text:
yarn audit shows lots of vulnerable dependencies

Can we release a minor version to upgrade vulnerable dependencies?
minimal repro:
yarn init
yarn add --dev @synthetixio/synpress
yarn audit

results:
Severity: 1 Low | 10 Moderate | 15 High

───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Exposure of Sensitive Information to an Unauthorized Actor   │
│               │ in follow-redirects                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ follow-redirects                                             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=1.14.8                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > etherscan-api > axios >              │
│               │ follow-redirects                                             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1067407                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Exposure of Sensitive Information to an Unauthorized Actor   │
│               │ in follow-redirects                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ follow-redirects                                             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=1.14.8                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > @portis/web3 >        │
│               │ pocket-js-core > axios > follow-redirects                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1067407                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Exposure of sensitive information in follow-redirects        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ follow-redirects                                             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=1.14.7                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > etherscan-api > axios >              │
│               │ follow-redirects                                             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1067459                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Exposure of sensitive information in follow-redirects        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ follow-redirects                                             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=1.14.7                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > @portis/web3 >        │
│               │ pocket-js-core > axios > follow-redirects                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1067459                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Arbitrary Code Execution in underscore                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ underscore                                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=1.12.1                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > @synthetixio/js > web3-utils >       │
│               │ underscore                                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1068134                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Arbitrary Code Execution in underscore                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ underscore                                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=1.12.1                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > @synthetixio/js > synthetix >        │
│               │ web3-utils > underscore                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1068134                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Signature Malleabillity in elliptic                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ elliptic                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=6.5.3                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > ethers > elliptic     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1069331                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Use of a Broken or Risky Cryptographic Algorithm             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ elliptic                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=6.5.4                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > ethers > elliptic     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1082380                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ node-fetch is vulnerable to Exposure of Sensitive            │
│               │ Information to an Unauthorized Actor                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ node-fetch                                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=2.6.7                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > node-fetch                           │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1070022                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ node-fetch is vulnerable to Exposure of Sensitive            │
│               │ Information to an Unauthorized Actor                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ node-fetch                                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=2.6.7                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > @portis/web3 >        │
│               │ @portis/web3-provider-engine > eth-json-rpc-infura >         │
│               │ eth-json-rpc-middleware > fetch-ponyfill > node-fetch        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1070022                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ low           │ The `size` option isn't honored after following a redirect   │
│               │ in node-fetch                                                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ node-fetch                                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=2.6.1                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > @portis/web3 >        │
│               │ @portis/web3-provider-engine > eth-json-rpc-infura >         │
│               │ eth-json-rpc-middleware > fetch-ponyfill > node-fetch        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1082461                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Prototype Pollution in lodash                                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ lodash                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=4.17.20                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > @synthetixio/js > lodash             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1070247                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Prototype Pollution in lodash                                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ lodash                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=4.17.20                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > lodash                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1070247                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Command Injection in lodash                                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ lodash                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=4.17.21                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > @synthetixio/js > lodash             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1082036                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Command Injection in lodash                                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ lodash                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=4.17.21                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > lodash                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1082036                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Regular Expression Denial of Service (ReDoS) in lodash       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ lodash                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=4.17.21                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > @synthetixio/js > lodash             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1082037                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Regular Expression Denial of Service (ReDoS) in lodash       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ lodash                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=4.17.21                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > lodash                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1082037                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Got allows a redirect to a UNIX socket                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ got                                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=11.8.5                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > @synthetixio/js > synthetix >        │
│               │ @chainlink/contracts-0.0.10 > @truffle/contract > web3 >     │
│               │ web3-bzz > got                                               │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1080920                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Got allows a redirect to a UNIX socket                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ got                                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=11.8.5                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > @synthetixio/js > synthetix >        │
│               │ @chainlink/contracts-0.0.10 > @truffle/contract >            │
│               │ @truffle/interface-adapter > web3 > web3-bzz > got           │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1080920                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Got allows a redirect to a UNIX socket                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ got                                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=11.8.5                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > @synthetixio/js > synthetix >        │
│               │ @chainlink/contracts-0.0.10 > @truffle/contract > web3 >     │
│               │ web3-bzz > swarm-js > got                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1080920                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Got allows a redirect to a UNIX socket                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ got                                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=11.8.5                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > @synthetixio/js > synthetix >        │
│               │ @chainlink/contracts-0.0.10 > @truffle/contract >            │
│               │ @truffle/interface-adapter > web3 > web3-bzz > swarm-js >    │
│               │ got                                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1080920                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Incorrect Comparison in axios                                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ axios                                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=0.21.2                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > etherscan-api > axios                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1081813                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Incorrect Comparison in axios                                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ axios                                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=0.21.2                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > @portis/web3 >        │
│               │ pocket-js-core > axios                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1081813                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Server-Side Request Forgery in Axios                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ axios                                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=0.21.1                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > etherscan-api > axios                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1082429                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Server-Side Request Forgery in Axios                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ axios                                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=0.21.1                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > @portis/web3 >        │
│               │ pocket-js-core > axios                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1082429                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ yargs-parser Vulnerable to Prototype Pollution               │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ yargs-parser                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=5.0.1                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > @synthetixio/js > synthetix >        │
│               │ @chainlink/contracts-0.0.10 > @truffle/contract >            │
│               │ @ensdomains/ensjs > @ensdomains/ens > solc > yargs >         │
│               │ yargs-parser                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1081883                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
26 vulnerabilities found - Packages audited: 1802
Severity: 1 Low | 10 Moderate | 15 High

Fixed in @synthetixio/synpress@2.0.1.
Thanks for reporting.

Against latest version 2.3.3-beta.1, it has only 30% high severity issues fixed. Please take another look.
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Exposure of Sensitive Information to an Unauthorized Actor   │
│               │ in follow-redirects                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ follow-redirects                                             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=1.14.8                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > @portis/web3 >        │
│               │ pocket-js-core > axios > follow-redirects                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1067407                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Exposure of sensitive information in follow-redirects        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ follow-redirects                                             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=1.14.7                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > @portis/web3 >        │
│               │ pocket-js-core > axios > follow-redirects                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1084497                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Arbitrary Code Execution in underscore                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ underscore                                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=1.12.1                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > @synthetixio/js > web3-utils >       │
│               │ underscore                                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1068134                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Arbitrary Code Execution in underscore                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ underscore                                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=1.12.1                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > @synthetixio/js > synthetix >        │
│               │ web3-utils > underscore                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1068134                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Signature Malleabillity in elliptic                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ elliptic                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=6.5.3                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > ethers > elliptic     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1069331                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Use of a Broken or Risky Cryptographic Algorithm             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ elliptic                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=6.5.4                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > ethers > elliptic     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1082380                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Prototype Pollution in lodash                                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ lodash                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=4.17.20                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > @synthetixio/js > lodash             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1070247                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Prototype Pollution in lodash                                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ lodash                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=4.17.20                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > lodash                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1070247                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Command Injection in lodash                                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ lodash                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=4.17.21                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > @synthetixio/js > lodash             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1084491                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ Command Injection in lodash                                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ lodash                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=4.17.21                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > lodash                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1084491                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Regular Expression Denial of Service (ReDoS) in lodash       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ lodash                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=4.17.21                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > @synthetixio/js > lodash             │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1084498                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Regular Expression Denial of Service (ReDoS) in lodash       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ lodash                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=4.17.21                                                    │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > lodash                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1084498                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Got allows a redirect to a UNIX socket                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ got                                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=11.8.5                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > @synthetixio/js > synthetix >        │
│               │ @chainlink/contracts-0.0.10 > @truffle/contract > web3 >     │
│               │ web3-bzz > got                                               │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1080920                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Got allows a redirect to a UNIX socket                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ got                                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=11.8.5                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > @synthetixio/js > synthetix >        │
│               │ @chainlink/contracts-0.0.10 > @truffle/contract >            │
│               │ @truffle/interface-adapter > web3 > web3-bzz > got           │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1080920                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Got allows a redirect to a UNIX socket                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ got                                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=11.8.5                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > download > got                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1080920                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ yargs-parser Vulnerable to Prototype Pollution               │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ yargs-parser                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=5.0.1                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > @synthetixio/js > synthetix >        │
│               │ @chainlink/contracts-0.0.10 > @truffle/contract >            │
│               │ @ensdomains/ensjs > @ensdomains/ens > solc > yargs >         │
│               │ yargs-parser                                                 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1081883                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ low           │ The `size` option isn't honored after following a redirect   │
│               │ in node-fetch                                                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ node-fetch                                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=2.6.1                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > @portis/web3 >        │
│               │ @portis/web3-provider-engine > eth-json-rpc-infura >         │
│               │ eth-json-rpc-middleware > fetch-ponyfill > node-fetch        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1082461                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ node-fetch is vulnerable to Exposure of Sensitive            │
│               │ Information to an Unauthorized Actor                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ node-fetch                                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=2.6.7                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > @portis/web3 >        │
│               │ @portis/web3-provider-engine > eth-json-rpc-infura >         │
│               │ eth-json-rpc-middleware > fetch-ponyfill > node-fetch        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1084495                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate      │ Axios vulnerable to Server-Side Request Forgery              │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ axios                                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=0.21.1                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > @portis/web3 >        │
│               │ pocket-js-core > axios                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1084434                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ high          │ axios Inefficient Regular Expression Complexity              │
│               │ vulnerability                                                │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ axios                                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=0.21.2                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @synthetixio/synpress                                        │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ @synthetixio/synpress > synthetix-js > @portis/web3 >        │
│               │ pocket-js-core > axios                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://www.npmjs.com/advisories/1084436                     │
└───────────────┴──────────────────────────────────────────────────────────────┘
20 vulnerabilities found - Packages audited: 1692
Severity: 1 Low | 9 Moderate | 10 High

@jack-wombat synpress is intended to be used as dev dependency. You really shouldn't care about these vulnerabilities at all as it's not bundled with your dapp or affect it in any way.

authors: drptbl jack-wombat

repo: Synthetixio/synpress


text:
Add Bone support

Could you add Support for Importing Bones? Or should it do that already?
Because some Models from BotW (for example "Enemy_Guardian_A") need Bones to look how they should look

The library only focuses the MK8 BFRES versions, support for other formats is prepared by checking the ResFile instance while importing data, but not implemented for BotW versions.

source: gharchive/issue

authors: RayKoopa aaronhsmine

license: mit

license_type: permissive

license_source: bigquery


text:
chore: sync JSON file content with model

Main improvements in this PR:

Remove HMR_4362  and associated external ids from rxn JSON file to sync with the model

I hereby confirm that I have:

[X] Tested my code on my own computer for running the model
[X] Selected devel as a target branch

Ah, good catch, @Hao-Chalmers. We should set up another automatic test to verify that the model is synced with the JSON annotation files, so this doesn't happen again.

@JonathanRob will add such a test function later.

source: gharchive/pull-request

authors: Hao-Chalmers JonathanRob

repo: SysBioChalmers/Human-GEM

license_source: github-api


text:
Fix Representation of ETF

Main improvements in this PR:
Implements changes proposed in #608, but with some modifications:

Remove MAR00562 and MAR00563 for being redundant with MAR06911
Replaces existing GPR of MAR06911 with ENSG00000073578 or ENSG00000117118 or ENSG00000204370 or ENSG00000100033 or ENSG00000250799 or ENSG00000115159 or ENSG00000102967 or ENSG00000016391

The original plan in #608 was to just add PRODH, PRODH2, GPD2, DHODH and CHDH to the GPR of MAR06911, which I thought was ETFA or ETFB or ETFDH or SDHC, but when I actually looked at MAR06911 in the YAML file, the GPR was SDHA and SDHB and SDHC and SDHD. This change was made in #489, and I missed that because I only checked the Metabolic Atlas website and not the most current YAML file, and apparently the Metabolic Atlas website's version of Human-GEM has not been updated in at least two releases of Human-GEM.
The justification for the change made in #489 was that MAR06911 represents the reaction catalyzed by Complex II/Succinate Dehydrogenase, and ETFA/B and ETFDH are not subunits of Complex II/SDH (detailed in #468). However, as recently discussed in #607, MAR08743 and MAR04652 are also representations of the reaction catalyzed by Complex II/SDH, and the proposed changes in #607 would make MAR04652 a one-step representation of the reaction catalyzed by Complex II/SDH, so MAR06911 no longer needs to represent any part of that reaction (and in fact shouldn't; see the discussion in #607). So instead of just adding the genes mentioned in #608 to the existing GPR of MAR06911, I replaced the existing one.
I hereby confirm that I have:

[X] Tested my code on my own computer for running the model
[X] Selected develop as a target branch
[X] Any removed reactions and metabolites have been moved to the corresponding deprecated identifier lists

Oh whoops the YAML validation probably failed cuz I forgot to also remove the ETF "metabolites" (although the error message it printed was not super easy to interpret)

This change was made in https://github.com/SysBioChalmers/Human-GEM/pull/489, and I missed that because I only checked the Metabolic Atlas website and not the most current YAML file, and apparently the Metabolic Atlas website's version of Human-GEM has not been updated in at least two releases of Human-GEM.

yes, Metabolic Atlas is out of sync recently

So instead of just adding the genes mentioned in https://github.com/SysBioChalmers/Human-GEM/issues/608 to the existing GPR of MAR06911, I replaced the existing one.

please clarify the latest plan, and also update proposed implementations

You mean update the proposed changes in #608?

yes, #608 and PR message of #612

(that last commit was taking care of the merge conflict in the deprecated metabolites and reactions files because this branch did not have the new rows in those files for the malonyl-carnitine reactions and metabolites removed in #605)

would you please add this paper to the reference of MAR06911

authors: Devlin-Moyer haowang-bioinfo


text:
SAM segmentation from local files do not hold

Hey guys, congratulations on your excellent initiative! Nutsh is amazing as tool for annotation.
Today along annotation process the JSON file was corrupted by some reason and I lost all my frames annotation. Is it possible to recovery it and correct the JSON manually ?

Since now, thank you

@tiagojc Hi, could you send the database file to me to let me have a look? Hopefully I can recover your data. The file is located at $WORKSPACE/dabatase/db.sqlite3. (yeah, I just noted the typo dabatase...) If you started nutsh using the default setting, $WORKSPACE will be ~/.nutsh.

@tiagojc Or you can in your browser visit $NUTSH_ORIGIN/api/video/$VIDEO_ID/annotation to get the data JSON and post it to me. Replace $NUTSH_ORIGIN with the origin you visit your nutsh deployment, and $VIDEO_ID with the video id which you can read from the url of annotation panel.

repo: SysCV/nutsh


text:
Define content authoring format(s)

We've been standardizing around Markdown as an authoring format. This is great for content contributors: clear, well-documented, lightweight format for writing content.
It also lets us add "flavors" like specific extensions we can render on the page beyond standard Markdown, for instance if we want to do something like "embed a terminal command", like this example from expo.dev:

We also potentially have more structured needs beyond what Markdown can provide. Consider also from expo.dev, this docs home:

This is implemented as a straight-up React page.
This kind of intentional layout is likely more than we can get with Markdown alone; it gives more control to us to get precise about how we'd like things surfaced on the page.
So:

Is that greater control something we build into our Markdown support as a "flavor", leaving the content authoring format to a Markdown flavor we document?
Are those pages instead done in something like React or MDX?
If it does necessitate MDX/React, does that give us 2 potential authoring formats?
...and based on those decisions, we've got to document in our docs contribution guide.

Let's get a decision on this for Phase 2, even if that decision is "we'll only support Markdown as-is for this Phase, and iterate on structured content like the example above for Phase 3."

After talking to @bobbilee19 about this:

There will be two authoring formats: MDX and React (we can still process MDX files even if the format ends in .md

MDX will be used for the docs content, such as Intros, Tutorials, getting started pages or anything that pertains to the actual learning content.
React pages will be used for initial "home pages" of docs sections. For example, /docs will be a page done in React.
We don't want our initial pages to have the look and feel of a regular docs page.

authors: ALRubinger dayhaysoos


text:
Create Your Own YouTube Short About Resolving a DID

What type of PR is this? (check all applicable)

[ ] ♻ Refactor
[ ] ✨ New Feature
[ ] 🐛 Bug Fix
[ ] 📝 Documentation Update
[ ] 👷 Example Application
[ ] 🧑💻 Code Snippet
[ ] 🎨 Design
[x] 📖 Content
[ ] 🧪 Tests
[ ] 🔖 Release
[ ] 🚩 Other

Description

This PR adds new content to the website.
Related Tickets & Documents

Resolves #1708
Mobile & Desktop Screenshots/Recordings

Desktop
Mobile

Added code snippets?

[x] 👍 yes
[ ] 🙅 no, because they aren't needed

Added tests?

[ ] 👍 yes
[ ] 🙅 no, because they aren't needed
[ ] 🙋 no, because I need help

No tests? Add a note

Added to documentation?

[ ] 📜 readme
[ ] 📜 contributing.md
[ ] 📓 general documentation
[ ] 🙅 no documentation needed

No docs? Add a note

[optional] Are there any post-deployment tasks we need to perform?
[optional] What gif best describes this PR or how it makes you feel?

nice animations!

nice animations!

Thank you @blackgirlbytes

authors: Chrissiku blackgirlbytes


text:
JW* Decode

Overview
Collaborative effort with @KendallWeihe to split Verify into two distinct functions Decode and Verify

[!IMPORTANT]
Most of the code changes in this PR are from moving things around. not much net new logic was added

Rationale
we've run into multiple scenarios where we need to:

verify a JWT or JWS and then use a number of fields from within the header or the payload/claims
decode a JWT or JWS, check some stuff within the payload or headers, and then verify

In order to access claims within a JWT the caller currently has to do this:
package main

import (
    "encoding/json"
    "fmt"

    "github.com/tbd54566975/web5-go/jwt"
)

func main() {
        signedJwt := "eyJhbGciOiJFZERTQSIsImtpZCI6ImRpZDpqd2s6ZXlKcmRIa2lPaUpQUzFBaUxDSmpjbllpT2lKRlpESTFOVEU1SWl3aWVDSTZJbFpyU3pKclRscDVVREY0WVZwUFoyZHBjREY2VTJwc1JXTnNTakZSTVhSQmMxRkJhVU5YUW1GaVgyOGlmUSMwIn0." +
    "eyJjX25vbmNlIjoiYWJjZDEyMyIsImlzcyI6ImV5SnJkSGtpT2lKUFMxQWlMQ0pqY25ZaU9pSkZaREkxTlRFNUlpd2llQ0k2SWxaclN6SnJUbHA1VURGNFlWcFBaMmRwY0RGNlUycHNSV05zU2pGUk1YUkJjMUZCYVVOWFFtRmlYMjhpZlEifQ." +
    "O434_IlnJOYbcIsHkVcOyKLxVvcfHvcg6tZL_gIU2TAY6qFiaPZ_w6upSzIl-I8JXYBytzR_8BfCq4P3che1Bg"

    parts := strings.Split(signedJwt, ".")

    base64UrlEncodedClaims := parts[1]

    decodedClaims, err := jwt.DecodeJWTClaims(base64UrlEncodedClaims)

    if err != nil {
        panic(err)
    }

The above code ends up making it such that callers have to know more details than they have to about jwt details. further, if they've already verified the jwt, the claims are now being decoded twice.
Changes
In order to remedy the above, this PR splits decoding and verifying into two distinct steps while still providing a single function call if desired
JWT
Approach 1
package main

import "github.com/tbd54566975/web5-go/jwt"

func main() {
    // Approach 1: decode then verify as two separate steps
    decoded, err := jwt.Decode("test")
    if err != nil {
        panic(err)
    }

   // application specific business logic

    err = decoded.Verify()
    if err != nil {
        panic(err)
    }
}

This approach requires the caller to first decode the JWT, perform whatever business logic is needed and then optionally call verify when desired
Approach 2
package main

import "github.com/tbd54566975/web5-go/jwt"

func main() {
    // Approach 2: decode & verify in 1 step and receive decoded jwt on successful verification
    decoded, err = jwt.Verify("test")
    if err != nil {
        panic(err)
    }
}

This allows to caller to call verify and then decide to perform additional logic using the claims within a JWT depending on the result of verification
JWS
the jws API surface is identical to jwt
Approach 1
package main

import "github.com/tbd54566975/web5-go/jws"

func main() {
    // Approach 1: decode then verify as two separate steps
    decoded, err := jws.Decode("test")
    if err != nil {
        panic(err)
    }

    err = decoded.Verify()
    if err != nil {
        panic(err)
    }
}

Approach 2
package main

import "github.com/tbd54566975/web5-go/jws"

func main() {
    // Approach 2: decode & verify in 1 step and receive decoded jwt on successful verification
    decoded, err = jws.Verify("test")
    if err != nil {
        panic(err)
    }
}

I'm curious, what are the cases where you needs access to claims before verifying? There's some higher precedence validation to do?

Actually I'm not sure we have run into that situation, @mistermoe am I forgetting something? I think this is a combination of things:

We needed a function to decode the JWT (for additional verification)
The jws.Verify() and jwt.Verify() function return values were semantically equivalent
Someone someday somewhere may have a situation wherein they want to inspect the JWT/JWS constituents without running a verification

authors: KendallWeihe mistermoe


text:
Asterisk does not start after 2.0.0

After updating to 2.0 I cannot connect anymore from the SipJS card, I've restored the backup from 1.3 for now and it is workin again. I also don't see any logs as why it is not working.

[cont-init.d] asterisk.sh: exited 0.
[cont-init.d] asterisk_mbox.sh: executing...
[cont-init.d] asterisk_mbox.sh: exited 0.
[cont-init.d] done.
[services.d] starting services
[services.d] done.

I do not see any output from asterisk in the log.
However, when I run a shell in the container I can see that it seems to be running.
When trying to do a asterisk -rvvvvdddd it crashed with an illegal instruction.
Wrong architecture packaged?

@TECH7Fox
Can you give a hint how exactly you created the docker images?

That's it. It gets built automatically by this.

Apparently, it was trying to run an instruction for AVX2 architecture on a system which lacks support for AVX2 instruction set.

So, it seems that Asterisk isn't built in a portable way. It gets tied to the environment which first built it.
I suspect there is something in the Makefile to tweak this behavior.
For example, that BUILD_NATIVE.

I just verfied that my host CPU supports AVX and AVX2 instructions.
So maybe it is not related not it.
I wonder if BUILD_NATIVE was really set when compiling started.
When experimenting with it, I also realized that sometimes an enabled option was disabled again.
However, I verfied that the current source works with builing locally on HAOS and prebuilt with the builder provided by HA.
Strange....

However, I verfied that the current source works with builing locally on HAOS and prebuilt with the builder provided by HA.

Exactly, that's how we didn't catch it in our tests.

Let's try to isolate the issue at least. I'm using amd64 and I can replicate the issue. Is there anyone here who is using ARM?

I can confirm the issue happens when I build and push the image by myself, with or without Docker Buildkit.
docker build asterisk --push

From my PC, then HA downloads it and same issue happens.

Fix: https://github.com/TECH7Fox/asterisk-hass-addons/pull/128

@stefanschoemaker Just out of curiosity: What system do you have?
I am using a Synology DS1821+.
Home Assistant is installed in a Synology VMM virtual machine using HA OS.

I'm running a Proxmox host with a Ryzen 3700X and installed HassIO with the original VM image using the following script:
https://raw.githubusercontent.com/Kanga-Who/home-assistant/master/hassos_install.sh

I have an Intel J4125 Gemini Lake btw.

v2.0.1 is out, with a fix for this. Could someone other than me test and confirm?

Yes, I will test it right now.

I have removed the addon and reinstalled with everyhting clean.
Unfortunately, it does not seem to work properly during startup.

[s6-init] making user provided files available at /var/run/s6/etc...exited 0.
[s6-init] ensuring user provided files have correct perms...exited 0.
[fix-attrs.d] applying ownership & permissions fixes...
[fix-attrs.d] done.
[cont-init.d] executing container initialization scripts...
[cont-init.d] 00-banner.sh: executing...
-----------------------------------------------------------
 Add-on: Asterisk
 PBX server for SIP devices like doorbells and phones
-----------------------------------------------------------
 Add-on version: 2.0.1
 You are running the latest version of this add-on.
 System: Home Assistant OS 7.5  (amd64 / qemux86-64)
 Home Assistant Core: 2022.3.5
 Home Assistant Supervisor: 2022.03.4
-----------------------------------------------------------
 Please, share the above information when looking for help
 or support in, e.g., GitHub, forums or the Discord chat.
-----------------------------------------------------------
[cont-init.d] 00-banner.sh: exited 0.
[cont-init.d] 01-log-level.sh: executing...
Log level is set to DEBUG
[cont-init.d] 01-log-level.sh: exited 0.
[cont-init.d] asterisk.sh: executing...
[13:47:21] INFO: Configuring certificate...
[13:47:21] INFO: Using existing certificate as 'generate_ssl_certificate' is disabled...
[13:47:21] INFO: Configuring Asterisk...
sending incremental file list
./
sent 2,634 bytes  received 20 bytes  5,308.00 bytes/sec
total size is 693,679  speedup is 261.37
[cont-init.d] asterisk.sh: exited 0.
[cont-init.d] asterisk_mbox.sh: executing...
[cont-init.d] asterisk_mbox.sh: exited 0.
[cont-init.d] done.
[services.d] starting services
[13:47:22] INFO: Starting Asterisk...
[services.d] done.
[cmd] /bin/bash exited 0
[cont-finish.d] executing container finish scripts...
[cont-finish.d] 99-message.sh: executing...
/usr/lib/bashio/config.sh: line 56: printf: write error: Broken pipe
[cont-finish.d] 99-message.sh: exited 0.
[cont-finish.d] done.
[s6-finish] waiting for services.
[s6-finish] sending all processes the TERM signal.
[s6-finish] sending all processes the KILL signal and exiting.

I have started the container manually with a shell.
I am able to start asterisk without any crash now.

So something seems to wrong with the init system.
Any new ideas?

This the command start the container starts:
/init /bin/bash -euxo pipefail -c '#(nop) ' 'ENV ASTERISK_VERSION=18.10.1'

Is this supposed to be like that?
Most other containers with S6 just do:
/init

Checking

This guy here had the same issue: https://community.home-assistant.io/t/help-figuring-out-why-my-addon-wont-start/326976
It seems he solved it by addig this in his addon docker file:
https://github.com/YoloDev/hass-addons/blob/main/enet/Dockerfile#L25-L26

Confirmed that it solves the issue:
❯ docker run --pull=always --rm -d ghcr.io/tech7fox/amd64-addon-asterisk:2.0.1 && docker ps | grep asterisk
fa8a0664d824   ghcr.io/tech7fox/amd64-addon-asterisk:2.0.1   "/init /bin/bash -eu…"   Less than a second ago   Up Less than a second             sweet_villani

❯ docker run --pull=always --rm -d ghcr.io/tech7fox/amd64-addon-asterisk:2.0.2 && docker ps | grep asterisk
df7969e82321   ghcr.io/tech7fox/amd64-addon-asterisk:2.0.2   "/init"   1 second ago    Up Less than a second             magical_nash

@felipecrs Could you please explain why enabling buildkit solves the issue? I would like to learn something new… 😉

Idk why, but buildkit produces different (more modern and less cluttered) image manifests. In the manifest, you can see the CMD being set. So, I had the idea to build with buildkit (which is the default nowadays, the addon-builder is probably lagging behind).
I can't explain why exactly the issue happened.

I just installed 2.0.2 in my HA and it's working. Can someone else confirm?

Confirmed. It is working now!
Good job!

authors: felipecrs nanosonde stefanschoemaker

license: MIT


text:
training model error !

thanks alot for this awesome work,i get this error
(texture) C:\Users\Genesis\github\texture>python -m scripts.finetune_diffusion --pretrained_model_name_or_path=stabilityai/stable-diffusion-2-depth --instance_data_dir=teapot_processed --instance_prompt='a photo of a teapot'  --lr_warmup_steps=0 --max_train_steps=10000 --scale_lr   --output_dir tuned_models/teapot_model--eval_path=configs/texture_transfer/eval_data.json
usage: finetune_diffusion.py [-h] --pretrained_model_name_or_path PRETRAINED_MODEL_NAME_OR_PATH [--revision REVISION] [--tokenizer_name TOKENIZER_NAME] --instance_data_dir
INSTANCE_DATA_DIR [--class_data_dir CLASS_DATA_DIR] --instance_prompt INSTANCE_PROMPT [--class_prompt CLASS_PROMPT] [--with_prior_preservation]
[--prior_loss_weight PRIOR_LOSS_WEIGHT] [--num_class_images NUM_CLASS_IMAGES] [--output_dir OUTPUT_DIR] [--seed SEED] [--resolution RESOLUTION]
[--center_crop] [--train_text_encoder] [--train_batch_size TRAIN_BATCH_SIZE] [--sample_batch_size SAMPLE_BATCH_SIZE]
[--num_train_epochs NUM_TRAIN_EPOCHS] [--max_train_steps MAX_TRAIN_STEPS] [--save_steps SAVE_STEPS]
[--gradient_accumulation_steps GRADIENT_ACCUMULATION_STEPS] [--gradient_checkpointing] [--learning_rate LEARNING_RATE] [--scale_lr]
[--lr_scheduler LR_SCHEDULER] [--lr_warmup_steps LR_WARMUP_STEPS] [--use_8bit_adam] [--adam_beta1 ADAM_BETA1] [--adam_beta2 ADAM_BETA2]
[--adam_weight_decay ADAM_WEIGHT_DECAY] [--adam_epsilon ADAM_EPSILON] [--max_grad_norm MAX_GRAD_NORM] [--push_to_hub] [--hub_token HUB_TOKEN]
[--hub_model_id HUB_MODEL_ID] [--logging_dir LOGGING_DIR] [--mixed_precision {no,fp16,bf16}] [--local_rank LOCAL_RANK] [--append_direction]
[--eval_path EVAL_PATH] [--init_token INIT_TOKEN]
finetune_diffusion.py: error: unrecognized arguments: photo of a teapot'

Try --instance_prompt="a photo of a teapot" with double quotes

authors: eladrich kotaxyz

repo: TEXTurePaper/TEXTurePaper


text:
tool using的数据能多一点样例吗

能否详细介绍或者开源部分tool using数据呢？

暂时不能开源tool的训练数据，望理解
更多介绍说明之后会有文档进行跟进，尽请关注

authors: SunyanGu zRzRzRzRzRzRzR


text:
Device activity and triggers need metadata to define supported targets

Not all activities and triggers are supported on every device. For example, a specific sensor trigger for Arduino may not be supported on another platform. The activity/trigger metadata should specify the supported targets.

This has been completed as part of 0.4.0

repo: TIBCOSoftware/flogo-contrib


text:
How do I generate video summary

Great job,
I finished setting up the project, trained my model and performed test.
My question now is how can I generate video summary (which file should I execute and what parameters should pass)?

Hello @chibexme,
thanks!
you may use the src/evaluation/evaluate.py script with the configs from either config_summe.yaml or config_tvsum.yaml

authors: chibexme hussainkanafani


text:
zacatie pisania kodu v symfony

testovanie a orientovanie sa v stromovej strukture

Prosím vás keď budete čokoľvek písať, najprv sa pozrite či nie je nejaký návod na stránke symfony, väčšinou totiž býva a väčšinou to my začiatočníci spravíme zle. Zároveň si zmeňte verziu na stránke, aspoň na 6.3

license: Unlicense


text:
fixed an issue when trying to start a build-chroot with explicit base…

… and version, fixed an issue with optargs indices

#17

repo: TLINDEN/jaildk


text:
exports: default should be the last case

Hi there,
since the last update I get this error:
Module not found: Error: Default condition should be last one

Apparently this is because the default entries in the exports should be the last entry (here and here).
Could you move the default entries down?
Best regards,
CK

@ckruse Thanks for reporting, fixed it. Let me know if it works for you now.

Problem is fixed, thank you very much :-)


text:
Needed: path_to_documentation_in_repo

For example:
To construct the url https://github.com/TYPO3/TYPO3.CMS/edit/master/typo3/sysext/form/Documentation/Index.rst
we need to know in the theme that /typo3/sysext/form/Documentation is the path to the folder WITHIN the repo where the documentation of the 'form' (sub-) project starts.
Another typical address:
https://github.com/TYPO3/TYPO3.CMS/tree/master/typo3/sysext/form/Documentation
WRONG:
This is what the current, insufficient algorithm creates:
https://github.com/TYPO3/TYPO3.CMS/edit/master/Documentation/Index.rst

Solved with https://github.com/TYPO3-Documentation/t3SphinxThemeRtd/commit/aad134d881f58179f264456a11a0d362bfe2ea96 and https://github.com/TYPO3-Documentation/t3SphinxThemeRtd/commit/e0e25f8d3b777edced6900a4e9afd861989346ab


text:
Recursion in advanced editor

Is your feature request related to a problem? Please describe.
I would like to make a measurement dependency tree using the advanced editor and a DMV query, but I would need to recursively read from $SYSTEM.DISCOVER_CALC_DEPENDENCY as I extract the dependencies, here is an example script I made to make my point
Describe the solution you'd like
I would like to be able to define a function within the advanced edition to be able to call it recursively and draw the whole tree of measurement dependencies of a data model.
Describe alternatives you've considered
use power query or directly C#
Additional context
The script was written in response to a query from Alex Power on Twitter.
https://twitter.com/notaboutthecell/status/1421127148912394241
string query_template = @"select [REFERENCED_OBJECT] from $SYSTEM.DISCOVER_CALC_DEPENDENCY where [OBJECT_TYPE] = 'MEASURE' and [REFERENCED_OBJECT_TYPE] = 'MEASURE' and [OBJECT]='{0}'" ;
foreach(var m in Selected.Measures)
{
string medida = m.Name;
string query = string.Format(query_template, medida);
using (var reader = Model.Database.ExecuteReader(query)){
//Create a loop for every row in the resulset
while(reader.Read()){
string DependentMeasure = reader.GetValue(0).ToString();
DependentMeasure.Output();
}
}
}

Could you describe how you want the output to appear?
Here's an example of how to output dependencies between measures and tables. This script could easily be modified to output the full dependency tree of measures in your model. No need to query DISCOVER_CALC_DEPENDENCY.
string tsv = "Measure\tDependsOnMeasure"; // TSV file header row

// Loop through all measures:
foreach(var m in Model.AllMeasures) {

    // Get a list of all measures referenced directly by the current measure:
    var allReferences = m.DependsOn.Measures;

    // Output TSV rows - one for each measure reference:
    foreach(var m2 in allReferences)
        tsv += string.Format("\r\n{0}\t{1}", m.Name, m2.Name);
}

tsv.Output();
// SaveFile("c:\\MyProjects\\SSAS\\MeasureDependencies.tsv", tsv); // Uncomment this line to save output to a file

Thanks a lot for a really fast answer Daniel, the script is great, but it still shows the direct dependencies of each measure, the idea of the recursion would be that starting from any measure I can derive the whole tree of dependencies, that is its "children", "grandchildren", "great-grandchildren" and also in reverse order, from any measure I can reach its N base ancestors.
If it were technically possible, this could serve for an infinite number of scripts that require this type of behavior.

We can certainly recurse to get the nested dependencies too, but I'm not sure what you want the output of the script to look like.
In the original script, I use the measure.DependsOn.Deep() method in order to get the full dependency tree of a specific measure.

Sorry Daniel, I just saw that the DependsOn method has internally another Deep() method that searches the whole tree recursively, impressive.
Is there any direct way to use Deep() and select only one type of objects? measures in this case.

And sorry again, I had not seen your answer about Deep() method when I wrote the previous message.

Sure:

OfType<Measure>() filters the results produced by Deep() to only include measures.
Distinct() should be used to ensure that each dependent measure only appears once

foreach(var m in Model.AllMeasures) {

    // Get a list of ALL objects referenced by this measure (both directly and indirectly through other measures):
    var allReferences = m.DependsOn.Deep().OfType<Measure>().Distinct();

    // ...
}

Thanks Daniel, a giant as always.

repo: TabularEditor/TabularEditor


text:
backport feature tdi-40997 for 7.1

What is the current behavior? (You can also link to an open issue here)
https://jira.talendforge.org/browse/TDI-41834
What is the new behavior?
Please check if the PR fulfills these requirements

[ ] The commit message follows Talend standard
[ ] Tests for the changes have been added (for bug fixes / features)
[ ] Docs have been added / updated (for bug fixes / features) ?
[ ] The code coverage on new code >75%
[ ] The new code does not introduce new technical issues (sonar / eslint)

What kind of change does this PR introduce?

[ ] Bugfix
[ ] Feature
[ ] Code style update (formatting, local variables)
[ ] Refactoring (no functional changes, no api changes)
[ ] Build / CI related changes
[ ] Other... Please describe:

Does this PR introduce a breaking change?

[ ] Yes
[ ] No

If this PR contains a breaking change, please describe the impact and migration path for existing applications: ...
Other information:

Pull request test result: failure :x:

Pull request test result: failure :x:

authors: akhabali build-talend-common

repo: Talend/components


text:
fix(TDI-37867): Add the lost message for jdbc components

Please check if the PR fulfills these requirements

[x] The commit message follows Talend standard
[ ] Tests for the changes have been added (for bug fixes / features)

What is the current behavior? (You can also link to an open issue here)
https://jira.talendforge.org/browse/TDI-37867
What is the new behavior?
add the lost message
Does this PR introduce a breaking change?

[ ] Yes
[x] No

Other information:
https://jira.talendforge.org/browse/TDI-37867

Pull request test result: failure :x:

need to call this method : setupI18N for definition i18n

https://ci-common.datapwn.com/job/components_bug_6.3_TDI-37867-lost-message/
have passed the dev branch test, and no found the pull-request-to-master branch test.

authors: build-talend wwang-talend


text:
IE11下JS报错的问题

系统：windows 10 专业版64位
浏览器：IE11
URL：http://localhost:8088/examples/MoveLineOverlay.html
发现两处报错：

Array.prototype.findIndex 未定义
代码：
{
key: 'compileTooltipTemplate',
value: function compileTooltipTemplate(formatter) {
formatter = '' + formatter.replace(/\{/g, '${overItem.') + '';
this.tooltipTemplate = new Function('overItem', 'return ' + formatter); // 此行运行时报错
}

Array.prototype.findIndex的问题，可以Polyfill解决。

使用了ES6的语法，IE11不支持，运行时报错。改为正则替换可解决。

太感谢你了 😆

repo: TalkingData/inmap


text:
devtools not display and throw errors

Describe the bug
latest version(5.0.0-alpha.87) @tanstack/react-query-devtools not display and throw errors
Your minimal, reproducible example
https://codesandbox.io/p/sandbox/dazzling-cookies-kn8n82?file=%2Fsrc%2Fmain.tsx%3A2%2C41
Steps to reproduce

run dev
open browser devtools

Expected behavior
no errors, display correctly
How often does this bug happen?
Every time
Screenshots or Videos

Platform

OS: windows 10
Browser: FF && Chrome latest

Tanstack Query adapter
react-query
TanStack Query version
5.0.0-alpha.87
TypeScript version
5.1.6
Additional context
No response

BTW, v5.0.0-alpha.86 is working

Must be related to the bundling changes. @lachlancollins FYI

Also tagging @ardeora since this seems like it's the query-devtools package! I'll have a chance to look at it shortly.

@ardeora this also doesn't work in svelte-query devtools. It seems like the index.cjs file bundles everything internally including _tmpl$23, while the index.js and index.jsx files split their imports. I can undo this by adding splitting: false, but I think splitting is needed for the lazy loading?

@lachlancollins  Yeah that wont work and we need the code splitting anyway. I took a look at this and looks like the esbuild plugin is failing on packaging the solid-js dependencies correctly. The template function specifically is not correctly configured. I'm taking a look at how to get this fixed

@ardeora I merged this PR to update tsup (7.1.0) and esbuild-plugin-solid (0.5.0), I'll see if updating this works.

This issue has now been fixed in alpha.89 Please take a look at the updated sandbox here

authors: Jungzl TkDodo ardeora lachlancollins

repo: TanStack/query


text:
Feature/extended filters get query data

Hello @TkDodo @tannerlinsley ,
This PR is following this discussion :
https://twitter.com/ecyrbedev/status/1571561333992079363
Consider the following pattern :

The idea is now that people are using the factory pattern to create keys and useQueryOptions in general, it might be helpful to be consistent for every function and allow to pass directly the result of the factory to all functions.
People might want to have everywhere the same ability to pass the factory result like they do for :

useQuery
useInfiniteQuery
fetchQuery

This PR add this possibility to :

getQueryData

Might also need to do it on (i can improve this PR upon agreement, after fixing details) :

getQueriesData

The solution i took is to be backward compatible with current getQueryData, but also allow to pass only one parameter that would be the filter + ignore the additionnal parameters.
For this i added an ExtendedQueryFilters :
export interface ExtendedQueryFilters<
  TQueryFnData = unknown,
  TError = unknown,
  TData = TQueryFnData,
  TQueryKey extends QueryKey = QueryKey,
> extends Omit<QueryFilters, 'queryKey'>,
    Omit<QueryOptions<TQueryFnData, TError, TData, TQueryKey>, 'queryKey'> {
  queryKey: TQueryKey
}

getQueryData<TData = unknown>(
    filters:  ExtendedQueryFilters,
  ): TData | undefined

what about getQueriesData ? Would we need that there as well?

Codecov Report
Base: 96.36% // Head: 96.23% // Decreases project coverage by -0.12% :warning:

Coverage data is based on head (1594868) compared to base (eab6e2c).
Patch has no changes to coverable lines.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #4190      +/-   ##
==========================================
- Coverage   96.36%   96.23%   -0.13%
==========================================
  Files          45       62      +17
  Lines        2281     2734     +453
  Branches      640      789     +149
==========================================
+ Hits         2198     2631     +433
- Misses         80      101      +21
+ Partials        3        2       -1

Impacted Files
Coverage Δ

src/devtools/devtools.tsx

src/core/logger.ts

...rc/createWebStoragePersistor-experimental/index.ts

src/react/Hydrate.tsx

src/core/focusManager.ts

src/devtools/styledComponents.ts

src/core/mutationObserver.ts

src/core/query.ts

src/react/setBatchUpdatesFn.ts

src/react/logger.ts

... and 97 more

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

:umbrella: View full report at Codecov.
:loudspeaker: Do you have feedback about the report comment? Let us know in this issue.

what about getQueriesData ? Would we need that there as well?

Yes, if you agree, i'll also add it

Yes, if you agree, i'll also add it

yep, awesome. I am trying to think if there is a situation where this will bite us, like when we introduce new query filters, they cannot overlap in namings with a query option that we already have, or vice-versa?
like, we have a query filter called type, and if we add an option called type later, this will clash.
For typesafety, we would only need { queryKey, queryFn } I think. If we pick only those two fields, the problem would be that we couldn't pass "more" to it, right?
So:
const query = {
  queryKey,
  staleTime
  queryFn // return a string
}

queryClient.getQueryData(query)

would then become invalid because it contains staleTime ? Still, I think it would be the "less risky" approach ... What do you think?

You are correct on all points. So maybe, it would be safer to even go further.
Because what about a user that wants to have filters alongside of is refuse of a Factory function?
So maybe we should not mix them at all. And have two simple overloads:
getQueryData(queryKey: QueryKey, filters: Filters);
// and
getQueryData(queryOptions: QueryOptions, filters: Filters);

What do you think?

Yes I think that would work 👍

For information, i'm strugling with where to handle this new overload.
Internally no current parseArgs helpers handles this use case, and modifying find and findAll to accept queryOptions would break everything.
So i'm currently trying to handle this use case by adding a dedicated parse helper that will not break everything else.
I understand why @tannerlinsley said he would not design with overload if he had to do this now.
But i'll try to finish this week.

i'm sorry dom, but i can't make this work smoothly.
internally everything is using unpredictable overloads. And since code coverage is not there, i can't guaranty i'll not break any user code out there.
So i'll back down on this PR.
Again sorry.

no worries, thank you for trying ❤

authors: TkDodo codecov-commenter ecyrbe


text:
Getting started guide for Start missing import

Which project does this relate to?
Router
Describe the bug
When following the Getting Started guide, I get this error when I try to run load my app:
Error in renderToPipeableStream: ReferenceError: React is not defined
    at Home (/Users/robin/src/tanstack-start-demo/app/routes/index.tsx?tsr-split:31:3)

Adding a react import in __root.tsx and the index.tsx route fixes it, which makes it seem like Start doesn't use the newer automatic JSX runtime? In any case, if the explicit imports are required, they should be included in the examples.
Your Example Website or App
https://github.com/RobinClowers/photo-album-tanstack/tree/tanstack-getting-started-bug
Steps to Reproduce the Bug or Issue

Create a new vite react app pnpm create vite and select react.
Delete the vite config, index file and main.tsx.
Follow the getting started guide from Install Dependencies.
Visit localhost:3000 and observe the error in the dev server output.

Expected behavior
I expected the page to render without an error.
Screenshots or Videos
No response
Platform

OS: macOS
Browser: Firefix
Version: 132

Additional context
No response

Could you try this again without using pnpm create vite? The deps being installed using the vite app creation could be creating conflicts.

Apologies, this is because the create vite app assumes an src directory, rather than app, which I didn't notice. This works fine if "app" is the tsconfig.app.js include option.

authors: RobinClowers SeanCassiere

repo: TanStack/router


text:
Cache Testing added + bug fixes

added cache_test suite
solved various bugs regarding POST, DELETE and PUT requests handling

Coverage decreased (-0.5%) to 89.74% when pulling a1f1397f08f9011b0e60cb6d8e97bd7ef8ebaac4 on Gnomjolnir:master into 4a939f3dc6acb1b756e5b213e135e0a8da761810 on Tanganelli:master.

authors: Gnomjolnir coveralls

repo: Tanganelli/CoAPthon


text:
🛑 Primal Bushcraft is down

In dc05734, Primal Bushcraft (https://www.primalbushcraftsurvival.com) was down:

HTTP code: 0
Response time: 0 ms

Resolved: Primal Bushcraft is back up in 0f5f225 after 29 minutes.

repo: Tartan-Web-Design/monitoring


text:
Create a slightly different attack animation from the walking animation (Upper Cut)

Reference video would be DM'ed soon.

@mintbiscuits marked as top priority

repo: Team-Awkward-Smile/Epilogue


text:
Move maybe_gzip_open and path_to_str to utils

I moved maybe_gzip_open and path_to_str functions to utils. I added __all__ to utils just to be consistent across the whole project.

Codecov Report

Merging #13 into master will increase coverage by 0.01%.
The diff coverage is 100%.

@@            Coverage Diff             @@
##           master      #13      +/-   ##
==========================================
+ Coverage   98.05%   98.07%   +0.01%
==========================================
  Files           3        4       +1
  Lines         103      104       +1
  Branches       13       13
==========================================
+ Hits          101      102       +1
  Misses          1        1
  Partials        1        1

Impacted Files
Coverage Δ

json_lines/_lib.py
97.05% <100%> (-0.57%)
:arrow_down:

json_lines/utils.py
100% <100%> (ø)

authors: codecov-io jakubwasikowski

repo: TeamHG-Memex/json-lines


text:
🛑 vyper.me is down

In 0ac88a3, vyper.me (https://yapi.vyper.me/healthcheck) was down:

HTTP code: 0
Response time: 0 ms

Resolved: vyper.me is back up in 99e9923 after 27 minutes.

repo: TeamPiped/piped-uptime


text:
🛑 vyper.me is down

In 33ed5a9, vyper.me (https://yapi.vyper.me/healthcheck) was down:

HTTP code: 404
Response time: 263 ms

Resolved: vyper.me is back up in 47b9a86 after 18 minutes.


text:
🛑 kavin.rocks (Official) is down

In 6512f0a, kavin.rocks (Official) (https://pipedapi.kavin.rocks/healthcheck) was down:

HTTP code: 0
Response time: 0 ms

Resolved: kavin.rocks (Official) is back up in 443769f after 8 minutes.


text:
🛑 ducks.party is down

In 0904f54, ducks.party (https://pipedapi.ducks.party/healthcheck) was down:

HTTP code: 502
Response time: 1414 ms

Resolved: ducks.party is back up in d7b280a after 11 minutes.


text:
🛑 ggtyler.dev is down

In 9c9e2c5, ggtyler.dev (https://piapi.ggtyler.dev/healthcheck) was down:

HTTP code: 502
Response time: 372 ms

Resolved: ggtyler.dev is back up in 463c91c after 11 minutes.


text:
🛑 il.ax is down

In 4288be1, il.ax (https://pa.il.ax/healthcheck) was down:

HTTP code: 0
Response time: 0 ms

Resolved: il.ax is back up in 0619663 after 17 minutes.


text:
🛑 phoenixthrush.com is down

In e3606b7, phoenixthrush.com (https://pipedapi.phoenixthrush.com/healthcheck) was down:

HTTP code: 0
Response time: 0 ms

Resolved: phoenixthrush.com is back up in 0392bfd after 11 hours, 2 minutes.


text:
🛑 esmailelbob.xyz is down

In 361dd87, esmailelbob.xyz (https://pipedapi.esmailelbob.xyz/healthcheck) was down:

HTTP code: 502
Response time: 84 ms

Resolved: esmailelbob.xyz is back up in 5b5bfa2.


text:
🛑 il.ax is down

In 47c0f5e, il.ax (https://pa.il.ax/healthcheck) was down:

HTTP code: 0
Response time: 0 ms

Resolved: il.ax is back up in f38786f after 11 minutes.


text:
🛑 esmailelbob.xyz is down

In c121d1d, esmailelbob.xyz (https://pipedapi.esmailelbob.xyz/healthcheck) was down:

HTTP code: 0
Response time: 0 ms

Resolved: esmailelbob.xyz is back up in dfbab65.


text:
🛑 esmailelbob.xyz is down

In 0d2e25f, esmailelbob.xyz (https://pipedapi.esmailelbob.xyz/healthcheck) was down:

HTTP code: 0
Response time: 0 ms

Resolved: esmailelbob.xyz is back up in 80c663c.


text:
🛑 rivo.lol is down

In a91d0c0, rivo.lol (https://pipedapi.rivo.lol/healthcheck) was down:

HTTP code: 0
Response time: 0 ms

Resolved: rivo.lol is back up in 96866e7 after 10 minutes.


text:
🛑 privacydev.net is down

In 20c788f, privacydev.net (https://api.piped.privacydev.net/healthcheck) was down:

HTTP code: 0
Response time: 0 ms

Resolved: privacydev.net is back up in 62e2abc after 6 minutes.


text:
🛑 kavin.rocks (Official) is down

In 5435b48, kavin.rocks (Official) (https://pipedapi.kavin.rocks/healthcheck) was down:

HTTP code: 502
Response time: 311 ms

Resolved: kavin.rocks (Official) is back up in 40b592c after 9 minutes.


text:
Changed team page card to material-ui

Description
Team page card now does not have a dependency on chakra ui. Now it depends on material ui. I have added a little up down animation on profile image also.
Fixes #164
Type of change

[x] New feature (non-breaking change which adds functionality)

How Has This Been Tested?

[x] Browser

Checklist:

[x] My code follows the style guidelines of this project
[x] I have performed a self-review of my own code
[ ] I have commented my code, particularly in hard-to-understand areas
[ ] I have made corresponding changes to the documentation
[ ] My changes generate no new warnings
[ ] I have added tests that prove my fix is effective or that my feature works
[x] New and existing unit tests pass locally with my changes
[x] Any dependent changes have been merged and published in downstream modules

Screenshots :
The Card now looks like this :

Please also see that now the background color of home page is changed in my development environment. I don't know why, in chrome it is changed but in mozilla it is fine.

Great Work @sandy9808 . I don't know, may be some extension on your chrome doing it. Here its fine. 👍

@imabp Do i have to remove the animation on profile image ?


text:
How to mark Support and Resistance horizontal lines or zones onto the Candlestick chart?

Hi, just started using this library and everything looks great! just wanted to know how I could add horizontal lines onto the chart to mark support and resistance zones programmatically. I already have the data for these zones, I just want to mark them.  I tried to use the mark_line function to do so but is there a better way of marking the zones?

mark_line only seems to allow to draw horizontal lines across the whole chart, i.e. there are no start and end points.
Like you, @vinayyak, I am looking for a function which allows to draw a line between two points (x0,y0) and (x1,y1) in my case (horizontal line) y0=y1.
I could not find such function despite hour long research, this repo unfortunately seems to be abandoned...

authors: axinos vinayyak

repo: TechfaneTechnologies/pytvlwcharts


text:
Port in 1.16

Hi
Do you want to do a port of this mod on 1.16.5 (Forge)
Thanks

No time for that, sorry.


text:
Category: Show all

Please add a category "All recipes" where all recipes are shown. I thought "*" will show all recipes but it doesn't. It's working correctly in nextcloud cookbook app.

Yes indeed the "*" category contains all recipes that are not assigned to a category!
i will add an "all" category as soon as i get to it. Thanks for your feedback!

I added this in release 0.3.3
3ac08ed3b2c28a174f93eb9a1bdea8fccd468199


text:
Added multiple language support system tp all pages

in your website i am added multiple language support system through out all the pages
https://github.com/user-attachments/assets/113ed4a6-6a62-4730-83c1-4173c5a97eee

no i will not merge this you all repeat same issue and same ui in all repos i said to make change language in footer and fixed in footer

repo: TejasNasre/nexmeet


text:
[Feature]: save image or video to photos album

Is your feature request related to a problem? Please describe.
I have a web app, it helps user to get beautiful images or videos from anywhere, but i can't save them to my phone in my web app.
Describe the solution you'd like
two apis:

saveImageToPhotosAlbum
saveImageToPhotosAlbum

Describe alternatives you've considered
No response
Additional context
No response

Will be implemented in v8.0
https://github.com/Telegram-Mini-Apps/telegram-apps/issues/553

authors: heyqbnk xunjianxiang

repo: Telegram-Mini-Apps/telegram-apps