approach was to use inline attachments of Swoosh and send the PNG.
It is working exactly as Expected in the local

But there is a weird bug in the production

There are no labels or legends in the image
How could only the labels get removed as I'm sending the graph as PNG ?
This is my code snippet:
defp add_body(mail, body, false), do: text_body(mail, body)
 defp add_body(mail, body, true), do: html_body(mail, body)

 defp inline_attachments(mail, opts) do
   Enum.reduce([:contacts, :conversations, :optin, :messages], mail, fn key, acc ->
     case Keyword.get(opts, key) do
       nil -> acc
       data -> attachment(acc, create_attachment(data, key))
     end
   end)
 end

 defp create_attachment(data, key) do
   Swoosh.Attachment.new({:data, data},
     filename: "#{key}.png",
     content_type: "image/png",
     type: :inline
   )
 end

def send_mail() do
  ...internal logic
  ...
  new()
    |> to(send_to)
    |> from(from_email)
    |> cc(in_cc)
    |> subject(subject)
    |> add_body(body, is_html)
    |> inline_attachments(opts)
end

Platform

OTP: 25
Elixir: 1.14.5

I'd be surprised if swoosh had anything to do with the bug. Check your production data, see if the shape has any difference. Maybe something is nil when it shouldn't be. And check your graph lib, maybe it is on a different version from the one you're using locally.

Tested in the production with the same data and version that of local, it is working in local but breaks in the production.

My suggestion is, create an endpoint to show the generated PNG files. This way you don't go through email provider or swoosh. We don't have any code that does anything on images. There is no way swoosh modifies your images.


Report only new regressions

Background
At Confluent we use Hunter to detect perf regressions in Kafka Streams (see the talk at Kafka Summit London 2024  for the overview).
We integrate Hunter in the CI pipeline that runs benchmarks, then calls hunter analyze all --update-postgres --output regressions_only --last 10 that, in turn, does exit 1 if there are regressions. As a result, new regressions lead to failing the CI run and a Slack alert with relevant details.
Problem
Hunter reports not only new, but also existing, previously discovered regressions. This happens because hunter analyze goes through import data -> detect-changepoints -> report flow that does not include any prior information, even though we store changepoints in PostgreSQL with --update-postgres.
Solution?
Suggested fix is to make it possible in Hunter to report only new regressions. This should be doable, at least in our case, because we store information about regressions in PostgreSQL along with experiment results. Maybe we can provide an optional flag to import known changepoints?

For context, in MongoDB there is/was a layer above the e-divisive, where reported change points would be stored durably (in a MongoDB database, obviosly:). One reason was that with the monte carlo simulation, change points would disappear and reappear. (As is later explained by Piotr as publlished in the Hunter paper.) This upper layer also acts as the first line of triage: Does the human evaluator agree with the change point, and if so, create a jira ticket or link to existing one. Ultimately once the jira ticket was closed, this would affect the change point status one more time. (For example, for closed-fixed, there would be a correspodning fix linked, which hopefully e-divisive would have found as well, so linking the regression and the fix is actually the triage action for the fix.
So I was saayingg.... One function of this mangement layer is that CPs only cause alerts at the point they are added to this store. (TBH at the time at least we didn't have any alerts. The build lead would look at the dashboard every day and there would in any case always be some false positives to deal with every day.)
I think not spamming alerts is an integral part of the process and the Datastax implementation of this "ran out of steam" a bit for not implementing something similar. Otoh at that point in time the accuracy had improved so much, that at least is isn't spamming dozens of false positives every day, so I figured if it doesn't annoy everyone to see the same alert every day, let's fix something else instead...


No such file facebank.pth

What is a facebank.pth? I thought database is just a directory with images of faces, but in face_verify
targets, names = load_facebank(conf)
i see
def load_facebank(conf):
    embeddings = torch.load(conf.facebank_path/'facebank.pth')

Is this a model? Or what?
Also i've got an error:

embeddings = torch.load(conf.facebank_path/'facebank.pth')
TypeError: unsupported operand type(s) for /: 'str' and 'str'

What should i pass to the load_facebank and how to correctly get targens, names? Please tell me, thank you

Hey! I got the same error.
Use --update flag with face_verify.py for the first time to build facebank.pth.
Hope you get it!


AllCS Dataset Download

Hi, I downloaded the AllCS Dataset as given here, but noticed that it only contains around 14.6k samples between the train, valid and test splits. In your paper you've mentioned there being 21.4k samples in total which is significantly greater. Is there anywhere I can download the full dataset?

Sorry for the late reply.
There are 14.6K monolingual lines but there are one or more-than-one CS lines per monolingual line. So by using all the lines from gold and mturk, you will get 21.4K CS lines. In the current repository you can directly use data/All-CS/en.train file for CS data. It has 21.4K lines


NullReferenceException for SteamVR_Behaviour_Pose, also a lot of InvalidHandle!

Without doing any customization - just installing the plugin and running an empty scene with the rig prefab in it - I get a lot of errors saying some sort of variation of the following:
GetDigitalActionData error (/actions/default/in/GrabPinch): InvalidHandle handle:<PHONE_NUMBER>682057874
UnityEngine.Debug:LogError(Object)
Valve.VR.SteamVR_Action_Boolean:UpdateValue(SteamVR_Input_Sources) (at Assets/SteamVR/Input/SteamVR_Action_Boolean.cs:60)
Valve.VR.SteamVR_Input:UpdateNonVisualActions(SteamVR_Input_Sources) (at Assets/SteamVR/Input/SteamVR_Input.cs:536)
Valve.VR.SteamVR_Input:UpdateNonVisualActions() (at Assets/SteamVR/Input/SteamVR_Input.cs:508)
Valve.VR.SteamVR_Input:Update() (at Assets/SteamVR/Input/SteamVR_Input.cs:322)
Valve.VR.SteamVR_Behaviour:Update() (at Assets/SteamVR/Scripts/SteamVR_Behaviour.cs:219)
It's happening on Update so there's a lot of it; it looks like there's one for each 'in' action.
Also, there's a few of these when starting:
NullReferenceException: Object reference not set to an instance of an object
Valve.VR.SteamVR_Behaviour_Pose.OnEnable () (at Assets/SteamVR/Input/SteamVR_Behaviour_Pose.cs:105)
Leads to this:
poseAction.AddOnDeviceConnectedChanged(inputSource, OnDeviceConnectedChanged);
If anything, it seems poseAction is null.

Did SteamVR ask you to generate actions? And did that process complete successfully?

Hello, same problem here. A lot of NullRefs and I can't get the demo Interaction_Examples scene to work at all.
I don't think SteamVR asked me anything about generating actions. I will try to reimport it and post the details here.

It's been a month and hopefully this has been fixed. Closing the issue.


How the pickel is generated from origin images

Hi, this is good work and very helpful. But I wonder how you generate the pickle files from original images. Because when I use my pickles (generated based on original images through Resize(84) and CenterCrop(84) from torchvsion.transforms). The performance decrease significantly from 77% to 73%

Hi, this is good work and very helpful. But I wonder how you generate the pickle files from original images. Because when I use my pickles (generated based on original images through Resize(84) and CenterCrop(84) from torchvsion.transforms). The performance decrease significantly from 77% to 73%

Hi~May I ask for your help? I can not generate my own pickles, can you help me?


Implement different fonts for header and body text

Current State
Currently, meshery.io uses a single font for both header and body text which could negatively impact the overall aesthetics and readability. This issue is to make the website more visually appealing and user-friendly.
Desired State
The header text should have one, and the body text should have a different font for improved readability and aesthetics (see guide below).

Contributor Guides and Resources

📚 See the Contributing to Meshery.io Website section of the readme.md and other contributing instructions, too.
🎨 Wireframes and designs for Meshery UI in Figma (open invite)
🙋🏾🙋🏼 Questions: Discussion Forum and Community Slack

I think this reinforces our brand guide and is a step in the right direction - layer5.io/brand

can you provide me the folder details in which i work on the issue
@leecalcote @hauwy-ismyl

@leecalcote can i work on this?

Yes, please.

hi, @trinayreddy4 r u still working on this ?

Any updates here @trinayreddy4 ?

@abhijeetgauravm yeah i was busy with my end sem college exams would be discussing about it in the evening web meeting...

@sharvarii11 do u want to address this?

@abhijeetgauravm is there somebody working on it or is it done?
if not can you assign this to me?

@omesh-omg you still up for this issue?

Yes

@omesh-omg ?

@omesh-omg ?
Hello @sudhanshutech


Release date of version 3.0

Hello
I want to know planed release date of version 3.0.

Yes, would be nice to know.
Thanks.

me too

me too

same here

Please test the alpha version first to make sure everything works correctly. If you find any issues please report them here (as new issues). Once we confirm by enough testers that it works, we'll release a stable version. I can't wait to get this out there so let's get some testing going and release thing 😃


ssh tunnel directions fail on Mac OSX

Not exactly sure why yet. Following the rsc suggestion:
harryputnam@CC-D17LVCG-LT ~ % ssh -J hputnam@c4-log2 -L 8787:c4-n12:43242 c4-n12
harryputnam@c4-n12's password:
Permission denied, please try again.
harryputnam@c4-n12's password:

It did not accept my password. This syntax does work on my Mac:
ssh -N -L 8787:c4-n12:43242 hputnam@c4-log2

Researching...

Suggestion: troubleshoot without the port forwarding.
It might have to do with SSH key agent forwarding.

According to man ssh on my Mac, the -J should work. However online examples I have looked at all use the other syntax: ssh -N -L 8787:c4-n12:43242 hputnam@c4-log2
Not sure why no one uses the -J option other than it breaks on Macs. Examples:
https://www.studytonight.com/post/how-to-setup-ssh-tunneling-in-mac-os-or-ubuntu
https://helpdesk.eoas.ubc.ca/kb/articles/how-to-ssh-tunnel-a-connection-using-macos
Is it possible to add a "for macs do this" line to the output?

Yes, we can adjust the instructions by rsc.  FYI, I dropped the ssh -N, because it's always nice to be able to re-use that login for other things.

Honestly, I don't know what I was thinking when I introduced -J. I've updated the instruction to use:
ssh -L 8787:c4-n12:43242<EMAIL_ADDRESS>

... without the -N. We just get a terminal on the login node...

What's the problem with that?  Why is it "required for Macs"?
With and without ssh -N ..., we end up needing a new terminal. I figured it's better to put that terminal in use, so I decided to go without the -N. What am I missing?

Not what people expect, they have been doing this following online tutorials which invariable use -N. I think the guy was just confused, the tunnel was probably there...

You are not going to believe this. The user tells me that the -N did not work for him. He put in a -J (aka what you had before) and it worked for him. I just asked him what OSX version he is on. UCSF just released the newest major OS X release for UCSF laptops so he could well be on a newer version than me...

The guy is on an older version than me. Yeah, let's go slow with this. I voter for leaving it as-is for now.
Reverse tunnels can be dangerous I had to react to a really bad virus at EBMUD that took down all our mail servers and quite a bit of the Windows infrastructure. The virus got in via a persistent reverse tunnel between an EBMUD workstation and the user's Home consumer wifi router. I think one of his kids got it on the family computer and it wormed into EBMUD via that tunnel. The user was our CIO so I couldn't even yell at him...

The user was our CIO so I couldn't even yell at him...

... but now you told the world ;) [you can delete comments here if you want]

I've updated the README with instructions on how to run and access rsc running on a remote machine.


Travis build failed related to golint dependency

Travis build failed with the below error:
$ go get -u github.com/golang/lint/golint
package github.com/golang/lint/golint: code in directory /home/travis/gopath/src/github.com/golang/lint/golint expects import "golang.org/x/lint/golint"
The command "go get -u github.com/golang/lint/golint" failed and exited with 1 during .
Your build has been stopped.

can be fixed with the workaround proposed here: https://github.com/golang/lint/issues/397

closing this as it has been fixed.


Create extensions points

It is possible to extend System Designer by adding systems in addons directory and then build System Designer, but:

we need to provide an extension manager to remove / add on the fly extensions
extensions must be for toolbar / menubar (i.e. create buttons and their behaviors when we click on it, create tabs and their behaviors when we click on it)

You can extend System Designer by composing other systems with its systems. In that case, these systems are called addons.
To extend System Designer, just copy and paste a system into the /addons directory and run npm run web.


Suggestions

After using the new Composer for a couple hours to create a test form, I have some initial "quality of life" suggestions based on my experiences as an actual user.  This is just my opinion, of course, but perhaps it is useful nonetheless.
Suggestions
“Add translation” field should appear by default in the currently active Form locale
If I am working with a form whose active locale is English, naturally I will be adding label translations in English by default.  It makes sense that this label translation field would appear  by default without having to manually click the “add translation” button to add it, while additional locales are added by clicking the button.
It should be possible to delete label translations
I'm not sure if this is expected behaviour, but once I add a label translation, there is no obvious way to delete it.  The only possible action is to clear the text value, but what I truly want is to remove the field altogether.
Consider changing the ordering of the fields in the Choice editing tab
The order of fields in the Choice editing tab feels a bit awkward.  First you have key, and then a rule editor, and the label value is hidden by default until you click the button to add a translation.  When I make lists, I like to add the key and value at the same time, and the rule comes last.  It might feel more natural if key and value were physically closer to each other, both visible by default at the same time, and not separated by a rule editor line.
Perhaps it would make sense to put the key/value on the same line.  I am not sure that a key (or even a value, for that matter) requires an entire line for the value, but that's just my opinion.

Expand all / Collapse all buttons in Explorer should be combined into one toggle button
I think the natural tendency of expand/collapse buttons is that they toggle.  But here, we have two separate buttons.  It feels a bit unnatural to have to click on a separate button when I want to expand and then collapse this menu tree.
New fields added to the bottom of the Page should be scrolled into view
When I add new items from the “Add item” button within a group, the view correctly scrolls up to show these new fields. However, if I click the “Add item” on the Page level at the bottom, new items are added “under” the current view and it doesn’t scroll up to show them.
Consider adding a list of available properties and their descriptions to the "Properties" tab.
We all know that, unless you know what they are, there is no obvious way to enter properties.  I am sure this has been discussed for years, but maybe now would be a good time to figure out a good way how to display the available options to the user and give some explanation of what they do.

Suggestions implemented in #142


Add whitespace after operator names in operator definitions.

Previously, all our operator definitions looked like func ***<T>(args) or func ***(args). For many operator names, having it butt up directly against a < or ( is somewhat ugly, even though it's syntactically OK. This PR changes all of those to include a space. This style has been previously established in places like ReactiveCocoa, Box, and Apple's own documentation.

:+1:

:+1: feel free to merge into master yourself of I'll do it later today.


a script to benchmark our obfuscators

Depends on:
https://github.com/uProxy/uproxy-lib/pull/291
Yields graphs like this:

:+1:

Thanks @blanu! I removed sleep and now we're good.


Opening older charts (Aprill 22 2023) on the newest version in the chart editor crashes the game

Which target are you using?
[x] Windows
[ ] Linux
[ ] Mac
Explain your issue
Like it says in the title, when I open any older chart from (April 22, 2023) in the chart editor on the newer versions, the game crashes.
Bug tutorial:

Download codename from April 22, 2023
Download update from June 2023
Open the chart editor onto any song
Crash

Could you provide a chart?

here This is from Bopeebo

nvm I figured it out, the version I was on was missing all the event-related images


which solution to choose?

thanks for sharing! when meet low-resource language , two solution： one is use Synthetic Data；other is cross-lingual learning (CLL) which mentioned in
your paper？ how to choose between the 2 solution？ can you give some suggestions? thanks

Hi,
Thank you for your interest in our work!

how to choose between the 2 solution？

It is up to your situation, and I think you can use both simultaneously: synthetic data and cross-lingual learning.
Especially when you don't have synthetic data for low-resource language, you can use synthetic data for high-resource language such as English and conduct cross-lingual learning for better performance!
Regarding our paper, we submitted it to arXiv this morning, and it will take one day to be released.
According to arXiv, it will be released on Tue, 19 Dec 2023, 01:00:00 GMT.
Best regards,


Is assignment necessary in mbedtls_ssl_parse_certificate?

https://github.com/ARMmbed/mbedtls/blob/66e21efe47f9df0f5a9fe71cd86a20b7dc2f6fdc/library/ssl_tls.c#L2748-L2751
Return value ret cannot be non-zero here, therefore assignment and the check could be changed to
 if( authmode != MBEDTLS_SSL_VERIFY_OPTIONAL )
     ret = MBEDTLS_ERR_SSL_NO_CLIENT_CERTIFICATE;

Hi @irwir . You are correct, although I imagine the compiler will make the necessary optimization. Would you like to submit a PR for the change you suggested?


Cannot login. 2 devices - 2 different errors

I cannot login.
I have 2 different Android devices:
Device 1: Android 6.0.1 (yes, it is an old one).
Error message:
Authentication was not successful.
Maybe there is no internet connection?
Error Message: HandshakeException: Handshake error in client (OS Error:
CERTIFICATE_VERIFY_FAILED: certificate has expired(handshake.cc:393))

If I check the "Ignore invalid certificate.' then the error message Username and/or Password is incorrect! appears
Device 2: Android 12
Error message:
Username and/or Password is incorrect!
I am sure, that I use the correct credentials (2FA is enabled in Nextcloud).
In both cases the checkbox "Use self generated App Password. Needed for accounts with 2FA.' is checked.
Any idea how to solve this issue?

I had this same problem, here's how to solve it:
Go to Personal Settings/Security/Devices & sessions and create a new app password. Then use the provided password as your login password in the app.

Great. Thanks. It works.
It would be cool to have this information added in the documentation


fix CORS issue

If domain-X makes a request with cookies to domain-Y, it will be able to read the response.
this PR solves this issue.
It basically replaces:
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true

with:
Access-Control-Allow-Origin: https://domain-X
Access-Control-Allow-Credentials: true

in the response of domain-Y
Note:
We don't modify the Access-Control-Allow-Credentials header, because we don't want to change the normal behavior of the page.
If the ACAO header includes a domain (and not '*'), and we can translate it, we update it, otherwise, we leave as it is.

Thank you! Based on your input I've pushed a possible fix.
Can you pull from master and let me know if the issue was fixed?
Fix: https://github.com/kgretzky/evilginx2/commit/2cef350d26090b1ac76ef9d0f658e7c83c2d285e

Already fixed in main