[Snyk] Fix for 75 vulnerabilities

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.
Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

api/pacman-api-auth/pom.xml

Vulnerabilities that will be fixed
With an upgrade:

Severity
Priority Score (*)
Issue
Upgrade
Breaking Change
Exploit Maturity
Reachability

475/1000  Why? Has a fix available, CVSS 6.5
Directory Traversal SNYK-JAVA-COMAMAZONAWS-2952700
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1009829
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1047324
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

560/1000  Why? Has a fix available, CVSS 8.2
XML External Entity (XXE) Injection SNYK-JAVA-COMFASTERXMLJACKSONCORE-1048302
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052449
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1052450
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1054588
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056414
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056416
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056417
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056418
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056419
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056420
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056421
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056424
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056425
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056426
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1056427
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-1061931
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-174736
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
No Path Found

525/1000  Why? Has a fix available, CVSS 7.5
Denial of Service (DoS) SNYK-JAVA-COMFASTERXMLJACKSONCORE-2421244
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

520/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
Denial of Service (DoS) SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038424
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
No Path Found

670/1000  Why? Proof of Concept exploit, Is reachable, Has a fix available, CVSS 5.9
Denial of Service (DoS) SNYK-JAVA-COMFASTERXMLJACKSONCORE-3038426
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
Reachable

520/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 5.9
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-450207
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
No Path Found

705/1000  Why? Mature exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-450917
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Mature
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-455617
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-467014
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

675/1000  Why? Mature exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-467015
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Mature
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-467016
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-469674
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-469676
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-471943
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-472980
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-540500
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-548451
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-559094
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-559106
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-560762
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-560766
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-561362
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-561373
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

630/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-561585
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-561586
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-561587
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-564887
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-564888
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-570625
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-572300
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-572314
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-572316
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

555/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-6056407
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

780/1000  Why? Proof of Concept exploit, Is reachable, Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-608664
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
Reachable

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72448
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72449
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72450
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72451
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72882
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72883
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

563/1000  Why? Has a fix available, CVSS 8.1
Deserialization of Untrusted Data SNYK-JAVA-COMFASTERXMLJACKSONCORE-72884
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

525/1000  Why? Has a fix available, CVSS 7.5
Denial of Service (DoS) SNYK-JAVA-COMFASTERXMLJACKSONDATAFORMAT-1047329
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

475/1000  Why? Has a fix available, CVSS 6.5
Denial of Service (DoS) SNYK-JAVA-IONETTY-1020439
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

460/1000  Why? Has a fix available, CVSS 6.2
Information Disclosure SNYK-JAVA-IONETTY-1070799
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

460/1000  Why? Has a fix available, CVSS 6.2
Information Disclosure SNYK-JAVA-IONETTY-1082235
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

595/1000  Why? Mature exploit, Has a fix available, CVSS 5.9
HTTP Request Smuggling SNYK-JAVA-IONETTY-1317097
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Mature
No Path Found

475/1000  Why? Has a fix available, CVSS 6.5
HTTP Request Smuggling SNYK-JAVA-IONETTY-2314893
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

550/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 6.5
HTTP Request Smuggling SNYK-JAVA-IONETTY-469234
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
No Path Found

600/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
HTTP Request Smuggling SNYK-JAVA-IONETTY-543490
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
No Path Found

600/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
HTTP Request Smuggling SNYK-JAVA-IONETTY-543669
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
No Path Found

475/1000  Why? Has a fix available, CVSS 6.5
Denial of Service (DoS) SNYK-JAVA-IONETTY-5725787
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

600/1000  Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
HTTP Request Smuggling SNYK-JAVA-IONETTY-6056419
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
Proof of Concept
No Path Found

415/1000  Why? Has a fix available, CVSS 5.3
Improper Input Validation SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-1048058
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

563/1000  Why? Currently trending on Twitter, Has a fix available, CVSS 7.1
Open Redirect SNYK-JAVA-ORGSPRINGFRAMEWORK-6261586

Yes
No Known Exploit
No Path Found

555/1000  Why? Recently disclosed, Has a fix available, CVSS 7.1
Open Redirect SNYK-JAVA-ORGSPRINGFRAMEWORK-6444790

Yes
No Known Exploit
No Path Found

610/1000  Why? Recently disclosed, Has a fix available, CVSS 8.2
Improper Access Control SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-6457293

Yes
No Known Exploit
No Path Found

525/1000  Why? Has a fix available, CVSS 7.5
Allocation of Resources Without Limits or Throttling SNYK-JAVA-SOFTWAREAMAZONION-6153869
com.amazonaws:aws-java-sdk:  1.12.234 -> 1.12.685
No
No Known Exploit
No Path Found

(*) Note that the real score may have changed since the PR was raised.
Vulnerabilities that could not be fixed

Upgrade:

Could not upgrade<EMAIL_ADDRESS>to<EMAIL_ADDRESS>Reason could not apply upgrade, dependency is managed externally ; Location: https://maven-central.storage-download.googleapis.com/maven2/org/springframework/boot/spring-boot-dependencies/2.0.4.RELEASE/spring-boot-dependencies-2.0.4.RELEASE.pom
Could not upgrade<EMAIL_ADDRESS>to<EMAIL_ADDRESS>Reason could not apply upgrade, dependency is managed externally ; Location: https://maven-central.storage-download.googleapis.com/maven2/org/springframework/boot/spring-boot-dependencies/2.0.4.RELEASE/spring-boot-dependencies-2.0.4.RELEASE.pom
Could not upgrade<EMAIL_ADDRESS>to<EMAIL_ADDRESS>Reason could not apply upgrade, dependency is managed externally ; Location: https://maven-central.storage-download.googleapis.com/maven2/org/springframework/boot/spring-boot-dependencies/2.0.4.RELEASE/spring-boot-dependencies-2.0.4.RELEASE.pom

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:
🦉 Directory Traversal
🦉 Deserialization of Untrusted Data
🦉 XML External Entity (XXE) Injection
🦉 More lessons are available in Snyk Learn

Checkmarx One – Scan Summary & Details – 35301443-9b51-4edd-99cf-b6154d205d1d
New Issues

Severity
Issue
Source File / Package
Checkmarx Insight

CVE-2024-22243
Maven-org.springframework:spring-web-5.0.8.RELEASE
Vulnerable Package

CVE-2024-22257
Maven-org.springframework.security:spring-security-core-5.0.7.RELEASE
Vulnerable Package

CVE-2024-22259
Maven-org.springframework:spring-web-5.0.8.RELEASE
Vulnerable Package


Add cfgpath argument

I'm running this in a docker container and need the configuration path to be outside of the working folder for the script.
I've added an argument to optionally provide a path.  If not provided it continues to default to getcwd()
Docker container is at https://hub.docker.com/r/biwhite/packt/

hello, sorry for long response delay, I am finally back and take a look on your changes tommorow, maybe it would be good if you can share also your docker configuration and add it to the this repo as an alternative.
thx!

merged manually


Allow opening ds-metadata-uri-values links in a new window

References

Fixes #2834

Description
This feature request proposes adding a new optional input parameter to the <ds-metadata-uri-values> component in order to specify the link target, allowing metadata links to open in a new window/tab.
Instructions for Reviewers
List of changes in this PR:

Added a new optional input parameter linkTarget to the <ds-metadata-uri-values> component. The default value of this parameter is _blank, this will make sure the link is opened in a new window/tab.
Added a test case in the src/app/item-page/field-components/metadata-uri-values/metadata-uri-values.component.spec.ts to verify the correct application of the linkTarget attribute to metadata links.

How to test:

Go to an item page, for example a publication
Click on the link that's under the URI-title
The link now opens in a new tab/window

Reason for changes: If the user clicks a link that leads away from DSpace, we want it to open in a new window.
Checklist

[x] My PR is small in size (e.g. less than 1,000 lines of code, not including comments & specs/tests), or I have provided reasons as to why that's not possible.
[x] My PR passes ESLint validation using yarn lint
[x] My PR doesn't introduce circular dependencies (verified via yarn check-circ-deps)
[x] My PR includes TypeDoc comments for all new (or modified) public methods and classes. It also includes TypeDoc for large or complex private methods.
[x] My PR passes all specs/tests and includes new/updated specs or tests based on the Code Testing Guide.
[x] If my PR includes new libraries/dependencies (in package.json), I've made sure their licenses align with the DSpace BSD License based on the Licensing of Contributions documentation.
[x] If my PR includes new features or configurations, I've provided basic technical documentation in the PR itself.
[x] If my PR fixes an issue ticket, I've linked them together.

Thanks @kunovercammen. This patch works well for me on DSpace 7.6.1. Our repository has many metadata fields containing URLs that should be opened in a new window (for example DOIs and other URLs on external sites).
This is a very minor change, but I wonder if @tdonohue will allow it in dspace-7_x since it changes the existing behavior? In any case, the base branch should probably be changed to main and then the port to dspace-7_x tag should be added if Tim agrees.

@kunovercammen : This seems reasonable to me for both 7.x and main.  However, I cannot get this PR to apply cleanly to the main branch.  Could you please create a second PR which can be applied to main?  That way this can be more easily tested for 8.x as well.

From reading the code in d46248e99be7383fe3308d37d1d77be56b81f427 it seems this same functionality was introduced as part of the COAR Notify support recently merged in main for DSpace 8.0-SNAPSHOT.


Error: No compatible device found

I’m getting an error when trying to run Blitz (https://github.com/DioxusLabs/blitz) on a server. Are there any native dependencies required to run Blitz? I suspect the issue might be GPU-related, as my server only has CPU.
The error is triggered by this code: https://github.com/DioxusLabs/blitz/blob/5caf93c7a7e1edc24f93f204d0e15593f7be3513/packages/blitz-renderer-vello/src/renderer.rs#L181

You likely won't be able to run the current version of Blitz on a server that doesn't have a GPU. This is because of our dependency on wgpu (via vello) for rendering. There are two ways in which this could be made to work:

Use a server with a GPU
Someone could write an alternative to blitz-renderer-vello using a different rendering backend which supports CPU-only rendering (for example, skia)

That's definitely something I would like to do long-term. But isn't on our short-term roadmap. I'd be happy to provide pointers if this is something that you would be interested in implementing.

@ducan-ne I've discovered a 3rd approach. Install software GPU emulation:
See https://github.com/linebender/vello/blob/main/.github/workflows/ci.yml#L210

I'm going to close this one, but I've opened https://github.com/DioxusLabs/blitz/issues/157 to track the cpu-renderer feature.


litellm error

when i run this cmd - uvicorn opendevin.server.listen:app --port 3000
show error modulenotfounderror: litellm
then i install litellm then again i run
uvicorn opendevin.server.listen:app --port 3000
show same error

me to

why not use make build&make run to start?

Yes, please use the make commands as listed in the README.

Yes, could you please use the make commands as in the readme? I'll close this for now, but if you still encounter errors after using make then please feel free to open a new issue!


Added more Netscaler OIDs

Adding additional interface, ssl, tcp OIDs.

looks great @khpeet! requesting a peer review from @Mesverrum for a second set of eyes on this just to make sure syntax/indentations look good.


Add support for the translucent tile type

Note: Caption tile type will not be supported as the default window border will be used.

Should also probably look into events stored in the tileset... though is that info even referenced from the tiles or just used as a default when adding tiles to layers (in that case that data is quite safe to ignore) – and does anyone even use that feature anyway?

Checked the above. The events specified on the tileset just set the default event when the tile is added into the level. That means it only has any meaning in JCS and is not important to be implemented now if at all.


Refactoring - Record type

Fixes #344
Fixes #345

[x]  - rename structure in fields
[x]  - rename rawConstruct in construct
[x]  - added deconstruct
[x]  - marked construct / deconstruct unsafe

Fixed by #372


[Docs] little error? in inline documentation in registry.hpp

This sentience talks about it self as if it talks about another function:
     * @brief Assigns entities to an empty registry.
     *
     * This function is intended for use in conjunction with `raw` and
     * `assign`.<br/>

https://github.com/skypjack/entt/blob/master/src/entt/entity/registry.hpp#L457

It feels important. 😄 Thanks for pointing this out.

It feels important. 😄 Thanks for pointing this out.


Custom icon not resizing correctly

I was testing this with one of my ownh icons, but i wasn't able to get the right height, even though I user the same code as the icons that are used in the solution.:
Also the icon is not located correctly:

<ng-md-icon icon="account_child" size="48"></ng-md-icon>
account_child

         <ng-md-icon  icon="Ajax123" size="48"></ng-md-icon>
Ajax123

http://i65.tinypic.com/2znzb5i.png
The error is within the code in de d attribute of the path, If I replace the value in the d attribute of Ajax123 with the value of the d attribute of account_child it is working correctly.
My svg is originally 100x100

Already solved it, I had to change the viewbox attribute to 0 0 100 100


add a signer claim to the aws alb auth provider

Adds an optional signer claim matcher to the configuration options of the AWS ALB auth provider.
This also correctly marks the iss claim as required in the config schema, which it always was in practice at runtime.

Changeset strengthened and added config instructions, updated api report.
Yeah I would love to make it required - but when? Now immediately and make it a breaking change, or give it some time? In all honesty, making this one required and the issuer optional would be a decent end state.

Yep probably, but yep not now. I think the current change is good, and then we can move towards it being required in the future


Integrate the latest treetable (v3.x)

treetable v3.x: the options and underlying logic are changed a lot, more ease-of-use.

@niftyhawk see the jsFiddle in README.

Hi Sir, very good to find this lib of yours which I currently need. So, still no support for jTreeTable v3.x?


Delete a Transaction

How to delete a transaction?
Thank you

Deleting or modifying already committed transactions from the Admin interface has intentionally been disabled. Such modifications would be illegal under many jurisdictions if the posted transactions represent the activities of a real legal entity. Erroneous transactions should be corrected by posting a new transaction reversing the error.
Deleting transactions is possible if they are still in draft state.


feat: add --nat flag to reth node

Fixes #854
Rough Draft

Reused NatResolver enum by making it pub(crate) but it threw up some errors in the file.
Setting this also threw up errors in other files using networkConfig builder

builder::discovery(
  Discv4Config::builder()
    .external_ip_resolver(Some(nat_resolution_method))
)

Needs a rebase for the CI to pass

Rebase to the main branch?

Yes, we need the changes on main for the CI to pass

@literallymarvellous pls rebase and add missing imports. Looks good otherwise! Thank you.


Use Whisper to convert Audio to text files and then use chatGPT to summarize

Is your feature request related to a problem? Please describe.
Problem  - convert audio to text using Whisper Open AI where we can see speaker and with an option to see time stamp or not.
Describe the solution you'd like
Generate text file or MS word file with transcribed text
Describe alternatives you've considered
MS teams transcribe and generation of VTT file
Additional context
Add any other context or screenshots about the feature request here.

request for an update on this please


Fishchimp/feature/security improvement

Describe your changes
Added decorator tags for appropriate role-based access control.
Implemented in classes where the implementation of the class had explicit purposes.
Checked a total of 11 API classes and refactored 8 of them. For some classes, I also did some minor refactoring where possible.
I will mention in the handover documentation why these changes were applied and what else is needed. Some classes require more thorough understanding and testing. Thus, I stopped analysing just 11 classes.
Issue ticket number and link
Issue FE-227

I just realised that the  test_get_volunteer_unavailability_success test case fails on this branch. However, when I checked out at the main branch, it showed the same test case failed.
Is this only happening in my local workspace, or is it a byproduct of our front-end and back-end integration over the past two weeks? If so, it might mean that the test case needs to be revised instead. I'll need @TaiHaDev to check if that is the case.
Cheers,

I just realised that the test_get_volunteer_unavailability_success test case fails on this branch. However, when I checked out at the main branch, it showed the same test case failed.
Is this only happening in my local workspace, or is it a byproduct of our front-end and back-end integration over the past two weeks? If so, it might mean that the test case needs to be revised instead. I'll need @TaiHaDev to check if that is the case.
Cheers,

I looked into it, and I believe there's a failed test because of overlapping functionality. If you change the test case date to another date, it should be fine. I will investigate this further. It has nothing to do with the FE and BE integration.


Guest should be able to login in with a Debt Collective account

What: Guest should be able to login in with a Debt Collective account
We will redirect Guest to Discourse to login and then it will be redirected back with a valid session.
How:

Guest should be able to login
After login it will be redirected back to the app with a valid session

Closed by https://github.com/debtcollective/fundraising/pull/78


Feature request: Ignore global zeros

When (nearly) all plugins report 0 servers and 0 players, like at 2021-04-02 2100 (PDT), chances are the data are incorrect. Maybe they should not be included in the graphs.

I agree that it looks a bit unsettling when you have large drops.
However interpolating data to make it look "smooth" wouldn't make the data more correct either since it would essentially be a manipulation.
I think the best solution here would be to have like a dark shaded area on the graph with a tooltip explaining that there was an incident. But that may not be as easy to implement with the charts system in use.
Furthermore, these "incidents" are not as straightforward to detect as you think.
The data itself isn't incorrect, it most often can be the result of server hosting providers experiencing downtime. And since not everyone uses the same server host, the data may vary a lot.
For example the incident you described never caused the server count for one our plugins to drop to zero. It had a few drops but it never really fell all the way down to zero. Probably because of some servers being home-hosted or simply unaffected by the incident.

So while "completely zero" cases may be detected easily, it would only be scratching the surface and probably not worth the effort in my opinion. And then again, the data isn't incorrect in of itself, just rather not representative and comparable to the rest of the year.

Thanks for responding. I agree that the incorrect data represent the number of servers reporting at that instant, which for whatever reason could not reach the bStats server. It's just data. :)

Hi, thank you for the suggestion :)
These gaps are usually not caused by Minecraft servers being down (like you seem to assume) but issues with bStats itself (networking problems of my hoster). This sadly has been a pretty persistent issue over the past few years and is nothing new.
In the past, I've used a script to clear these faulty data which then looks like this in the UI:

Since I migrated historic line chart data to Google's Firestore database, the script is no longer working. That's why you are still seeing these gaps. I will remove the broken datapoints soon (TM).

However interpolating data to make it look "smooth" wouldn't make the data more correct either since it would essentially be a manipulation.

I don't agree. At the moment the data is definetly wrong. Deleting the incorrect data seems like the logical solution instead of keeping wrong data that does not reflect and real drops in Minecraft server or player counts. If this would not be a bStats issue but instead caused by something else (e.g., Mojang Auth servers being down), I would ofc. keep the data as is represents the real world data.

Ah, I see now.  Thanks for the explanation!

networking problems of my hoster

I have to correct me. While it's usually networking issue, this time it was my fault not paying attention to the available disk space left.

My Redis database didn't like it:

Redis is configured to save RDB snapshots, but it is currently not able to persist on disk. Commands that may modify the data set are disabled, because this instance is configured to report errors during writes if RDB snapshotting fails (stop-writes-on-bgsave-error option). Please check the Redis logs for details about the RDB error.

And in the logs:

Write error saving DB on disk: No space left on device

Ooops.... ^^

Bastian: Thank you for identifying the issue, and offering the correct explanation(s).

So the feature request is more like: Check for full disk condition more frequently, and take appropriate action.

The reason were a lot of unused old Docker images.

I've set up a cronjob to purge them daily, so this should no longer be an issue.

Sounds good. If you think it's resolved, please consider the issue closed.


feat: add IsAddHaarMeasure instance for Complex.measureSpace

There is a problem with this file, that we have a diamond: complex numbers already have a measure space instance before the start of the file (you can try example : MeasureSpace ℂ := by infer_instance before the instance declaration) -- and this instance is already known to be a Haar measure (try example : Measure.IsAddHaarMeasure (@volume ℂ _) := by infer_instance). So instead of adding this new instance, we should fix the file and remove the diamond (by just removing the instance)

There is a problem with this file, that we have a diamond

Indeed, this is discussed here

I see, so the plan is to remove the instance at the start of the file (then the Haar measure instance is synthesised automatically) and just come up with  a new proof of volume_preserving_equiv_pi (and probably a new definition for measurableEquivPi first).

Thanks! :tada:
bors merge


⚠ Bofrost.be has degraded performance

In 5363d7d, Bofrost.be (https://www.bofrost.be) experienced degraded performance:

HTTP code: 200
Response time: 1360 ms

Resolved: Bofrost.be performance has improved in e490d5d after 16 minutes.


Add a Hash base class to Azure::Core and redesign Md5 to derive from it.

Follow-up from https://github.com/Azure/azure-sdk-for-cpp/pull/1617#discussion_r572268746.
Ideally, Storage:Crc64 will also derive from Hash.
Also partially addresses https://github.com/Azure/azure-sdk-for-cpp/issues/1619 (topic 1 and 2).

Well, I have to admit that I am not a big fun of inheritance because it makes code less readable, and often IDE isn't good at finding virtual functions, and the run-time overhead, and many other reasons. Anyway it's just my personal preference.
For this one, how can this hash base class benefit our customers?

Plus, I'm not going to make Crc64 class inherit from this hash base. As Crc64 supports concatenate operation, while your base class doesn't.


Add wheel file validation for entry_points.txt

This is a feature request to support additional Wheel file validation beyond the RECORD file, and specifically for the entry_points.txt file.
Rationale:
I have seen cases where developers get confused about package names in their entry point scripts, which then leads to confusing errors during package install. For example, given an install via the pdm tool with the following dummy pyproject.toml snippet:
[project.scripts]
my-script =  "my-project.app:main"

Assuming the error here is that the my-project portion of the module description is actually a module named my_project, the following error occurs:
Traceback (most recent call last):
  ...
  File "/home/user/.local/share/pdm/venv/lib64/python3.9/site-packages/installer/_core.py", line 86, in install
    for name, module, attr, section in parse_entrypoints(entrypoints_text):
  File "/home/user/.local/share/pdm/venv/lib64/python3.9/site-packages/installer/utils.py", line 235, in parse_entrypoints
    assert match
AssertionError

The installer.utils.parse_entrypoints does perform validation in terms of a regex match of the entry script module value, but failure of a match results in a cryptic assertion error.
Proposal:
After looking some through this code base (as well as the pdm code base before this one), I believe a reasonable and backwards compatible solution would be as follows:

Add a new API function to installer.sources.WheelSource with a signature of validate_entry_points(self) -> None.
Implement the function in installer.sources.WheelFile by extracting out the assertions that happen in installer.utils.parse_entrypoints and raising _WheelFileValidationError's instead of doing assertions (perhaps this could be pulled out to another utility function for reuse?). Of course, before performing these validations, a check would have to be made for the existence of the entry_points.txt file, and no validations would be performed if the file does not exist.
Perform the validation in the parse_entrypoints utility function as it is now (reusing extracted validation code, ideally), but resulting in an assertion error to keep the current functionality.

This would maintain existing functionality of this library while adding the new validate_entry_points function for users of the library.
@frostming - if this proposal is accepted and implemented, I would recommend adding the new validation in pdm.installers.installers._install_wheel to avoid hitting the confusing assertion error.

Raising an exception when the regex matching fails is sufficient, we don't need a standalone function to do that. It's different from record validation because when it doesn't match the pattern, the entry point is invalid and it's better to abort.

As in raising an exception in the existing function that is more specific than an AssertionError? That works for me as long as it is more clear what the problem is to the user in the error message. I am imagining something similar to the message printed when a RECORD file is invalid...
"Invalid entry point in {wheel}. Please report to the maintainers of that package so they can fix their project setup. Details: \n{formatted_issues}\n"

... followed by aborting the install. That, of course would be up to users of this library to catch and print / re-throw (i.e. pdm), and the only change here would be the more specific error to be raised.

I ran into that error after renaming the package. However, assert match AssertionError is nothing a user can work with. I had to read through the code to get what's the problem here.


Add support for defining Job controller

Right now we by default create Deployment as the controller, so come up with a way to define the Job controller.
Read more about job:

Writing Job: https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/
Job API docs: https://kubernetes.io/docs/api-reference/v1.6/#job-v1-batch
Also look at cron job: https://kubernetes.io/docs/concepts/workloads/controllers/cron-jobs/

Cron jobs are still alpha feature. I don't think we should add support for it until they are out of alpha.
But Jobs are in stable v1, and we should definetly support that.

Talking with @kadel, we thought that -

JobSpec is a lot similar to DeploymentSpec, in the sense that there are top level fields and then there is PodTemplateSpec, so maybe we can treat this similar to how we reuse the PodSpec.

So, we can do something like this with jobs -
type JobSpecMod struct {
	Name                string
	api_v1.PodSpec      `json:",inline"`
	ext_v1beta1.JobSpec `json:",inline"`
}

type App struct {
	Name              string             `json:"name"`
        ...
        ...
	Jobs              []JobSpecMod       `json:"jobs,omitempty"`
}

This lets us defining jobs like -
name: httpd
containers:
- image: centos/httpd
services:
  - name: httpd
    type: NodePort
    ports:
    - port: 8080
      targetPort: 80
jobs:
- name: piStuff
  activeDeadlineSeconds: 100 # part of JobSpec
  containers: # part of PodSpec
  - name: pi
    image: perl
    command: ["perl",  "-Mbignum=bpi", "-wle", "print bpi(2000)"]
  restartPolicy: Never

This also means, that defining solo jobs will be possible like -
name: httpd
jobs:
- name: piStuff
  activeDeadlineSeconds: 100 # part of JobSpec
  containers: # part of PodSpec
  - name: pi
    image: perl
    command: ["perl",  "-Mbignum=bpi", "-wle", "print bpi(2000)"]
  restartPolicy: Never

How does this look @kedgeproject/maintainers?
Lazy consensus in effect! :yum:

@kadel also, about the name auto generation part, I think it's safe to auto generate names for any number of jobs specified in the spec, since there are no services, etc associated with these, and no one talks to the jobs!

Since https://github.com/kedgeproject/kedge/pull/253 is merged closing this one!


Option not to include headings in the toctree

This is a follow-up to #277 which was just fixed by adding the navigation_depth option. I've noticed that though this option is quite useful to have, it doesn't fully address my use case when using collapse_navigation = False (i.e. tree-like structure).
What I'd like to have as an option is to be able to limit the table of contents sidebar to sections and pages, without showing the various levels of headings/subsections for pages.
Basically I'd like the toctree to only display, where + shows an expandable item, and o shows a non-expandable item.
+ Section 1
   + Subsection 1.1
      o Page 1.1.1
      o Page 1.1.2
    o Page 1.2

instead of:
+ Section 1
   + Subsection 1.1
      + Page 1.1.1
         o Heading2 <IP_ADDRESS>
         + Heading2 <IP_ADDRESS>
            o Heading3 <IP_ADDRESS>.1
         o Heading2 <IP_ADDRESS>
      o Page 1.1.2
    + Page 1.2
       o Heading 1.2.1

Some examples to be more explicit:

This looks good in the sidebar, as what is uncollapsed shows only subsections: http://docs.godotengine.org/en/latest/tutorials/engine/_engine.html
This is not good, as what is uncollapsed shows individual pages as uncollapsable, which gives the impression that they are subsections (and thus that there are an overwhelming amount of tutorials to read): http://docs.godotengine.org/en/latest/tutorials/step_by_step/_step_by_step.html
Another example where the verbosity can be in our opinion quite misleading to users; all the uncollapsed items here are pages or h2/h3, even though they look like subsections: http://docs.godotengine.org/en/latest/reference/compiling_for_universal_windows_apps.html#compiling

Using collapse_navigation = True works this around thanks to the properly defined :maxdepth:, but we really want to use this tree-like navigation. What we'd need for our use case is an option that ignores page headings (h2 and later) when generating the toctree, but only takes into account the page and section titles (h1).
The navigation_depth parameter does not fully address our use case, as we need variable depths depending on the section (e.g. our "Learning step by step" section needs a depth of 2, while our "Engine" section with its subsections needs a depth of 3).
Hope this makes sense, and thanks for your work on this theme :)

To put a little more context, a single page such as this:

shows a ton of sections and subsections at the toc:

Making the toc huge and very confusing to browse, specially in documentations as large and complex as ours. Simply not showing the headings at all in the toc would be fantastic.


Trouble importing LearnerInspector

Describe the bug
I have trouble importing the LearnerInspector. When I try to import it, it throws the following error:
name 'catboost' is not defined
The code I use for this import is:
from facet.inspection import LearnerInspector
Update: the error also appears when I try to import facet.inspection (see full import output down below)
However, all of these import and (seem to) work without an issue:
from facet.data import Sample
from facet.selection import LearnerRanker, LearnerGrid
from facet.validation import BootstrapCV
from facet.data.partition import ContinuousRangePartitioner
from facet.simulation import UnivariateProbabilitySimulator
from facet.simulation.viz import SimulationDrawer
from facet.crossfit import LearnerCrossfit
Desktop (please complete the following information):

OS: Windows 10 pro
Spyder, installed via Anaconda
Python: 3.9.7
facet: 2.0.dev0
catboost: 0.26.1

Down below is the complete output, when I try to import face.inspection:
import facet.inspection
Traceback (most recent call last):
Input In [19] in <cell line: 1>
import facet.inspection
File ~\Anaconda3\lib\site-packages\facet\inspection_init_.py:8 in
from ._explainer import *
File ~\Anaconda3\lib\site-packages\facet\inspection_explainer.py:346 in
__tracker.validate()
File ~\Anaconda3\lib\site-packages\pytools\api_alltracker.py:200 in validate
update_forward_references(obj, globals_=globals_)
File ~\Anaconda3\lib\site-packages\pytools\api_alltracker.py:328 in update_forward_references
_update(obj)
File ~\Anaconda3\lib\site-packages\pytools\api_alltracker.py:315 in _update
_update(member, local_ns=local_ns)
File ~\Anaconda3\lib\site-packages\pytools\api_alltracker.py:319 in _update
_update_annotations(_obj, local_ns)
File ~\Anaconda3\lib\site-packages\pytools\api_alltracker.py:322 in _update_annotations
annotations = get_type_hints(
File ~\Anaconda3\lib\typing.py:1469 in get_type_hints
value = _eval_type(value, globalns, localns)
File ~\Anaconda3\lib\typing.py:292 in _eval_type
ev_args = tuple(_eval_type(a, globalns, localns, recursive_guard) for a in t.args)
File ~\Anaconda3\lib\typing.py:292 in
ev_args = tuple(_eval_type(a, globalns, localns, recursive_guard) for a in t.args)
File ~\Anaconda3\lib\typing.py:290 in _eval_type
return t._evaluate(globalns, localns, recursive_guard)
File ~\Anaconda3\lib\typing.py:551 in _evaluate
eval(self.forward_code, globalns, localns),
File :1 in
NameError: name 'catboost' is not defined

I have used the following code to test catboost:
import numpy
from catboost import CatBoostRegressor
dataset = numpy.array([[1,4,5,6],[4,5,6,7],[30,40,50,60],[20,15,85,60]])
train_labels = [1.2,3.4,9.5,24.5]
model = CatBoostRegressor(learning_rate=1, depth=6, loss_function='RMSE')
fit_model = model.fit(dataset, train_labels)
print(fit_model.get_params())
The import worked and executed without any issue.
The code is taken from here:
https://catboost.ai/en/docs/installation/python-installation-test-catboost

Hi @MaxS-1, thanks for your sharing this.
I suggest you use facet 1.2.1 which is the latest stable version.
We're in the process of getting FACET 2 ready for release & will investigate your bug report.

Dear @j-ittner
Thank you very much for the advice. Changing the version of facet to 1.2.1 did the trick and now it works like a charm.

Glad to hear!

Dear @j-ittner
Thank you very much for the advice. Changing the version of facet to 1.2.1 did the trick and now it works like a charm.

@MaxS-1 actually I mistyped above - the latest version is 1.2.2. So in your conda environment or pip requirements I suggest you use gamma-facet ~= 1.2.2

Dear @j-ittner
Thank you very much for the advice. Changing the version of facet to 1.2.1 did the trick and now it works like a charm.

@MaxS-1 actually I mistyped above - the latest version is 1.2.2. So in your conda environment or pip requirements I suggest you use gamma-facet ~= 1.2.2

Just passing by to mention that 1.2.2 is not available through pip.
pip install -U gamma-facet== 1.2.2
ERROR: Could not find a version that satisfies the requirement gamma-facet== (from versions: 1.0.0rc1, 1.0.0rc2, 1.0.1, 1.1.1, 1.1.2, 1.2.0rc1, 1.2.0, 1.2.1, 2.0.dev0)
ERROR: No matching distribution found for gamma-facet==


UX: Windows Download Is Not Intuitive

Problem:

Install 7zip
Extract the Volkshash.Windows.x<IP_ADDRESS>.1.tar.bz2
Extract the Volkshash.Windows.x<IP_ADDRESS>.1.tar
Rename .exe__ to .exe

Solution:

Zip it as a .zip file rather than a tar.bz2
Rename .exe__ to .exe during the build process

All files have been moved to .zip and should be fine now


Maximum Article Text Size Too Small; Column Too Narrow

1-) Maximum Article Text Size Too Small
On the macOS version of NetNewsWire, the maximum article text size is "Extra Extra Large", but that is way too small for my setup.
2-) Column Too Narrow
The article text is displayed in a fixed-width column that is way too narrow relative to the screen real estate available, especially when the sidebar is hidden.
Context
I keep my RSS reader on a 43-inch portrait 4K screen running at 2160 x 3840 points (at 1 pixel per point), which is quite nice because the monitor has the same point density as my 27-inch 5K iMac running in retina mode, so I move windows between monitors without the content changing physical size. (The content is simply sharper on the iMac's (retina-mode) internal monitor.) I understand that my setup is a weird and uncommon one, but it works wonderfully when apps don't limit text size arbitrarily.
Fix for Problem 1
NetNewsWire could allow the user to pick an arbitrary font size.
Fix for Problem 2
NetNewsWire could allow the user to pick an arbitrary column width.
Benefits of the Changes
More flexible font-size and line-width settings would allow all users to configure NetNewsWire in a way that feels optimal for their particular setup.

We are in the process of implementing #19 which will allow you full control of the that will give you full control of the Article rendering code. You will be able to create a stylesheet that gives you full control of fonts and column width.
I'm going to close this one as I'm pretty sure that will handle your problem. If you disagree, we can reopen this issue.


4B4E0806 - Tornado Outbreak

Marketplace

Tested on https://github.com/xenia-canary/xenia-canary/commit/a47aa066a38e594a2be34e227eb57305cc83f932
Issues:
The game is playable, but can softlock during specific in-game dialogue segments. Audio seems to either stutter or go completely silent during some proportions of the game.
Log:
xenia.zip
Screenshot(s):

Labels:

9/26/20

In-game music no longer skips!
*The game's audio and sound effects are still prone become completely silent. Once silent, the game will hang on a black screen upon exiting or starting a new level.


Improvements to the style & to the text content

@maya did some very cool work on the style of the page: https://github.com/maya/explain-git-with-d3
I changed some text to make it more accessible to a git novice.
If you're open to it, I'd suggest renaming the repo from "explain-git-with-d3" -> "understanding-git-visually". The difference being that it shifts the subject of the project from the creators and the tools that you used to the person learning git and what value this tool brings them.
PS Very cool project! Hope this helps!

Hey @drewrwilson
I am also keen to see this become a bit more as it is a great tool. If @onlywei is up for it maybe lets create an org and I would be up for helping out maintaining this tool (I use it for presentations a lot).
It makes sense having the domain name and updating the styles etc. I noticed Zen Mode is broken on your fork.
@onlywei what do you think are you up for creating an org and adding a few more people to help maintain this. I think it will get more traction under it's own repo and we can help merge pull requests and such to keep it active.
It is a better solution than having forks (I have http://jake.ginnivan.net/explain-git-with-d3 as well because I need to publish my changes a while back).

@JakeGinnivan I'm not sure I'm ready to create an org just yet. I have some work in mind that I wanted to do in this project before I open it up that much. I also don't fully understand what it means to create an org for this, as I've never done that before. Perhaps you could explain a little bit more to convince me?

An org is really lightweight. For instance I have a library called shouldly and it lives in an org called shoudly.
The org isn't necessary, but i am happy to help you out with maintain this project. I'd prefer to try and keep all people working on the same project rather than forking.
If you want to get my thoughts on your ideas then feel free to email me as well. Jake at Ginnivan dot net
Sent from my Windows Phone

From: Wei<EMAIL_ADDRESS>Sent: ý15/ý02/ý2015 19:28
To<EMAIL_ADDRESS>Cc: Jake<EMAIL_ADDRESS>Subject: Re: [explain-git-with-d3] Improvements to the style & to the text content (#24)
@JakeGinnivanhttps://github.com/JakeGinnivan I'm not sure I'm ready to create an org just yet. I have some work in mind that I wanted to do in this project before I open it up that much. I also don't fully understand what it means to create an org for this, as I've never done that before. Perhaps you could explain a little bit more to convince me?
—
Reply to this email directly or view it on GitHubhttps://github.com/onlywei/explain-git-with-d3/issues/24#issuecomment-74432364.

@onlywei did you want to send me an email or have a quick chat on skype/something else.
Keen to know where you would like to take this.
Just to expand on the org thing, here are some I am part of:
https://github.com/TestStack, https://github.com/DbUp, https://github.com/funnelweblog, https://github.com/shouldly and https://github.com/Code52
As you can see, an organisation is just a collection of projects which is not your personal account. I have found that projects belonging to an org end up with more community involvement than ones on peoples personal account. It also makes it very easy to tell which repository is the 'main' one.
The great thing about open source is that people are willing to help you out and help you maintain a project, but the project will stay yours. Anyways, I am happy to answer any questions you have.


Add Puluminaries page

Adds a page listing all the Puluminaries. This is based upon the data/team directory, etc.
Signed-off-by: Matt Stratton<EMAIL_ADDRESS>

I'm thinking of removing the title/company for each person, because not everyone has that set, and also that is something that changes frequently enough to be a pain to maintain. Thoughts?

@susanev
Right now, there isn't anything in the navigation structure, I see this as a landing page (today pulumi.com/puluminaries points to a blog post announcing the program, this replaces that url).
I know that @katcosgrove is working on the Community page, which I assume would include a link to the Puluminaries page.

@mattstratton no need to block this particular pr, but we really need to figure out a navigation structure that works for marketing needs, because there are soo many pages that exist totally outside our navigation structure and this is becoming a usability issue. if the current navigation structure doesn't work for yall we need to figure out one that does.


NPE in ContainerAppender.appendToUnderlying()

Hi, I'm using Druid and recently saw the below error.
18:39:45.139 [task-runner-0-priority-0] ERROR org.apache.druid.indexing.seekablestream.SeekableStreamIndexTaskRunner - Encountered exception while running task.
java.lang.RuntimeException: java.lang.NullPointerException
        at org.apache.druid.indexing.seekablestream.SeekableStreamIndexTaskRunner.runInternal(SeekableStreamIndexTaskRunner.java:524) ~[druid-indexing-service-0.15.1-incubating.jar:0.15.1-incubating]
        at org.apache.druid.indexing.seekablestream.SeekableStreamIndexTaskRunner.run(SeekableStreamIndexTaskRunner.java:246) [druid-indexing-service-0.15.1-incubating.jar:0.15.1-incubating]
        at org.apache.druid.indexing.seekablestream.SeekableStreamIndexTask.run(SeekableStreamIndexTask.java:167) [druid-indexing-service-0.15.1-incubating.jar:0.15.1-incubating]
        at org.apache.druid.indexing.overlord.SingleTaskBackgroundRunner$SingleTaskBackgroundRunnerCallable.call(SingleTaskBackgroundRunner.java:419) [druid-indexing-service-0.15.1-incubating.jar:0.15.1-incubating]
        at org.apache.druid.indexing.overlord.SingleTaskBackgroundRunner$SingleTaskBackgroundRunnerCallable.call(SingleTaskBackgroundRunner.java:391) [druid-indexing-service-0.15.1-incubating.jar:0.15.1-incubating]
        at java.util.concurrent.FutureTask.run(FutureTask.java:266) [?:1.8.0_222]
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0_222]
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0_222]
        at java.lang.Thread.run(Thread.java:748) [?:1.8.0_222]
Caused by: java.lang.NullPointerException
        at org.roaringbitmap.ContainerAppender.appendToUnderlying(ContainerAppender.java:126) ~[RoaringBitmap-0.8.0.jar:?]
        at org.roaringbitmap.ContainerAppender.flush(ContainerAppender.java:115) ~[RoaringBitmap-0.8.0.jar:?]
        at org.roaringbitmap.RoaringBitmapWriter.get(RoaringBitmapWriter.java:260) ~[RoaringBitmap-0.8.0.jar:?]
        at org.apache.druid.collections.bitmap.WrappedRoaringBitmap.iterator(WrappedRoaringBitmap.java:146) ~[druid-processing-0.15.1-incubating.jar:0.15.1-incubating]
        at org.apache.druid.segment.incremental.IncrementalIndexAdapter$MutableBitmapValues.iterator(IncrementalIndexAdapter.java:210) ~[druid-processing-0.15.1-incubating.jar:0.15.1-incubating]
        at org.apache.druid.segment.StringDimensionMergerV9$ConvertingBitmapValues.iterator(StringDimensionMergerV9.java:644) ~[druid-processing-0.15.1-incubating.jar:0.15.1-incubating]
        at org.apache.druid.segment.StringDimensionMergerV9.mergeBitmaps(StringDimensionMergerV9.java:476) ~[druid-processing-0.15.1-incubating.jar:0.15.1-incubating]
        at org.apache.druid.segment.StringDimensionMergerV9.writeIndexes(StringDimensionMergerV9.java:420) ~[druid-processing-0.15.1-incubating.jar:0.15.1-incubating]
        at org.apache.druid.segment.IndexMergerV9.makeIndexFiles(IndexMergerV9.java:218) ~[druid-processing-0.15.1-incubating.jar:0.15.1-incubating]
        at org.apache.druid.segment.IndexMergerV9.merge(IndexMergerV9.java:915) ~[druid-processing-0.15.1-incubating.jar:0.15.1-incubating]
        at org.apache.druid.segment.IndexMergerV9.persist(IndexMergerV9.java:780) ~[druid-processing-0.15.1-incubating.jar:0.15.1-incubating]
        at org.apache.druid.segment.IndexMergerV9.persist(IndexMergerV9.java:749) ~[druid-processing-0.15.1-incubating.jar:0.15.1-incubating]
        at org.apache.druid.segment.realtime.appenderator.AppenderatorImpl.persistHydrant(AppenderatorImpl.java:1264) ~[druid-server-0.15.1-incubating.jar:0.15.1-incubating]
        at org.apache.druid.segment.realtime.appenderator.AppenderatorImpl.access$100(AppenderatorImpl.java:109) ~[druid-server-0.15.1-incubating.jar:0.15.1-incubating]
        at org.apache.druid.segment.realtime.appenderator.AppenderatorImpl$2.doCall(AppenderatorImpl.java:533) ~[druid-server-0.15.1-incubating.jar:0.15.1-incubating]
        at org.apache.druid.common.guava.ThreadRenamingCallable.call(ThreadRenamingCallable.java:44) ~[druid-core-0.15.1-incubating.jar:0.15.1-incubating]
        ... 4 more

It seems like container was null here, but not sure how it could be null.
Here is the code of WrappedRoaringBitmap.iterator() in Druid. It just calls RoaringBitmapWriter<MutableRoaringBitmap>.get().iterator().
  public IntIterator iterator()
  {
    return writer.get().getIntIterator();
  }

writer is created as below:
this.writer = RoaringBitmapWriter.bufferWriter().get();

and BufferWizard which is returned by RoaringBitmapWriter.bufferWriter() is:
  class BufferWizard extends Wizard<MappeableContainer, MutableRoaringBitmap> {

    @Override
    protected Supplier<MappeableContainer> arraySupplier() {
      return () -> new MappeableArrayContainer(expectedContainerSize);
    }

    @Override
    protected Supplier<MappeableContainer> runSupplier() {
      return MappeableRunContainer::new;
    }

    @Override
    protected MutableRoaringBitmap createUnderlying(int initialCapacity) {
      return new MutableRoaringBitmap(new MutableRoaringArray(initialCapacity));
    }
  }

Since arraySupplier is used as newContainer in ContainerAppender, it looks like the returned value from newContainer can't be null.
Am I missing something? Do you guys have any idea how it could be null?

Ping @richardstartin !

Is this related to unsynchronised multi threaded access?

@jihoonson does Druid iterate over bitmaps that are being built on a different thread to the one building the bitmap without synchronising reads and writes? This may have been benign before (the reads via the iterator would just have been racy) but since I added bitmap writers to Druid getting an iterator has the side effect of flushing any pending changes to the bitmap being built. I don’t think it’s possible for the container to be null without the initialisation of the variable having taken place on another thread without the modifications being “visible.”
@leventov do you have any ideas?

@richardstartin thanks for looking at this issue. I don't think reads and writes are happening without synchronization. The write thread is different from the read thread, but the read operation (persist operation in Druid) happens only when all write operations (indexing operation in Druid) are finished.

Ok, but as you point out yourself, null is never assigned to the container, so your stack trace shouldn’t be possible without some kind of JMM violation.
I doubt it’s related but #359 stops the appended from capturing the container builder so it would save some memory if you pick up the release after it merges.

I believe this is a bug in Druid, I've created https://github.com/apache/incubator-druid/issues/8492 to track it.

@leventov I am going to close this issue here, re-open if we can be traced back to Roaring.


[Grappler] RemoveIdentityTranspose also removes conjugate

Have I written custom code (as opposed to using a stock example script provided in TensorFlow): yes
OS Platform and Distribution (e.g., Linux Ubuntu 16.04): Linux Ubuntu 18.04
Mobile device (e.g. iPhone 8, Pixel 2, Samsung Galaxy) if the issue happens on mobile device: N/A
TensorFlow installed from (source or binary): binary
TensorFlow version (use command below): 1.13
Python version: 3.6
Bazel version (if compiling from source): N/A
GCC/Compiler version (if compiling from source): N/A
CUDA/cuDNN version: 10.0
GPU model and memory: N/A
Exact command to reproduce: see below

During graph optimization, RemoveIdentityTranspose also removes a transpose if it conjugates the input (see here)
Simple example:
import tensorflow as tf
with tf.Graph().as_default():
    sess = tf.Session()
    a = tf.placeholder(tf.complex64)
    data = [[1j], [1j]]
    print(sess.run(tf.transpose(a, (0, 1), conjugate=True), {a: data}))  # not optimized
    print(sess.run(tf.transpose(a, (0, 1), conjugate=True) + 1, {a: data}))  # optimized, no conjugate will be applied
    print(sess.run(tf.conj(a) + 1, {a: data}))

Output:
[[0.-1.j]
 [0.-1.j]]
[[1.+1.j]
 [1.+1.j]]
[[1.-1.j]
 [1.-1.j]]

This can happen when using einsum/tensordot and a probably related issue is #19771
A possible fix would be to also check for IsConjugateTranspose here

Hi @jheymann85 ! PR #40223 has fixed this issue. Attaching resolved gist for reference. Can we move this issue to closed status now? Thanks!


Building for multiple MacOS versions builds for just one version

When setting matrix.os to macos-11, macos-12, macos-13, the resulting Carolina wheel/installation only comes in this format:
carolina-*macosx_11_0_x86_64.whl, indicating macos 11 when ${{ matrix.os }} is a non-macos-11 value and `runs-on: ${{ matrix.os }}. Hence we are only building for one macos version now.
Ref: https://github.com/equinor/Carolina/actions/runs/6769907443

Resolved


Support LabeledEvents

See https://github.com/flatironinstitute/neurosift/issues/89#issuecomment-1660487244

From Cody:
I'd say a general strategy for this would be a raster whose number of 'units' (columns or Y axis) is the number of unique labels

Example:
@tuanpham96 @CodyCBakerPhD
I have a basic raster plot for LabeledEvents. (One issue is that in this case the unit label gets cutoff in the margin)
https://flatironinstitute.github.io/neurosift/?p=/nwb&url=https://dandiarchive.s3.amazonaws.com/blobs/80d/c44/80dc4460-7652-4b88-97ce-69a7e8be5d60&tab=neurodata-item:/processing/behavior/RewardEventsLinearTrack|LabeledEvents

@CodyCBakerPhD thanks for those suggestions. At this point, I don't know a good solution to displaying the long labels on the raster plot. One consideration is that we want the time axes to line up properly between widgets in the multi-view mode. That means we can't easily make additional room for long labels or a legend. I am going to open a new issue for this one, and we can think about what to do.
I also don't know how to solve the issue with the initial visible time range. The problem is that different widgets have different rules for how much to display on start-up, and so when there are multiple views, there is a race condition controlling which one wins out. I will open a separate issue for that as well.
So with those two separate issues, I am going to close this. Feel free to reopen if there are other items to discuss.


Robert Longson: Watch tip-calculator.org

Robert Longson requests the watch of the watch_keyword tip-calculator\.org. See the MS search here and the Stack Exchange search in text, in URLs, and in code.

tip-calculator\.org has been seen in 1 true positive, 0 false positives, and 0 NAAs.

Approved by Jeff Schaller in Charcoal HQ


Projct admin cannot see project's config page

v1.2.0-127-g472ffb9
Use a non-admin user create a new project, the user can not see config page of the project

fixed in #3514


SP5: Radial gauge plot

Creates the radial gauge plottable, based on the v4 version.
Adds the cookbook recipes demonstrating the main features.

There's one caveat. The line caps (StartCap and EndCap properties) functionality is severely reduced, since Skia doesn't include the System.Drawing.Drawing2D.LineCap options. This is commented in the submitted code in case it is owner-implemented in the future. The only functional property is StartCap, which only admits one of the values of the SKStrokeCap enum, while the EndCap property is ignored throughout the code.

Thank you so much for this @arthurits, this is fantastic! I was out sick the last few weeks so I'm only now picking this up, but I really appreciate your implementation and cookbook examples - this is great! I'm happy that this will be in the next release 🚀

I was out sick the last few weeks...

I'm glad the PR is helpful and hope you are feeling well! 🤒🙏✨📈⤴


docs: types field in package.json

fixes: #49

Codecov Report

Merging #50 (ffd9b66) into master (ebbeb2b) will not change coverage.
The diff coverage is 100.00%.

@@            Coverage Diff            @@
##            master       #50   +/-   ##
=========================================
  Coverage   100.00%   100.00%
=========================================
  Files            2         2
  Lines          231       223    -8
=========================================
- Hits           231       223    -8

Impacted Files
Coverage Δ

index.js
100.00% <100.00%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 56a3d35...ffd9b66. Read the comment docs.


Bug - Unused prop podLabels in values.yaml

https://github.com/newrelic/nri-kube-events/blob/648c35b59ffe44d121cb6a31bf6c9c96113b849b/charts/nri-kube-events/values.yaml#L66
Context
While looking over the documentation I noticed that it looked like one of the props for the helm chart was unused.
Problem Statement:
It seems as if there is a podLabels that is documented in the README.md and set as a value in the values.yaml?
Recommendation:
Either of the following solutions could be used:

Use the "newrelic.common.labels.podLabels" helper function from common library v1.06 dependency in the following to charts/nri-kube-events/templates/deployment.yaml#L23

        {{- include "newrelic.common.labels.podLabels" . |  nindent 8 -}}

Remove README.md#L59 and values.yaml#L66

Hi!
Thanks for raising this issue, we took some time and we saw that this also affects other charts, so we are going to do the follow-up of all the charts in this issue. This is the list of affected charts:

[ ] nri-kube-events: https://github.com/newrelic/nri-kube-events/blob/9d4e226/charts/nri-kube-events/templates/deployment.yaml#L23
[ ] newrelic-k8s-metrics-adapter: https://github.com/newrelic/newrelic-k8s-metrics-adapter/blob/fc87009/charts/newrelic-k8s-metrics-adapter/templates/deployment.yaml#L22
[ ] newrelic-infra-operator: https://github.com/newrelic/newrelic-infra-operator/blob/a945b9a/charts/newrelic-infra-operator/templates/deployment.yaml#L22
[ ] k8s-metadata-injection: https://github.com/newrelic/k8s-metadata-injection/blob/8b6ee3a/charts/nri-metadata-injection/templates/deployment.yaml#L22

We have started to work on this.

Sorry for the noise closing and reopening the issue. The "Solves" comment in the PRs closed automatically this issue.
Everything is merged. Is a matter of time that the PR of renovatebot hit nri-bundle to be available to the public :)


Extending

Hello,
I'm trying to use your plugin to draw some markers in a map, where the markers are essentially links to other page entries.
I've noticed that the plugin is not very extendable, so I would like to ask for a feature request, where the entries field could be added and linked to the markers.
I know that I can publish the tags blade file and that I could get the data from the annotations and use the headings like so: /contact where I would have the marker wrapped in an anchor tag with its href being: href="{{ $annotation['data']['heading'] }}". This works, but it's very wonky for the clients to use it in the CP, not to mention error prone (misspelling, etc).
Please let me know if this would be possible.
All the best!

Hello @Nicolascanala
Humble apologies with the delay in responding to your issue, we were closed for xmas and now just all back in getting back up to speed.
Thank you for your request.
The original build was for pins, points and images and has served us and many other users well.
With requests we've extended to multiple fields per point in a pop up.
And we are always happy to accomodate further requests :)
It makes a lot of sense for more features to always help those who are using the add on.
As this is a request suited to your use case, we wish to ask a few more questions that will help you and others in future.

So adding the field type entries to the field types available in the pop up is of course one
Add in the popup an options tab per point?

this could then have an option: point is link with the link/url field below to link?

Completely open to further discussion to help
Paul at Framework

Hi @paulweareframework ,
No problem at all! Holiday season is always like this :)
The functionality that we're after is something along these lines:

Add the entries field as an option in the 'add fields' bit on the marker popup (CP).
If a marker has a page entry associated to it, clicking on the marker will just take you to that page entry.
Keeping the other fields is fine.

Please let me know if this is something that you might be interested in adding. We have opted to go for a custom solution in the end because of deadlines, but I still believe it might be a good addition to the addon.
All the best!
Nicolás.

Helllo @Nicolascanala
Thank you :)
Ok great, that fits really well with adding it to pinpoint-image.
I like your points and I will integrate them in!
I will schedule it in and have something for next week.
Is that ok for you? it would be sooner but I'm away this weekend till tuesday sorry!

Hi @paulweareframework, are you still working on this? I'd be very interested in this feature.

Hello @tobimori
Yes I am, I also run www.weareframework.co.uk and we've been super busy last few months. But that is no excuse as this has been requested and I've unfortunately let a lot of time past.
I am aiming to get back onto this feature as well as the statamic 4 update ticket this week or next.
Thank you for your message

Hi Paul,
linking Pins to Entrys or Pages would be perfect!
thanks a lot!

Hi Paul,
is there a possibility to speed up the implementation of this feature?
Maybe a money-contribution?
Would come in handy for an upcoming project...
best,
volker


INTERVAL(6) alias

Fixes #5634.

Added INTERVAL(6) as a no-op alias for INTERVAL.

This change is

Online preview: http://cockroach-docs-review.s3-website-us-east-1.amazonaws.com/9248c81b956fd2f3928fb6ea57c6dc37560aa711/
Edited pages:

v19.2/interval.md

@jordanlewis Reminder to quickly review this.


prepare_vdi.sh: allow disk size to be passed in

This adds a command line arg to the prepare_iso/prepare_vdi.sh script to specify disk size. This allows disk images larger than 32GB to be created without modifying the script.

Thanks!


Why not use SSLContext.load_default_certs in tls.init_context?

You've probably given this some thought and I may have missed the documentation. Why are you shipping CA certificates and loading them in tls.init_context, rather than using SSLContext.load_default_certs?

The short answer is that load_default_certs doesn't work properly on Mac OS X or Windows.
The long answer is that using the default verification logic on all platforms is tricky. It's something I'm working on: see the discussion in kennethreitz/requests#2966. The hope is that with PyOpenSSL we'll be able to properly use the system trust stores on all platforms properly, as things like Chrome do, and then we'll be in a much better place.

Wow, CA trust is a much bigger mess than I already thought.
About shipping the bundle in Hyper: I see the shipped bundle is only used if the user doesn't provide their own SSLContext. Wouldn't it be more correct to require them to explicitly specify whether they want to use the shipped bundle rather than the default (ie SSLContext.load_default_certs, since that's used in ssl.create_default_context)? I know (now) lots may be wrong with whatever that returns, but given that that is what would be used if they'd use SSLContext directly, doesn't it make more sense for the user to trust that than whatever Hyper shipped during install?
One way of doing that: ssl_context could be a required argument for HTTP20Connection.__init__, requiring the user to create one. (The secure argument and the check for 443 are then no longer needed - if ssl_context is None we're not using TLS.) A convenience method could create one for the user, explicitly specifying the use of the shipped bundle, defaulting to False (something like tls.create_default_context(use_hyper_cabundle=False)). If it's False, default to ssl.create_default_context.
The advantage would be that you at least force the user to think about it, at the cost of having SSL “just work” without knowing at what price.
Asking a thousand people would probably get you a thousand of opinions when it comes down to trust. So don't feel in any way obliged to reply. Great job on the library!

Right now I'm aiming to have it "just work", but it does need to be re-evaluated. At some point this library will get subsumed into the broader Hyper project, and at that point I'll want to re-evaluate our policy on TLS. In the short term, "just works" is a suitable bar for me I think. =)
With that said, the idea of using a factory method here is a good one, and is probably what the eventual shape of the solution will be.


Timeline and Clear handling issues in dataframe range queries

Setup
Consider a relatively simple archetype with a Clear half-way through:
def specimen_archetype_chunk_with_clear():
    rr.send_columns(
        "/archetype_chunk_with_clear",
        frame_times(range(10)),
        [
            rrc.Position2DBatch([(i, i) for i in range(10)]),
            rrc.ClassIdBatch(range(10)),
        ],
    )

    set_frame_time(0)
    rr.log_components("/archetype_chunk_with_clear", [rr.Points2D.indicator(), rrc.RadiusBatch(2)])

    set_frame_time(5)
    rr.log("/archetype_chunk_with_clear", rr.Clear(recursive=False))

(from https://github.com/rerun-io/rerun/pull/7469)

Expected

The initial radius=5 should be cleared from t=5
The 5th Position2D should be cleared (and then overwritten at t = 6).
The 5th ClassId should be cleared (and then overwritten at t = 6).

Expectation (2) matches the visualiser behaviour (the point "disappear" at t=5 and reappear at t=6).
Actual
Radius is indeed cleared, but the [5, 5] point is not. ClassId 5 is cleared, so it appears to be specific to the PoV component.

The problem stems from the implementation of JoinEncoding::OverlappingSlice, specifically:
https://github.com/rerun-io/rerun/blob/05a8808852e0071a6ce0b9d37e00dd8ac98a000f/crates/store/re_dataframe/src/range.rs#L492-L505
This is only ever correct if A) the entity being queried has no Clear logged to it and B) none of its recursive parents have a recursive Clear logged to them.
If you switch the default JoinEncoding to a dictionary, the issue will go away since that path always fully resolves latest-at queries (and therefore accounts for clears):
diff --git a/crates/store/re_chunk_store/src/dataframe.rs b/crates/store/re_chunk_store/src/dataframe.rs
index 0a4b01e8f1..0c33cae1e9 100644
--- a/crates/store/re_chunk_store/src/dataframe.rs
+++ b/crates/store/re_chunk_store/src/dataframe.rs
@@ -37,7 +37,6 @@ pub enum JoinEncoding {
     /// This minimizes the need for allocation, but at the cost of `RecordBatch`es that are
     /// almost always smaller than the optimal size. In the common worst-case, this will result
     /// in single-row `RecordBatch`es.
-    #[default]
     OverlappingSlice,

     /// Dictionary-encode the joined column.
@@ -48,6 +47,7 @@ pub enum JoinEncoding {
     /// Note that this changes the physical type of the returned column.
     ///
     /// Using this encoding for complex types is incompatible with some arrow libraries.
+    #[default]
     DictionaryEncode,
     //
     // TODO(jleibs):

I don't fully understand all the implications of this code so I don't have any recommendations yet.

All good now:


ENH: Allow install-conda-env.sh to access conda env create functionality

This is a substantial refactor of the conda init action:

exposes environment variables in bootstrap-conda.sh and install-conda-env.sh, allowing more configuration of both
allows for use of conda environment yaml files for specifying dependencies
updates documentation about it all, with examples.

@dennishuo: any advice for how to get @jeffkpayne all squared away with the CLA on this PR?
Thanks!

@nehalecky There's still no automated process for the multi-author case, but any "LGTM" or +1 comment from @jeffkpayne on this PR will satisfy the current requirements for a committer to merge the PR despite the googlebot label.

LGTM

Hi @dennishuo, thanks for the comments and feedback above.
In short, we'd be fine with changes you're proposing, and agree that it'd be great to follow a shell style convention—thanks for the link! We'd like to help, but likely better that you do a first pass, which would help us learn the style as applied to this code. At quick glance, I didn't see a convention for how to include default setting for environment variables, and hope you find our convention useful.
Expanding on a few more thoughts:
In reviewing the style guide, I couldn't agree more with the guide's top section [When to use Shell](with https://google.github.io/styleguide/shell.xml?showone=When_to_use_Shell#When_to_use_Shell), in particular:

If you are writing a script that is more than 100 lines long, you should probably be writing it in Python instead. Bear in mind that scripts grow. Rewrite your script in another language early to avoid a time-consuming rewrite at a later date.

Indeed, the complexity of our init action scripts continues to grow in a number of ways:

exposing and managing configurations
managing init action dependencies
overlapping common functionality (e.g., fetching metadata, retrieving objects from GCS, default launch templates)

We're of the opinion that, before we try and reinvent a provisioning library entirely in bash, we're at a critical point now where we should consider alternatives. We also agree that python would be a straightforward option, and in particular adoption of a higher level provisioning library (like ansible and salt, which already have playbooks and recipes that support installing many), would be a significant benefit (as mentioned in #15). Other alternatives might be in support of containers, etc.
We see this as saving us a considerable amount of effort supporting and expanding capabilities in provisioning a Dataproc cluster. So much so that, we're considering an init action to simply install one of these libraries across the cluster so we can leverage such functionality, however, we'd like to engage with you to ensure our efforts align with whatever roadmap you have established for this. Hope that's a possibility.
Thanks again, @dennishuo, appreciate your efforts. :)

@nehalecky good points; the good news is that even though initially we had required strictly shell scripts for init actions, nowadays any executable can be used as an init action, so it should work today to use Python in place of bash, just making sure to have the shebang specifying python #!/usr/bin/python or preferably #!/usr/bin/env python.
Of course, that wouldn't solve the problems of custom shared init-action libraries, managing init action dependencies, etc.
The roadmap for higher-level provisioning libraries is still a bit murky, but we'll be happy to start bouncing ideas back and forth. Ansible might not be a good fit because we'd generally want to make sure the provisioning system plays well with runtime scaling adding/removing VMs safely even in the middle of a job, so running on new nodes and keeping the hosts file in sync could be tricky. On the other hand it may still be possible to reuse Ansible modules to some extent inside of init actions.
If you were to create an init action for installing a provisioning framework across the cluster, would it be more for extensibility of what to deploy on the initial deployment, or would it be as an admin tool for continuing to modify the cluster as it's already running? I filed https://github.com/GoogleCloudPlatform/dataproc-initialization-actions/issues/59 for further discussion of extensibility models.

@dennishuo. Thanks. Wow, great to learn about support for python scripts, too!  Excited to jump in with further discussions on #59 and hope to do so by the end of this week. :)

Looks good, tested cleanly:
gsutil cp jupyter/jupyter.sh gs://hadoop-cloud-dev-dhuo/dataproc-initialization-actions/jupyter/jupyter.sh
gcloud dataproc clusters create dhuo-jupyter --metadata "JUPYTER_PORT=8124,INIT_ACTIONS_REPO=https://github.com/bomboradata/dataproc-initialization-actions.git,INIT_ACTIONS_BRANCH=feature/allow-conda-env-yml" --bucket hadoop-cloud-dev-dhuo --properties spark:spark.executorEnv.PYTHONHASHSEED=0,spark:spark.yarn.am.memory=1024m --initialization-actions gs://hadoop-cloud-dev-dhuo/dataproc-initialization-actions/jupyter/jupyter.sh

Closed by https://github.com/GoogleCloudPlatform/dataproc-initialization-actions/commit/a4225b613723c891eb375c57274695226e13fdcc https://github.com/GoogleCloudPlatform/dataproc-initialization-actions/commit/3fef7cea27160111f68e5f6b3ecb2033ba985413 https://github.com/GoogleCloudPlatform/dataproc-initialization-actions/commit/be01a58ee92c962e50f65c801d56c6693385ba3c https://github.com/GoogleCloudPlatform/dataproc-initialization-actions/commit/4f7ad163a14766f4e8b775d3d8c0df4234b50c98