text:
SP-6625

…ave larger files on tomcat's temp directory

zipFilename

at ui/src/main/java/org/pentaho/di/ui/i18n/editor/Translator2.java (line 869)
🎯 Static Application Security Testing (SAST) Vulnerability

Severity
Finding

     Low
Untrusted stored value used in file paths, allowing access to unintended files

 Full description

Overview
Path traversal, also known as directory traversal, is a type of
vulnerability that allows an attacker to access files or directories on a
computer or device that are outside of the intended directory.
Allowing arbitrary read access can allow the attacker to read sensitive
files, such as configuration files or sensitive data, potentially leading
data loss or even system compromise. Allowing arbitrary write access is
more severe and in most cases leads to arbitrary code execution, via
editing important system files or sensitive data.
Vulnerable example
public class path_traversaLvuln {
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        String DOCS_FOLDER = "/srv/www/docs";
        String docName = statement.executeQuery(query);  // Reading from DB
        Path docPath = Paths.get(DOCS_FOLDER, docName);
        File docFile = docPath.toFile();
        FileUtils.copyFile(docFile, response.getOutputStream());
    }
}

In this example, an attacker can, via a stored parameter, inject a back-path,
that will get anywhere in the system, using "../../".
Remediation
public class path_traversal_safe {
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        String DOCS_FOLDER = "/srv/www/docs";
        String docName = statement.executeQuery(query);  // Reading from DB
        Path docPath = Paths.get(DOCS_FOLDER, docName);
+         Path normDocPath = docPath.normalize();
+         // Make sure the canonical path resides in the desired dir
+         if (normDocPath.startsWith(DOCS_FOLDER)) {
            File docFile = docPath.toFile();
            FileUtils.copyFile(docFile, response.getOutputStream());
+         }
    }
}

By checking that the folder name still starts with the predefined prefix, we
make sure that the attacker is not able to back-path outside of the allowed
folder.

 Code Flows

 Vulnerable data flow analysis result

↘ System.getProperty( "file.separator" ) (at ui/src/main/java/org/pentaho/di/ui/i18n/editor/Translator2.java line 866)
↘ dialog.getFilterPath() + System.getProperty( "file.separator" ) (at ui/src/main/java/org/pentaho/di/ui/i18n/editor/Translator2.java line 866)
↘ dialog.getFilterPath() + System.getProperty( "file.separator" ) + dialog.getFileName() (at ui/src/main/java/org/pentaho/di/ui/i18n/editor/Translator2.java line 866)
↘ zipFilename (at ui/src/main/java/org/pentaho/di/ui/i18n/editor/Translator2.java line 865)
↘ zipFilename (at ui/src/main/java/org/pentaho/di/ui/i18n/editor/Translator2.java line 869)

🐸 JFrog Frogbot

🐸 JFrog Frogbot

new File( System.getProperty( "java.io.tmpdir" ),  RegisterPackageServletIT.class.getSimpleName() )

at engine/src/it/java/org/pentaho/di/www/RegisterPackageServletIT.java (line 201)
🎯 Static Application Security Testing (SAST) Vulnerability

Severity
Finding

     Low
Untrusted stored value used in file paths, allowing access to unintended files

 Full description

Overview
Path traversal, also known as directory traversal, is a type of
vulnerability that allows an attacker to access files or directories on a
computer or device that are outside of the intended directory.
Allowing arbitrary read access can allow the attacker to read sensitive
files, such as configuration files or sensitive data, potentially leading
data loss or even system compromise. Allowing arbitrary write access is
more severe and in most cases leads to arbitrary code execution, via
editing important system files or sensitive data.
Vulnerable example
public class path_traversaLvuln {
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        String DOCS_FOLDER = "/srv/www/docs";
        String docName = statement.executeQuery(query);  // Reading from DB
        Path docPath = Paths.get(DOCS_FOLDER, docName);
        File docFile = docPath.toFile();
        FileUtils.copyFile(docFile, response.getOutputStream());
    }
}

In this example, an attacker can, via a stored parameter, inject a back-path,
that will get anywhere in the system, using "../../".
Remediation
public class path_traversal_safe {
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        String DOCS_FOLDER = "/srv/www/docs";
        String docName = statement.executeQuery(query);  // Reading from DB
        Path docPath = Paths.get(DOCS_FOLDER, docName);
+         Path normDocPath = docPath.normalize();
+         // Make sure the canonical path resides in the desired dir
+         if (normDocPath.startsWith(DOCS_FOLDER)) {
            File docFile = docPath.toFile();
            FileUtils.copyFile(docFile, response.getOutputStream());
+         }
    }
}

By checking that the folder name still starts with the predefined prefix, we
make sure that the attacker is not able to back-path outside of the allowed
folder.

 Code Flows

 Vulnerable data flow analysis result

↘ System.getProperty( "java.io.tmpdir" ) (at engine/src/it/java/org/pentaho/di/www/RegisterPackageServletIT.java line 201)
↘ new File( System.getProperty( "java.io.tmpdir" ),  RegisterPackageServletIT.class.getSimpleName() ) (at engine/src/it/java/org/pentaho/di/www/RegisterPackageServletIT.java line 201)

🐸 JFrog Frogbot

🐸 JFrog Frogbot

hadoopConfigUtilClassName

at engine/src/main/java/org/pentaho/di/core/compress/hadoopsnappy/HadoopSnappyCompressionProvider.java (line 63)
🎯 Static Application Security Testing (SAST) Vulnerability

Severity
Finding

  Medium
Untrusted input used to dynamically load or execute code

 Full description

Overview
Unsafe Reflection is a security vulnerability where a program uses
reflection mechanisms in an insecure manner, allowing unauthorized
access and modification of sensitive data or code. Attackers exploit
this weakness to bypass access controls, execute unauthorized operations,
or compromise the application's integrity. Employing proper input
validation, access controls, and secure coding practices can help
mitigate the risk of unsafe reflection and maintain application security.
Vulnerable example
String roleClsName = get_from_db("role");
String username = get_from_db("username");
String key = get_from_db("key");
try {
    Class roleClass = Class.forName(roleClsName);
    Object role = roleClass.getDeclaredConstructor(String.class).newInstance(username);
    String value = (String)roleClass.getMethod("read", String.class).invoke(role, key);
    response.getWriter().write(value);
}

In this example, role argument can point to any class which implements read method.
Remediation
Avoid reflection based on user input by adding a function which decodes user
input according to a set of allowed values:
-   Class roleClass = Class.forName(roleClsName);
+   Class roleClass = Class.forName(classNameToClass(roleClsName));

 Code Flows

 Vulnerable data flow analysis result

↘ System.getProperty( HADOOP_CONFIG_UTIL_CLASS_PROPERTY ) (at engine/src/main/java/org/pentaho/di/core/compress/hadoopsnappy/HadoopSnappyCompressionProvider.java line 61)
↘ hadoopConfigUtilClassName (at engine/src/main/java/org/pentaho/di/core/compress/hadoopsnappy/HadoopSnappyCompressionProvider.java line 61)
↘ hadoopConfigUtilClassName (at engine/src/main/java/org/pentaho/di/core/compress/hadoopsnappy/HadoopSnappyCompressionProvider.java line 63)

🐸 JFrog Frogbot

SYSTEM_FOLDER

at plugins/pur/core/src/main/java/org/pentaho/di/repository/pur/PurRepository.java (line 1483)
🎯 Static Application Security Testing (SAST) Vulnerability

Severity
Finding

     Low
Untrusted stored value used in file paths, allowing access to unintended files

 Full description

Overview
Path traversal, also known as directory traversal, is a type of
vulnerability that allows an attacker to access files or directories on a
computer or device that are outside of the intended directory.
Allowing arbitrary read access can allow the attacker to read sensitive
files, such as configuration files or sensitive data, potentially leading
data loss or even system compromise. Allowing arbitrary write access is
more severe and in most cases leads to arbitrary code execution, via
editing important system files or sensitive data.
Vulnerable example
public class path_traversaLvuln {
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        String DOCS_FOLDER = "/srv/www/docs";
        String docName = statement.executeQuery(query);  // Reading from DB
        Path docPath = Paths.get(DOCS_FOLDER, docName);
        File docFile = docPath.toFile();
        FileUtils.copyFile(docFile, response.getOutputStream());
    }
}

In this example, an attacker can, via a stored parameter, inject a back-path,
that will get anywhere in the system, using "../../".
Remediation
public class path_traversal_safe {
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        String DOCS_FOLDER = "/srv/www/docs";
        String docName = statement.executeQuery(query);  // Reading from DB
        Path docPath = Paths.get(DOCS_FOLDER, docName);
+         Path normDocPath = docPath.normalize();
+         // Make sure the canonical path resides in the desired dir
+         if (normDocPath.startsWith(DOCS_FOLDER)) {
            File docFile = docPath.toFile();
            FileUtils.copyFile(docFile, response.getOutputStream());
+         }
    }
}

By checking that the folder name still starts with the predefined prefix, we
make sure that the attacker is not able to back-path outside of the allowed
folder.

 Code Flows

 Vulnerable data flow analysis result

↘ System.getProperty( "file.separator" ) (at core/src/main/java/org/pentaho/di/core/Const.java line 164)
↘ FILE_SEPARATOR (at core/src/main/java/org/pentaho/di/core/Const.java line 164)
↘ FILE_SEPARATOR (at core/src/main/java/org/pentaho/di/core/Const.java line 3665)
↘ dir + FILE_SEPARATOR (at core/src/main/java/org/pentaho/di/core/Const.java line 3665)
↘ dir + FILE_SEPARATOR + file (at core/src/main/java/org/pentaho/di/core/Const.java line 3665)
↘ return dir + FILE_SEPARATOR + file; (at core/src/main/java/org/pentaho/di/core/Const.java line 3665)
↘ Const           .safeAppendDirectory( BasePropertyHandler.getProperty( "systemDirBase", "system/" ), "" ) (at plugins/pur/core/src/main/java/org/pentaho/di/repository/pur/PurRepository.java line 170)
↘ SYSTEM_FOLDER (at plugins/pur/core/src/main/java/org/pentaho/di/repository/pur/PurRepository.java line 170)
↘ SYSTEM_FOLDER (at plugins/pur/core/src/main/java/org/pentaho/di/repository/pur/PurRepository.java line 1483)

🐸 JFrog Frogbot


text:
Allow loading of local proto definitions as well as from S3.

server.go is getting busy, I'll split it up into digestible chunks soon.

Logs confirm this loaded the pentops protobufs. 👍

source: gharchive/pull-request

repo: pentops/dante

license: MIT

license_type: permissive

license_source: github-api


text:
Add a custom Serde serializer for the Amount proto type

Is your feature request related to a problem? Please describe.
We now record amounts with an Amount type.  The proto-generated type currently serializes like this:
              "amount": {
                "lo": 100000000,
                "hi": 0
              },

It would be better if it serialized as a decimal string, like this:
             "amount": "100000000",

(Why a decimal string? Because we want amounts to be 128 bits, and don't expect every Serde backend to be able to handle that.)
Describe the solution you'd like
Add a custom serializer implementation for Amounts to proto/src/serializers, then add annotations to the proto compiler to use it for the generated Amount type.

I wrote out the encoding/decoding part in #1571

We don't want to do this anymore. We recently decided custom serializers are more trouble than they're worth; see #1896 for context.

source: gharchive/issue

authors: conorsch erwanor hdevalence

repo: penumbra-zone/penumbra


text:
ci: disable protobuf docs

These steps broke with the proto reorganization. We could update them, but we'd potentially have to update the steps every time we added new protos or changed the layout.  Now that we publish to buf.build, it seems like we might want to use that instead?

I disabled the hosting with firebase -P penumbra-protobuf hosting:disable.


text:
use prost::Name trait instead of TypeUrl

Closes #3330
Closes #3380
@erwanor flagged that we also need https://github.com/cosmos/ibc-proto-rs/pull/163 to completely migrate away from TypeUrl
Remaining TODOs:

[x] update effect hash docs
[x] update remaining IBC protos after ibc_types is updated

ibc-types@0.10 is released and removes the TypeUrl bound from DomainType, replacing it with prost::Name

One thing to note is that I think this is breaking because we lose the leading slash on the name.

Yes, also because a bunch of our URLs were outdated since I didn't fix them while rearranging all the protos.

authors: erwanor hdevalence redshiftzero


text:
Lerna updated still reporting packages that haven't updated

For some reason, when opening PR #174, packages that hadn't been updated were still marked as updated, despite having all tags pulled locally.
See
https://github.com/lerna/lerna/issues/1269
https://github.com/lerna/lerna/issues/1345

@govuk-react/api-docs is a devDependency of every comnponent
govuk-react is a dependency of @govuk-react/api-docs
every component is a dependency of govuk-react

This means that:

whenever a component is updated, lerna publish will update govuk-react
=> whenever a component is updated, lerna publish will update api-docs
=> whenever a component is updated, lerna publish will update every component

Possible solutions:
1. remove govuk-react from @govuk-react/api-docs dependencies
govuk-react is only used for the following code:
function shouldDocumentComponent(file) {
  // only document components that are exported from src/index.js
  const name = getComponentNameFromFile(file);
  return Object.prototype.hasOwnProperty.call(components, name);
}

(where components is govuk-react)
There should be a way to work around this by passing in a CLI argument to the components (index.js file) that we want to import.
2. remove @govuk-react/api-docs from component dependencies
We could call docs from the project root rather than from each component individually.

I think (1) is the best approach as we want to make this util slightly generic and not tied to this project.

Another options may be to move @govuk-react/api-docs to a devDependency of the monorepo root package.json
This would cause an issue with no-extraneous-dependencies eslint check, but could be resolved either with support for multiple package.json files or a whitelist array.

correction - this doesn't cause an issue with no-extraneous-dependencies as it's a CLI tool, there are no references in the JS of components

repo: penx/govuk-react


text:
Hotfix invalid job path

Fix #35

Coverage remained the same at 100.0% when pulling eb794fed33602e87d4a4948944d98d8d70805582 on hotfix-invalid-job-path into 0c8926e9983adebe1e4649c0dc7d0852c9d58957 on master.

authors: coveralls peppeocchi

repo: peppeocchi/php-cron-scheduler

license: mit

license_source: bigquery


text:
List available named queries while in query mode

 Issue by carlos.garcia
Wednesday Nov 02, 2016 at 13:42 GMT
Originally opened as https://git.tk.informatik.tu-darmstadt.de/SPIN/ID2T-toolkit/issues/4

A command should be available to list all possible named queries while in query mode.

 Comment by patrick.jattke
Friday Nov 04, 2016 at 11:13 GMT

Supplement: This new command should be documented in README.md or a suitable wiki page.

 Comment by aidmar.wainakh
Tuesday Feb 20, 2018 at 10:39 GMT

A help command was added, listing available commands and providing examples and additional information by typing "help [KEYWORD];"

 Comment by aidmar.wainakh
Tuesday Feb 20, 2018 at 10:39 GMT


text:
feat: Added suffix in completion request

New ollama haves API for code completions by introducing field suffix: https://github.com/ollama/ollama/blob/608e87bf8707e377f1c195ae22330e26f67de91e/docs/api.md?plain=1#L43
This PR adds this field to request and also methods to init suffix. I've added small test as well to check everything is working with granite-code:3b model.

Thanks for your contribution!


text:
Admin cannot get all rows from collection

I am trying to setup a collection where admin can see all the rows but users can see only their own. But unfortunately i couldnt succeed. With the below setup admin can't see other's data. If i make "read_owner_only":false then everyone sees everyhting.
            "read_owner_only": true,
            "write_owner_only": true,
            "roles_allowed_to_read":["user","admin"],
            "roles_allowed_to_update":["admin"],
            "roles_allowed_to_delete":[],

You need to set "ownerField" to something, for example "ownerId" (see "invoices" example).
ownerField is name of collection field that sotres userId. That field will be automatically set, just name it.

@kadirerdogan BTW, note: "roles_allowed_to_delete": [] in your example means: "All users can delete".

ownerField is already set to ownerId as below. I didn't paste it at first. Setting it to something else?  If i do that i think the real owner won't be able to see it. I've checked the invoices example and it is set to ownerId as well.
Btw, i dont want any rows to be deleted so i think i should set roles_allow_to_delete to a role which does not exist :)
            "owner_field": "ownerId",
            "read_owner_only": true,
            "write_owner_only": true,
            "roles_allowed_to_read":["user","admin"],
            "roles_allowed_to_update":["admin"],
            "roles_allowed_to_delete":[],

Ah, now I understand what's the problem! That feature doesn't exists yet. I'l try to include it in next version.

There is (undocumented) built-in role named "nobody", so use that if you want to restrict access to all roles.

Waiting for the next version then :)
Thanks for the "nobody" hint. I was using a dummy "nodelete" role :)

A dirty fix until next release :)

create a javascript file named 1.js which will override the auto generated publisher (we choose 1.js because of meteor's loading order)

 Meteor.publish("admin_invoices", function() {
    if(!Users.isInRoles(this.userId, ["user","admin"])) return this.ready();
    if(Users.isInRoles(this.userId, ["admin"])){
            return Invoices.find({}, {});
    }
    return Invoices.find({ownerId:this.userId}, {});
 });

add the copy directive to the json file. It should go to "SERVER_DIR/publish/" again because of meteor load order.

"copy_files": [ { "source": "js/1.js", "dest": "SERVER_DIR/publish/1.js" } ]

Meteor will give a warning "Ignoring duplicate publish named 'admin_invoices'" but it will work.

Thanks for dirty fix.
I am thinking about removing "read_owner_only" and "write_owner_only" and adding special role "owner", so to allow admin and owner:
"roles_allowed_to_read": ["admin", "owner"]
What do you think?

Neat solution :)
I guess you'll do the same for delete and update too right?

Yeah, update and delete too.

Perak,
How about a unix like permission system?
"roles_allowed_to_read": ["admin","group", "owner"]
"group" is also a special role like owner.
Let's say we want to implement an invoice software for a company having different departments. Every department may have multiple accountants where each department can see/edit their own invoices and admin should be able to do everything.
To do this each record should have groupid like ownerid and users should belong to some groups. I know it's more complicated than your solution but it's more flexible.
What do you think?

Sounds good. But don't expect it quickly. BTW, I'l upload later today new version, it supports "owner" role (and "read_owner_only", "write_owner_only" is removed).

@kadirerdogan it's online now v0.9.33 see http://www.meteorkitchen.com/getting_started (at the bottom) for more details.
Please close this issue if everything works fine.
Thanks :)

It's still not working. After v0.9.33 generated code is like below. It's still filtering with ownerId.
My setup:
"owner_field": "ownerId",
"roles_allowed_to_read":["admin","owner"],
"roles_allowed_to_update":["admin"],
"roles_allowed_to_delete":["nobody"],
Generated code:
Meteor.publish("invoices", function() {
    if(!Users.isInRoles(this.userId, ["admin"])) return this.ready();
    return Invoices.find({ownerId:this.userId}, {});
});

What it should be:
Meteor.publish("invoices", function() {
    if(!Users.isInRoles(this.userId, ["admin"])) return this.ready();
    return Invoices.find({}, {});
});

Btw, with the new version regular users can't see their own records. So i think generated code should be like below where isInRoles check the special role "owner"
Meteor.publish("invoices", function() {
    if(!Users.isInRoles(this.userId, ["admin","owner"])) return this.ready();
    if(!Users.isInRoles(this.userId, ["admin"]))
        return Invoices.find({ownerId:this.userId}, {});
    return Invoices.find({}, {});
});

Ooops, yes you're right. :( I will fix it in 0.9.34, hopefully in next 24 hours...

OK, v0.9.34 is online. Here is how generated code looks like now:
"roles_allowed_to_read": ["owner"]
Meteor.publish("customers", function() {
	return Customers.find({ ownerId: this.userId }, {});
});

"roles_allowed_to_read": ["admin"]
Meteor.publish("customers", function() {
	if(Users.isInRoles(this.userId, ["admin"])) {
		return Customers.find({}, {});
	}
	return this.ready();
});

"roles_allowed_to_read": ["admin", "owner"]
Meteor.publish("customers", function() {
	if(Users.isInRoles(this.userId, ["admin"])) {
		return Customers.find({}, {});
	}
	return Customers.find({ ownerId: this.userId }, {});
});

Also fixed "roles_allowed_to_update" and "roles_allowed_to_delete" (userCanUpdate and userCanRemove functions).

It seems like it's working :) I am closing this issue. Thanks

authors: kadirerdogan perak

repo: perak/kitchen-site


text:
Handle failures in GracefulMasterTakeover

Related issue: https://github.com/percona/orchestrator/issues/43
Description

If GracefulMasterTakeover fails, reset read_only for master.
Introduce PostUnsuccessfulGracefulTakeoverProcesses to allow running more sophisticated recovery.
Add a related system test.

@kamil-holubicki, could I please ask you to take a look at this PR?

@egegunes, @fabio-silva, @kamil-holubicki, @igroene, could I please ask you for a feedback regarding this PR?

Unfortunately, we do not prioritize feature requests or code submissions with our limited bandwidth for Orchestrator as our focus is on more widely impacting issues that affect the majority of the Percona user base. I understand there are discussions underway between our sales team and your leadership that might allow us to one-day take this on.

Hi @hulyav. Thank you for your response. I’d like to highlight that my team has already fixed this particular bug on our side, and merging the fix to the upstream would benefit the community, since there can be other users that face this issue. Also, it would be nice to merge this pull request sooner rather than later to prevent the codebases divergence.

Hello @hulyav and @kamil-holubicki . It is already 4 month since this PR was created. I have a feeling that it eventually will not be accepted.  To get rid of the uncertainty about this change, should I close this PR and the corresponding issue as rejected?

authors: hulyav o-fedorov

repo: percona/orchestrator


text:
K8SPXC-654 use admin port for liveness/readiness probs

 ❨?❩

start using admin port for liveness/readiness probs
to be able to connect to DB in case of 'Too many connections'
issue

Test name
Status

haproxy
passed

upgrade-haproxy
passed

big-data
failed

recreate
passed

scaling
passed

storage
passed

init-deploy
passed

self-healing
passed

scaling-proxysql
passed

restore-to-encrypted-cluster
passed

security-context
passed

upgrade-proxysql
passed

limits
passed

self-healing-advanced
passed

monitoring-2-0
passed

smart-update
passed

demand-backup
passed

affinity
passed

operator-self-healing
passed

one-pod
passed

auto-tuning
passed

proxysql-sidecar-res-limits
passed

pitr
passed

users
passed

upgrade-consistency
passed

demand-backup-encrypted-with-tls
passed

tls-issue-self
passed

tls-issue-cert-manager
passed

tls-issue-cert-manager-ref
passed

validation-hook
passed

scheduled-backup
failed

in what case cluster check password still used?

That is why it is 'Draft' :) After these changes we can remove clustercheck  user at all.

Test name
Status

scaling
passed

scaling-proxysql
passed

security-context
passed

big-data
failed

storage
passed

self-healing
passed

recreate
passed

self-healing-advanced
passed

restore-to-encrypted-cluster
passed

operator-self-healing
passed

demand-backup
passed

pitr
passed

demand-backup-encrypted-with-tls
passed

haproxy
passed

upgrade-haproxy
passed

scheduled-backup
passed

init-deploy
passed

limits
passed

monitoring-2-0
passed

affinity
passed

one-pod
passed

auto-tuning
passed

proxysql-sidecar-res-limits
passed

users
passed

tls-issue-self
passed

tls-issue-cert-manager
passed

tls-issue-cert-manager-ref
passed

validation-hook
passed

upgrade-proxysql
passed

smart-update
passed

upgrade-consistency
passed

Test name
Status

upgrade-haproxy
passed

scaling
passed

storage
passed

haproxy
passed

big-data
passed

recreate
passed

self-healing
passed

init-deploy
passed

scaling-proxysql
passed

restore-to-encrypted-cluster
passed

security-context
passed

upgrade-proxysql
passed

self-healing-advanced
passed

limits
passed

demand-backup
passed

monitoring-2-0
passed

smart-update
passed

operator-self-healing
passed

affinity
passed

one-pod
passed

auto-tuning
passed

pitr
passed

proxysql-sidecar-res-limits
passed

demand-backup-encrypted-with-tls
passed

users
passed

upgrade-consistency
passed

tls-issue-self
passed

scheduled-backup
failed

tls-issue-cert-manager
passed

tls-issue-cert-manager-ref
passed

validation-hook
passed

Test name
Status

upgrade-haproxy
passed

storage
passed

big-data
passed

scaling
passed

recreate
passed

haproxy
passed

self-healing
passed

scaling-proxysql
passed

init-deploy
passed

upgrade-proxysql
passed

restore-to-encrypted-cluster
passed

security-context
passed

self-healing-advanced
passed

smart-update
passed

limits
passed

demand-backup
passed

operator-self-healing
passed

monitoring-2-0
passed

affinity
passed

one-pod
passed

auto-tuning
passed

proxysql-sidecar-res-limits
passed

upgrade-consistency
passed

pitr
passed

users
passed

demand-backup-encrypted-with-tls
failed

tls-issue-self
passed

tls-issue-cert-manager
failed

Test name
Status

PXC operator docker - perconalab/percona-xtradb-cluster-operator:PR-778-8e3da020

Test name
Status

upgrade-haproxy
passed

big-data
passed

scaling
passed

scaling-proxysql
passed

security-context
passed

recreate
passed

restore-to-encrypted-cluster
passed

demand-backup
passed

pitr
passed

demand-backup-encrypted-with-tls
passed

scheduled-backup
passed

storage
passed

self-healing
passed

self-healing-advanced
passed

operator-self-healing
passed

haproxy
passed

init-deploy
passed

limits
passed

monitoring-2-0
passed

affinity
passed

one-pod
passed

auto-tuning
passed

proxysql-sidecar-res-limits
passed

users
passed

tls-issue-self
passed

tls-issue-cert-manager
passed

tls-issue-cert-manager-ref
passed

validation-hook
passed

upgrade-proxysql
passed

smart-update
passed

upgrade-consistency
passed

@hors it does look like this change breaks the PXC with MySQL 5.7 since that mysql admin used to check the status of the cluster is a MySQL 8 thing.
In my case, the galera-pxc-0 Pod is "Running" but not ready since the readiness probe fails with the error "Can't connect to MySQL".
One way I see to solve this is to make that user, password and port configurable or detecting the target version and conditionally using one or the other.

authors: JNKPercona hors zedtux

repo: percona/percona-xtradb-cluster-operator


text:
All functionality of the screen is not operable through a keyboard (Tab) interface Admin issue

Describe the bug
All the options (User Created Sites and pages, all controls/options under Workflow, Roles, Users and Categories Tab are not operable through a keyboard interface (tab) Admin issue
To Reproduce
Steps to reproduce the behavior:

Go to Admin (http://localhost:9992/cm/app/?view=workflow&site=test3&mode=readonly&name=index.html&path=%2FSites%2Ftest3%2Findex.html&pathType=page)
Click on a site.
See that all the options/controls on the screen, under  Workflow, Roles, Users and Categories  are not accessible using Tab key.

Expected behavior
All page elements should be operable through a keyboard interface (tab).
Additional context
Navigate all the options available for similar issue and fix.

Fixed with https://github.com/percussion/percussioncms/issues/781

repo: percussion/percussioncms


text:
Experiencing timeout error

I am seeing the following timeout after the script has been running for a few mins.
Only some of the available jpegs are being downloaded successfully as are *.md files.
Videos are being downloaded without their file extension although if I download manually through a browser they come with .mp4
I suspect that may be a separate issue from the Timeout.
Can anyone advise a method for increasing or avoiding the timeout?
pi@raspberrypi:~/mitene/mitene_download $ python mitene_download.py https://mitene.us/f/xxxxx
Traceback (most recent call last):
  File "/home/pi/mitene/mitene_download/mitene_download.py", line 147, in <module>
    main()
  File "/home/pi/mitene/mitene_download/mitene_download.py", line 143, in main
    loop.run_until_complete(async_main())
  File "/usr/lib/python3.9/asyncio/base_events.py", line 642, in run_until_complete
    return future.result()
  File "/home/pi/mitene/mitene_download/mitene_download.py", line 137, in async_main
    await gather_with_concurrency(4, *download_coroutines)
  File "/home/pi/mitene/mitene_download/mitene_download.py", line 26, in gather_with_concurrency
    await asyncio.gather(*(sem_task(task) for task in tasks))
  File "/home/pi/mitene/mitene_download/mitene_download.py", line 24, in sem_task
    await task
  File "/home/pi/mitene/mitene_download/mitene_download.py", line 43, in download_media
    async for chunk in r.content.iter_chunked(1024):
  File "/home/pi/.local/lib/python3.9/site-packages/aiohttp/streams.py", line 35, in __anext__
    rv = await self.read_func()
  File "/home/pi/.local/lib/python3.9/site-packages/aiohttp/streams.py", line 385, in read
    await self._wait("read")
  File "/home/pi/.local/lib/python3.9/site-packages/aiohttp/streams.py", line 304, in _wait
    await waiter
  File "/home/pi/.local/lib/python3.9/site-packages/aiohttp/helpers.py", line 721, in __exit__
    raise asyncio.TimeoutError from None
asyncio.exceptions.TimeoutError

Ah yes, there is a problem with videos without extension ( #4 ). I plan to take a look when I have  time.
I did not notice timeout problems, but I see that the library used for HTTP has a timeout of 5 minutes (
https://docs.aiohttp.org/en/stable/client_quickstart.html#aiohttp-client-timeouts ). I guess we can try to increase this, do you want to try #9 ?

Hi Jerome,  many thanks for looking at this. yes, i think that is worth
trying.
James
On Fri, 6 Oct 2023, 15:28 Jérome Perrin, @.***> wrote:

Ah yes, there is a problem with videos without extension ( #4
https://github.com/perrinjerome/mitene_download/issues/4 ). I plan to
take a look when I have time.
I did not notice timeout problems, but I see that the library used for
HTTP has a timeout of 5 minutes (
https://docs.aiohttp.org/en/stable/client_quickstart.html#aiohttp-client-timeouts
). I guess we can try to increase this, do you want to try #9
https://github.com/perrinjerome/mitene_download/pull/9 ?
—
Reply to this email directly, view it on GitHub
https://github.com/perrinjerome/mitene_download/issues/7#issuecomment-1750775898,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AABOIVHAYQRZFI3CMADL76DX6AIPDAVCNFSM6AAAAAA5RXF5XWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTONJQG43TKOBZHA
.
You are receiving this because you authored the thread.Message ID:
@.***>

Thanks, actually I just published a new version on pypi with this fix. Let me know if that was not enough. Thanks a lot for all your comments

authors: jsavage perrinjerome


text:
Try out some new UI build tooling

The randomly failing UI builds have been bothering me, so I decided to try out a few alternative front-end build tools to try and make things better. This makes it so we stop using the (very slow) Typescript compiler except for type-checking (i.e. we no longer use it for transpiling code) and remove the project references. Instead, this has been replaced with:

Turborepo: this is basically a task runner for UI monorepos that is aware of your package structure/dependencies and can then run tasks in the correct order. This means, for example, each package can have its own build script and Turborepo will figure out what order to run them in based on dependencies in the package.json files.
tsup: this compiles our library packages (i.e. everything but app) using esbuild underneath to transform the code. It outputs both ESM and CJS builds in one go, meaning we no longer need a separate build step in CI for it.
esbuild: this is a really fast Typescript compiler writting in Golang. It doesn't do type-checking (or emit type declarations) so we still have to do that separately using the official tsc, but the performance gains are pretty great. I've plugged this into our webpack build and like I mentioned above, it also powers tsup.

I did a few totally unscientific tests on my M1 Mac locally just to see if this is actually any faster.
Dev Server Times
How long does npm run start take before webpack serves the bundle, both for an initial run with no cache, then quitting the initial run and restarting the server with a cache from the first run.

Description
No Cache
Restart with Cache

Old
18s
11s

New
16s
7s

Overall a modest improvement.
Build Times
Basically, how long does npm run build take. Nothing is cached (just like on the CI server).

Description
Build for ESM
Build for CJS
Total

Old
30s
12s
42s

New
18s
0s
18s

Here we can really see the benefits, partly because we can do both ESM and CJS builds in one go now. Hopefully this should help a lot with our CI jobs.
Speed improvements weren't my main goal here, although I suspect the difference will be probably become more pronounced the larger the codebase gets (and the more work tsc would have to do to compile things). Stability was my main goal and trying to prevent some of the flakiness we've been seeing with builds. I'm hoping this will have a positive impact there.
I'd like for us to try this setup out for awhile and see if it's actually a better experience. If there are issues that crop up and we can't fix them, we can always just revert and go back to tsc and project references.
Future Improvement Ideas

See if TurboRepo's remote caching feature is worth enabling. This would allow us to share a remote cache across both dev machines and CI servers.
Investigate vite or parcel as an alternative to using webpack. I don't think we'd get a ton of gain from this yet since most of our code is in packages that are compiled separately, but it might be worth checking into eventually.
See about using something like @swc/jest to speed up Jest test compilation. Our test suites are pretty small right now so it's not super urgent, but this could become a bigger issue soon.

The CI results look promising. Here's a recent run before the change where it looks like the 2 UI build tasks took about 2 minutes total to finish. It looks like it takes about 1 minute now in this PR.

repo: perses/perses


text:
Configure Travis to build treating warnings as errors

This PR addresses #53.
#113 should be merged before this PR. (Edit: merged)

This change is

Coverage decreased (-0.07%) to 86.225% when pulling e07f06ab918ca222714cad41e5286b1f9a83c343 on werror into b658c173eb3470aa67b959b488dd747642742f97 on master.

@mkoval Do we need to add -DTREAT_WARNINGS_AS_ERRORS=ON to here as well?

@mkoval Do we need to add -DTREAT_WARNINGS_AS_ERRORS=ON to here as well?

I don't have a strong opinion either way. If the unit tests currently build without warnings (or it is trivial to make them do so), then I would go ahead and add the flag. Otherwise, it doesn't seem worth the effort.

I'm not familiar with the build process with catkin. My preference is enabling the option for every build for sure hoping that it doesn't require to change the build script a lot. What is the most effective way to do so?

Coverage decreased (-0.07%) to 86.225% when pulling 98e2ad371f6b51fe1379798643efe3ab97c4cd34 on werror into b658c173eb3470aa67b959b488dd747642742f97 on master.

Coverage decreased (-0.07%) to 86.225% when pulling 98e2ad371f6b51fe1379798643efe3ab97c4cd34 on werror into b658c173eb3470aa67b959b488dd747642742f97 on master.

The internal-build.sh script uses the CATKIN_CONFIG_OPTIONS environment variable to populate the default build flags. You could add this to the .travis.yml file:
env:
  global:
  - "CATKIN_CONFIG_OPTIONS=-DCMAKE_BUILD_TYPE=Release -DTREAT_WARNINGS_AS_ERRORS=ON"

I added -DCMAKE_BUILD_TYPE=Release because that is the default if no other flags are specified. This should be overridden (as expected) when we run tests:
./scripts/internal-run.sh catkin build --no-status --no-deps -p 1 -i --cmake-args -DCMAKE_BUILD_TYPE=Debug -DCOVERALLS=ON -- --make-args all tests -- aikido

All the compiler requirements are to ensure that C++ is supported by them. I'll add the comment.

Do you mean C++11? If so, can we put this into a separate that just sets the flags necessary to enable C++11 support?

Hm, this PR has become to have several changes:
(1) Compiler version checking
(2) Adding a compiler flag for enabling C++11
(3) Passing the compiler flag for enabling C++11 to the consumer libraries using target_compiler_options()
(4) Adding a compiler flag for treating warnings as errors

Do you mean C++11? If so, can we put this into a separate that just sets the flags necessary to enable C++11 support?

I think we need both of (1) and (2) because old compilers wouldn't be able to enable C++11 even though we set a flag (e.g., -std=c++11) for it.

You could add this to the .travis.yml file

I'll do this.

This should be overridden (as expected) when we build the tests for Coveralls support:

Are the whole default options are overridden or just options that are specified in both places?

Coverage decreased (-0.07%) to 86.225% when pulling 5823055ba85961c4bb51c9e7949bcf8fbc052a1e on werror into b658c173eb3470aa67b959b488dd747642742f97 on master.

Are the whole default options are overridden or just options that are specified in both places?
View changes

Overriden. The options are merged into one list of command-line arguments that are passed to cmake. If you set -DOPTION=1 using catkin config (i.e. through the CATKIN_CONFIG_OPTIONS environment variable) and pass -DOPTION=2 to catkin build, then cmake is invoked with -DOPTION=1 -DOPTION=2.  CMake uses the last value, so the end result should be equivalent to passing -DOPTION=2.

I think we need both of (1) and (2) because old compilers wouldn't be able to enable C++11 even though we set the flag (e.g., -std=c++11) for it.

I understand that. I am advocating for encapsulating the "check if the compiler supports C++11 and, if so, enable it" logic into a standalone .cmake file that we can easily remove later. Note that CMake 3.1, which we can hopefully switch to soon, adds native support for C++11 by setting:
set(CMAKE_CXX_STANDARD 11)
set(CMAKE_CXX_STANDARD_REQUIRED ON)

Coverage remained the same at 86.225% when pulling 5f2038f6011d34c8181b2d3c8c91c2e0fb4ec7d5 on werror into d5a3730a008ed69897f379b1f64372473d80e445 on master.

Coverage remained the same at 86.225% when pulling 3d91db6c80c10e9989d66a027a4219f93f30fe3a on werror into 941782e68c9c460c50f5a24d0574ae02da84b320 on master.

I'd like to get this merged, but I am concerned that we are adding the flags to each target with PUBLIC visibility.
First, my understanding is that PUBLIC flags will be attached to the EXPORTed targets that are included in the auto-generated aikidoConfig.cmake file. This is troubling because it means that users who link against a version of Aikido that was built with -DTREAT_WARNINGS_AS_ERRORS=ON will inadvertently enable enable -Werror on their own targets.
Second, it adds a lot of boilerplate to Aikido's [already quite verbose] CMakeLists.txt files.
What is the advantage of this over setting CMAKE_CXX_FLAGS inside Aikido's top-level CMakeLists.txt file?

Coverage remained the same at 86.288% when pulling 3acf0c2f403103f766a3abc8f7cdd8678e014eb1 on werror into 67747e1f3cf40791c63ec98a7899160a47ab1608 on master.

The first concern would be fine because this PR doesn't add -DTREAT_WARNINGS_AS_ERRORS=ON but the flag to the Aikido targets that enables building with C++11 (depending on the compilers) so that the consumer project inherently enable C++11.
For the second point, as mentioned above, it passes the compiler options to the consumer projects so that the consumer project doesn't need to figure out what are the required flags such as this.

Coverage remained the same at 86.288% when pulling 3327066ef03cd23c3ecb23eca0e8a35d1ce98841 on werror into 3942ff77f03a48767091fda60afe6386f20b62b2 on master.

Coverage remained the same at 85.391% when pulling e4b49a407b64156909b0bc9d637e1cf9b81fabdd on werror into 963a5d739f9365e107c4ed5fd51b341b66fe4058 on master.

The first concern would be fine because this PR doesn't add -DTREAT_WARNINGS_AS_ERRORS=ON but the flag to the Aikido targets that enables building with C++11 (depending on the compilers) so that the consumer project inherently enable C++11.

It looks like this pull request does add the TREAT_WARNINGS_AS_ERRORS CMake option to Aikido. What am I missing here?
In any case, I am fine with having that option. I am only concerned that the -Werror flag is set as a PUBLIC property on Aikido's targets.

For the second point, as mentioned above, it passes the compiler options to the consumer projects so that the consumer project doesn't need to figure out what are the required flags such as this.

This makes sense for flags that are required for a library to work as expected, e.g. --std=c++11 or -frounding-math. I think it's a bad idea modify compiler warnings and errors for dependent projects, unless doing so is absolutely necessary to #include Aikido's headers. Adding -Werror to a dependency project could break that project's build!

We're adding two flags -Werror and -std=c++11 to Aikido, but only -std=c++11 is added to dependency projects. Please note that -Werror is added using **add**_compile_options() while -std=c++11 is added using **target**_compile_options().

Coverage remained the same at 85.391% when pulling 7b55f33ba744a27785dad49c69e512c45160edf4 on werror into 4cd2795dcf7b90e6b295aaae5e83e244161ab10e on master.

No worries. Thanks!

authors: coveralls jslee02 mkoval

repo: personalrobotics/aikido


text:
set insert_space_before_closing_brace_in_array_initializer as "do not insert" in formatter.xml

https://github.com/personium/personium-core/blob/4f210419aeee7341b6731a13dd6ca16acbdb6bd0/formatter.xml#L250
This rule make {someValue} to {someValue }.
How about set as do not insert

In codes, almost array initialization are written in this style:
{ item0, item1 }

example: https://github.com/personium/personium-core/blob/develop/src/test/java/io/personium/test/io/auth/AuthHistoryLastFileTest.java#L62
So, I think it should be modified with making insert_space_after_opening_brace_in_array_initializer be insert.

repo: personium/personium-core


text:
Bad request on multiple Static file locations

Hello friends,
I have been using sparkjava for a while now and am developing a framework (Elepy using your framework.
The problem that I am running into is that when I have multiple jars with static resources on different Services, I get a Bad Request 400 on all but the first staticfile location. The different Services are hosted on port 80 and 1337 and get instantiated with ignite()
This means that per JVM I can only have one staticfile location? It does recognize that the resource exists, otherwise it would give me a 404 instead.
I looked through the source code and it has something to do with DirectoryTraversalDetection.

Hi @RyanSusana. I'm guessing this is because StaticFilesFolder has static variables:
private static volatile String local;
private static volatile String external;

Are there any plans on changing this or must I resort to multiple JVM's?

Why would it break backwards compatability?

Any change in current behavior is really a change in backwards compatibility. I don't remember what the current behavior is, but based on reading the code it looks like you can do:
val serviceA = ignite().apply { staticFiles.location("/public") }
val serviceB = ignite()

Then do a GET for static files to serviceB . If this is the case, people will have to add staticFiles.location("/public")  to their second service too.
I'll fire up IntelliJ and check.

Ok, so it didn't work without calling staticFiles., so that's good. Also, I found some strange behavior:
Works:
Service serviceA = Service.ignite();
serviceA.port(4001);
serviceA.staticFiles.location("/public/pages");
serviceA.init();

serviceA.awaitInitialization();

Service serviceB = Service.ignite();
serviceB.staticFiles.location("/public");
serviceB.port(4002);
serviceB.init();

Bad request:
Service serviceA = Service.ignite();
serviceA.port(4001);
serviceA.staticFiles.location("/public");
serviceA.init();

serviceA.awaitInitialization();

Service serviceB = Service.ignite();
serviceB.staticFiles.location("/public/pages");
serviceB.port(4002);
serviceB.init();

This can be fixed as a bug then, I can't imagine anyone really relying on this behavior.

Thank you for the help!

Fixed by #1036

authors: RyanSusana perwendel tipsy

repo: perwendel/spark


text:
Not sure what this is, Got it in PHPStorm

Q
A

Bug report?
yes

Plugin version
1.8.3

Pest version
x.y.z

IntelliJ version
PS-232.6095.6

OS
Mac OS X

Description

Stacktrace
java.lang.Throwable: Slow operations are prohibited on EDT. See SlowOperations.assertSlowOperationsAreAllowed javadoc.
java.lang.Throwable: Slow operations are prohibited on EDT. See SlowOperations.assertSlowOperationsAreAllowed javadoc.
	at com.intellij.openapi.diagnostic.Logger.error(Logger.java:367)
	at com.intellij.util.SlowOperations.assertSlowOperationsAreAllowed(SlowOperations.java:129)
	at com.intellij.workspaceModel.core.fileIndex.impl.WorkspaceFileIndexDataImpl.ensureIsUpToDate(WorkspaceFileIndexDataImpl.kt:129)
	at com.intellij.workspaceModel.core.fileIndex.impl.WorkspaceFileIndexDataImpl.getFileInfo(WorkspaceFileIndexDataImpl.kt:75)
	at com.intellij.workspaceModel.core.fileIndex.impl.WorkspaceFileIndexImpl.getFileInfo(WorkspaceFileIndexImpl.kt:220)
	at com.intellij.openapi.roots.impl.ProjectFileIndexImpl.isUnderIgnored(ProjectFileIndexImpl.java:64)
	at com.intellij.openapi.roots.impl.ProjectFileIndexFacade.isUnderIgnored(ProjectFileIndexFacade.java:66)
	at com.intellij.psi.impl.file.impl.FileManagerImpl.isExcludedOrIgnored(FileManagerImpl.java:427)
	at com.intellij.psi.impl.file.impl.FileManagerImpl.findDirectoryImpl(FileManagerImpl.java:413)
	at com.intellij.psi.impl.file.impl.FileManagerImpl.findDirectory(FileManagerImpl.java:405)
	at com.intellij.psi.impl.PsiManagerImpl.findDirectory(PsiManagerImpl.java:171)
	at com.intellij.psi.AbstractFileViewProvider.shouldCreatePsi(AbstractFileViewProvider.java:89)
	at com.intellij.psi.MultiplePsiFilesPerDocumentFileViewProvider.getPsiInner(MultiplePsiFilesPerDocumentFileViewProvider.java:82)
	at com.intellij.psi.AbstractFileViewProvider.getPsi(AbstractFileViewProvider.java:194)
	at com.intellij.psi.impl.file.impl.FileManagerImpl.findFile(FileManagerImpl.java:365)
	at com.intellij.psi.impl.PsiManagerImpl.findFile(PsiManagerImpl.java:158)
	at com.pestphp.pest.features.customExpectations.CustomExpectationStartupActivity.runActivity$lambda-3(CustomExpectationStartupActivity.kt:32)
	at com.intellij.openapi.project.DumbService.runReadActionInSmartMode(DumbService.kt:105)
	at com.pestphp.pest.features.customExpectations.CustomExpectationStartupActivity.runActivity(CustomExpectationStartupActivity.kt:21)
	at com.intellij.ide.startup.impl.StartupManagerImpl.runActivityAndMeasureDuration(StartupManagerImpl.kt:334)
	at com.intellij.ide.startup.impl.StartupManagerImpl.access$runActivityAndMeasureDuration(StartupManagerImpl.kt:70)
	at com.intellij.ide.startup.impl.StartupManagerImpl$runPostStartupActivities$4$3.invoke$lambda$0(StartupManagerImpl.kt:287)
	at com.intellij.openapi.project.SmartModeScheduler.doRun(SmartModeScheduler.kt:131)
	at com.intellij.openapi.project.SmartModeScheduler.runAllWhileSmart(SmartModeScheduler.kt:124)
	at com.intellij.openapi.application.TransactionGuardImpl.runWithWritingAllowed(TransactionGuardImpl.java:209)
	at com.intellij.openapi.application.TransactionGuardImpl.access$100(TransactionGuardImpl.java:21)
	at com.intellij.openapi.application.TransactionGuardImpl$1.run(TransactionGuardImpl.java:191)
	at com.intellij.openapi.application.impl.ApplicationImpl.runIntendedWriteActionOnCurrentThread(ApplicationImpl.java:873)
	at com.intellij.openapi.application.impl.ApplicationImpl$4.run(ApplicationImpl.java:490)
	at com.intellij.openapi.application.impl.FlushQueue.doRun(FlushQueue.java:79)
	at com.intellij.openapi.application.impl.FlushQueue.runNextEvent(FlushQueue.java:122)
	at com.intellij.openapi.application.impl.FlushQueue.flushNow(FlushQueue.java:41)
	at java.desktop/java.awt.event.InvocationEvent.dispatch(InvocationEvent.java:318)
	at java.desktop/java.awt.EventQueue.dispatchEventImpl(EventQueue.java:789)
	at java.desktop/java.awt.EventQueue$3.run(EventQueue.java:740)
	at java.desktop/java.awt.EventQueue$3.run(EventQueue.java:734)
	at java.base/java.security.AccessController.doPrivileged(AccessController.java:399)
	at java.base/java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:86)
	at java.desktop/java.awt.EventQueue.dispatchEvent(EventQueue.java:759)
	at com.intellij.ide.IdeEventQueue.defaultDispatchEvent(IdeEventQueue.kt:664)
	at com.intellij.ide.IdeEventQueue._dispatchEvent$lambda$8(IdeEventQueue.kt:568)
	at com.intellij.openapi.application.impl.ApplicationImpl.withoutImplicitRead(ApplicationImpl.java:1515)
	at com.intellij.ide.IdeEventQueue._dispatchEvent(IdeEventQueue.kt:568)
	at com.intellij.ide.IdeEventQueue.access$_dispatchEvent(IdeEventQueue.kt:68)
	at com.intellij.ide.IdeEventQueue$dispatchEvent$processEventRunnable$1$1$1.compute(IdeEventQueue.kt:348)
	at com.intellij.ide.IdeEventQueue$dispatchEvent$processEventRunnable$1$1$1.compute(IdeEventQueue.kt:347)
	at com.intellij.openapi.progress.impl.CoreProgressManager.computePrioritized(CoreProgressManager.java:791)
	at com.intellij.ide.IdeEventQueue$dispatchEvent$processEventRunnable$1$1.invoke(IdeEventQueue.kt:347)
	at com.intellij.ide.IdeEventQueue$dispatchEvent$processEventRunnable$1$1.invoke(IdeEventQueue.kt:342)
	at com.intellij.ide.IdeEventQueueKt.performActivity$lambda$1(IdeEventQueue.kt:993)
	at com.intellij.openapi.application.TransactionGuardImpl.performActivity(TransactionGuardImpl.java:105)
	at com.intellij.ide.IdeEventQueueKt.performActivity(IdeEventQueue.kt:993)
	at com.intellij.ide.IdeEventQueue.dispatchEvent$lambda$5(IdeEventQueue.kt:342)
	at com.intellij.openapi.application.impl.ApplicationImpl.runIntendedWriteActionOnCurrentThread(ApplicationImpl.java:873)
	at com.intellij.ide.IdeEventQueue.dispatchEvent(IdeEventQueue.kt:384)
	at java.desktop/java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:207)
	at java.desktop/java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:128)
	at java.desktop/java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:117)
	at java.desktop/java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:113)
	at java.desktop/java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:105)
	at java.desktop/java.awt.EventDispatchThread.run(EventDispatchThread.java:92)

I think this has been fixed a long time ago.
Please try updating your plugin.

authors: cAstraea olivernybroe

repo: pestphp/pest-intellij


text:
The Punch Script

Last edit: 07-Nov-2017 19:20 UTC+0
The Kickpunch Script
(Warning! Cheezy content detected. 🧀 )
Characters

Name
Role

Brian Freezby 🏃
Main protagnoist

Gloria Freezby 👧
Brian’s wife

Dido 🐕
Brian and Gloria’s dog

Arkian Joel
Brian’s arch enemy (Game boss)

Bo
A random fighter

Setting
Brian and Gloria are back in their home town for the weekend and are taking a stroll on Shaker St. Suddenly, they are approached by a group of hooligans who block their way forwards. One of them, visibly bigger than the others, steps out of the group. It is Brian’s old school rival - Arkian Joel. Arkian does some smack talk and orders a bunch of hooligans to grab Gloria and Dido. He then orders Bo, a gang member, to fight Brian and the group leaves. Brian faces Bo in a fight and after defeating him continues down on Shaker St. determined to find Arkian and save his wife and dog.
Chapters
Opening Scene (Intro)
TODO
Act 1 - Defeating Bo
Bo, a member of Arkian’s gang is left to deal with Brian. Brian needs to defat Bo and continue his search on Shaker St. The act finishes with Brian defeating Bo.
This act has also a tutorial purpose. The player will be shown the controls to play with, the moves and so on.
Act 2 - Local Drunks
While walking ahead a door on the street opens. Brian faces a group of drunks from the local bar. He needs to defeat them before continuing to the next act.
The group consists of 3 waves.

Wave 1 - Two foes. (Type 1)
Wave 2 - Three foes. (Type 1)
Wave 3 - Five foes. (Type 1)

Act 3 - Fighting The Thiefs’ Guild
TODO
Act 4 - Arkian’s Gang
TODO
Act 5 - The Final Fight
TODO
Finale
Brian, Gloria and Dido are reunited and continue their weekend walk.

I just realized what a poor choice of clothing Brian's got for a weekend walk. 😆

Story's basically a mix of Double Dragon (get your woman back) and River City Ransom (school rival)

I think we should put Bo as Act 2 boss, or in the end of first, and put Local Drunks from Act 2 in the beginning as tutorial punching bags.
One enemy will not be enough to get the grip on controls and mechanics.

We should add an elevator part before final boss

Made a few story adjustments and added opening scene script. What is left is to adjust the attack waves, which we can do while testing the levels and dialogs, which I will leave for the last week depending on how far we are at and if we can have time to include them!


text:
doesn't work in export

an exported project will break because gloot_undo_redo.gd uses EditorUndoRedoManager, which is not available in an exported project.  not including gloot_undo_redo.gd in the project also doesn't work because all the inventories preload it.
can be worked around by replacing those preloads with a load every time it actually gets used, but that seems ugly

Should be fixed now in c085f9323c91792f985223c0b25f172cbfebcb0e. Turned out it was enough to only remove EditorUndoRedoManager from gloot_undo_redo.gd on line 7.
It's probably a better idea to not include anything from addons/gloot/editor in the exports, but this will be enough for a quick fix.

repo: peter-kish/gloot


text:
Background data updates

Hello, I'm a new user of asciimatics and I'm struggling to find documentation on this particular use case.
Maybe there's an enhancement opportunity or you can point me in the right direction.
Use Case:
I'm trying to display tabular data that gets updated in place. For example

Stack
Status

stack1
UPDATING

stack2
ERROR

stack3
FINISHED

In this case, the STATUS column would be updated with the status corresponding to the stack.
The way the status are being checked is with a loop that's querying the stack and updating a data model (maybe this needs to be done on a separate thread?) with the status.
The ultimate goal is to display this data in a nice way, instead of printing a continuous list every time the service is queried.

Hi.  Thanks for getting in touch.  I've had a quick think about this and have a couple of ideas...
First off, the sort of tabular display that you're hoping to create is exactly the sort of thing that I was expecting to be handled by the multi-column list widget in https://github.com/peterbrittain/asciimatics/issues/31.  Sadly that doesn't exist yet.  It shouldn't be too hard to create based on the existing ListBox, but I haven't done that yet and don't know when I'll get the time to do so.  In the meantime, you could try creating the new widget yourself (and I'd happily review any pull request), or approximating it by using the ListBox with some hacked formatting as you populate the data.
As for the updates in the background?  I think the issue that you're going to hit there is that my recent changes to reduce CPU usage mean that Frames don't redraw unless they think they need to do so.  You therefore have to force the refresh when your data changes.  Depending on how architectural you want to be, you could add a new method to Frame (e.g. force_update) that forces it to redraw next time asciimatics polls it for updates, or you could just hack frame_update_count to always return 1 - which will redraw the Frame on every refresh and so dynamically update as your model changes, but at the cost of a load of wasted CPU.  I've probably got time to put the forced refresh in sometime over the next week or so, if that helps...

Just did a little more thinking on the background update...  I don't think my previous suggestion will work as it's actually the Screen that's idling until the time the Effects told it to redraw, so the hack will work, but the force_update needs to go on the Screen class.

OK - I've added the force_update() API to Screen as https://github.com/peterbrittain/asciimatics/commit/46275ad793336c51c1066baf4b2c4aea38a6cfcb.  You should now be able to call this from anywhere in your application when you know your UI needs to be updated.  The only thing you need to do now is decide how you're going to represent your table.

Excellent, thanks for the response!
So, what I have so far to work with is a loop that calls an api every so often and monitors for changes (nothing too fancy yet). When it detects a change, it should run force_update().
AFAIK, when you run the scene, it takes over the main thread of the program, correct?
This means that I will need to have a separate thread that will be running my monitoring loop and it should have access to the screen object in order to call the force_update() function.

If you just use play() it will take over that thread and run a simple scheduling loop.  If you already have your own scheduling loop you can call draw_next_frame() instead every 1/20th of a second - as documented at the end of http://asciimatics.readthedocs.io/en/stable/animation.html#scenes-and-effects

I'm having a hard time using asciimatics, the documentation is not very clear on what the different attributes for the elements are and how they interact with each other.
here is my code so far
from asciimatics.screen import Screen
from asciimatics.scene  import Scene
from asciimatics.widgets import Frame, ListBox, Layout, Widget

import time

screen = Screen.open()

frame = Frame(screen,
              int(screen.height * 2 // 3),
              int(screen.width * 2 // 3),
              has_border=False)

layout = Layout([1])

frame.add_layout(layout)

layout.add_widget(ListBox(1,  [("foo", 1)],  label="test"))

scenes = [
    Scene([ frame ]),
]

screen.set_scenes(scenes)

while True:
    screen.draw_next_frame(repeat=True)
    time.sleep(0.05)

as you can see it's a very simple example that has a ListBox widget which is on a layout with 1 column set on a frame which is on a screen.
I'm using the draw_next_frame method you mentioned on a 1/20th of a second delay.
When running this sample code, I get a list index out of range error in the widgets.py file, and my mouse stops working on the terminal altogether (gibberish pops up when clicking, only solution is to close and reopen it)
I'm not sure what I'm doing wrong.
When I remove the line to add the widget, a blue box appears on screen (the frame, I assume). When I press anything on the keyboard, it spits out a stack trace.
Could you give me some guidance?

All looks pretty good so far...  There are 2 bugs I can see, though.

You need to call frame.fix() before you start displaying it.  This is what allows triggers asciimatics to do the layout calculations.
You should make sure you call Screen.close() to tidyup the terminal on exit.  I suggest you copythe logic in Screen.wrapper() here.

Given that the enhancement is made, I'm going to close.  Please feel free to post a follow-up on the docs if needed...

authors: hectorvs peterbrittain

repo: peterbrittain/asciimatics


text:
IndexError: invalid index to scalar variable.

After start i have error.

nowit says  TypeError: only integer scalar arrays can be converted to a scalar index

Change that line in the code to this (should be around line 95):
ln = [ln[i - 1] for i in net.getUnconnectedOutLayers()]
I got the same error and found the solution in another aimbot tutorial online.

repo: petercunha/Pine


text:
Writer: Unpredictable behaviour when text overlaps bottom edge of screen

When text overlaps the bottom edge of the screen the "black" area extends to the full width of the screen (instead of just behind the text) and items placed before that printstring() call are ignored.
Tested with a Pi Pico talking to an 128x32 SSD1306 monochrome OLED display over I2C
Display: https://www.waveshare.com/wiki/0.91inch_OLED_Module
Using the code below, the picture shows two situations

When second_line_position = 14, the second line just touches the bottom of the screen (32 pixel screen height, font height is 18px: 32 - 18 = 14). This is the output I expected - both lines visible, black area is only behind the text.
When second_line_position = 15, the second line overlaps the bottom of the screen by 1 pixel: this results in the first line disappearing, and the black area behind the text filling the full width of the screen.

Demonstration code:
from machine import Pin, I2C
from writer import Writer

# From https://github.com/micropython/micropython-lib/tree/master/micropython/drivers/display/ssd1306
import ssd1306
# uw-ttyp0, 18 px tall, bold. standard variants, converted from the bcf file.
import uw_ttyp0_18b

# Initialise I2C
i2c = I2C(0, sda=Pin(0), scl=Pin(1))
display = ssd1306.SSD1306_I2C(128, 32, i2c)

# Initialise display and fill with white
wri = Writer(display, uw_ttyp0_18b)
display.fill(1)

# First Line
wri.set_textpos(display, row=0, col=0)
wri.printstring('abcd')

# Second line
second_line_position = 14
wri.set_textpos(display, row=second_line_position, col=0)
wri.printstring('1234')

display.show()

I should have said why I would want the text to overlap the bottom of the screen - with applications that don't need to use descenders - e.g. numbers only, you could fill the screen better with a bigger font.

This is rather a special case. My GUI's adopt the approach of printing a warning if a text object overlaps any edge of the screen. While this wouldn't help with your case, you'll probably see where I'm coming from: overlaps should be detected at the point that a text object is instantiated rather than when a glyph is rendered. Further, the glyphs in a bitmapped font are all the same height, so it's not practicable to detect which glyphs have descenders at runtime. So I don't plan to fix this.
I think your best solution might be to investigate fonts. Are there any number-only fonts that are designed to lack descenders?

authors: peterhinch sandyscott

repo: peterhinch/micropython-font-to-py


text:
Invalid add on repository

Trying to add this through the custom add-on repository in version core-2021.8.5 and get the error "invalid add on repository". Am I missing something?
Using this url https://github.com/petretiandrea/home-assistant-tapo-p100 (the text box in the screenshot doesn't show it all)

Closing as I didn't realise HACS was different repository 🤦


text:
Create Year scalar

You can find example in commit: https://github.com/pets-oss/pets-back/commit/7f0e550ebea14d9312b07262f614b1d8922836ba

AFAIK there are still discussion whether this is needed

Closing it because there seems to be non need for it

authors: AzisK ignasposka

repo: pets-oss/pets-back


text:
using AutoBuild with androidBuild* results in duplicated sourcegenerators (and other things)

for now, workaround by doing
sourceGenerators in Compile <<= (sourceGenerators in Compile) (g => Seq(g.last))
other things get multiply added, but are less of an issue, including:
unmanagedClasspath
managedClasspath
resolvers (for android sdk local repos)
cleanFiles

The same with 0.13.x syntax:
    sourceGenerators in Compile :=Seq((sourceGenerators in Compile).value.last),

1.4.10 changes sourceGenerators so that it properly uses each individual task. This workaround no longer applies. The proper fix is to remove the conjunction of android.AutoBuild and individual androidBuildXXX mechanisms.

AutoBuild is deprecated, not really an issue anymore

authors: DavidPerezIngeniero pfn

repo: pfn/android-sdk-plugin


text:
Restore gradient value when Variable is unPickled

We want to use Chainer in multi-process environment. We have tried to use multiprocessing.Queue to share a model object (chainer.Chain) between processes. However, this strategy didn't work because gradient value was not restored when Variable instance was unPickled.
This pull request wants to fix the problem by keeping gradient values after unPickling Variable.
Please see below for the details.
https://groups.google.com/forum/#!topic/chainer-jp/KneGQWbaPtw

Thank you for the PR.
Could you make a test to check pickled & unpickled Variable has .grad correctly?

We added tests to check pickled & unpickled Variable has .grad correctly.
Please see our modified code.

Thank you.  LGTM :smile:

LGTM

Thank you!

authors: beam2d hitottiez t-abe

repo: pfnet/chainer


text:
Add tilde before numpy.ndarray

In the document, the format of numpy.ndarray is inconsistent.

LGTM!

repo: pfnet/chainercv


text:
Not able to cancel invoice

I m trying to cancel order from magento side , but not able to do it

Dear sunilit42
Please get in touch with info@wallee.com and provide there your space ID and further requested data.
Best regards


text:
Review push notifications settings for iOS

We've received a warning from Apple in our last release:

Dear Developer,
We identified one or more issues with a recent delivery for your app, "Arrival Advisor". Your delivery was successful, but you may wish to correct the following issues in your next delivery:
Missing Push Notification Entitlement - Your app appears to register with the Apple Push Notification service, but the app signature's entitlements do not include the "aps-environment" entitlement. If your app uses the Apple Push Notification service, make sure your App ID is enabled for Push Notification in the Provisioning Portal, and resubmit after signing your app with a Distribution provisioning profile that includes the "aps-environment" entitlement. Xcode does not automatically copy the aps-environment entitlement from provisioning profiles at build time. This behavior is intentional. To use this entitlement, either enable Push Notifications in the project editor's Capabilities pane, or manually add the entitlement to your entitlements file. For more information, see https://developer.apple.com/library/content/documentation/NetworkingInternet/Conceptual/RemoteNotificationsPG/HandlingRemoteNotifications.html#//apple_ref/doc/uid/TP40008194-CH6-SW1.
After you’ve corrected the issues, you can use Xcode or Application Loader to upload a new binary to App Store Connect.
Best regards,
The App Store Team

Basically it looks like we may need to setup push notifications for our App ID in order to appease Expo as it seems they may require it.
ACs:

Find out if Expo does indeed require a push notifications key
If Expo requires one determine if we should set up push notifications for our App ID or if we can just live with the warning

This was fixed when we decided to manage our own profiles. If it pops up again I know how to solve it, closing for now.

repo: pg-irc/pathways-frontend


text:
Failed assemblies are not reported in the final summary

Description of the bug
In the final summary, make it clear when assembly fails.
Command used and terminal output
No response
Relevant files
No response
System information
No response

fixed in #12

repo: phac-nml/mikrokondo


text:
Recurate albuquerque2009.bel

Confidence levels-
High= No changes in the statement
Medium= small changes in the statements
Low= Addition or deletion of line or large changes
I have tried to stay consistent with the above rules throughout the document

@trushaadeshara8 I would suggest you keep low confidence only for statements you don't understand or can't update yourself. Even if its some big changes, medium is enough to signal that someone else should check it over one more time!
Also, please add the re-curation label to all of your PRs that are about that as I did here for you

@cthoyt I will take care from the next paper.

repo: pharmacome/knowledge


text:
859_closing_issues: update git vignette

Thank you for your Pull Request! We have developed this task checklist from the Development Process Guide to help with the final steps of the process. Completing the below tasks helps to ensure our reviewers can maximize their time on your code as well as making sure the admiral codebase remains robust and consistent.
Please check off each taskbox as an acknowledgment that you completed the task or check off that it is not relevant to your Pull Request. This checklist is part of the Github Action workflows and the Pull Request will not be merged into the devel branch until you have checked off each task.

[x] Code is formatted according to the tidyverse style guide
[x] Updated relevant unit tests or have written new unit tests - See Unit Test Guide
[x] If you removed/replaced any function and/or function parameters, did you fully follow the deprecation guidance?
[x] Update to all relevant roxygen headers and examples
[x] Run devtools::documents() so all .Rd files in the man folder and the NAMESPACE file in the project root are updated appropriately
[x] Address any updates needed for vignettes and/or templates
[x] Update NEWS.md
[x] Build admiral site pkgdown::build_site() and check that all affected examples are displayed correctly and that all new functions occur on the "Reference" page.
[x] Address or fix all lintr warnings and errors - lintr::lint_package()
[x] Run R CMD check locally and address all errors and warnings - devtools::check()
[x] Link the issue so that it closes after successful merging.
[x] Address all merge conflicts and resolve appropriately
[x] Pat yourself on the back for a job well done!  Much love to your accomplishment!

Looks good @bundfussr! I look forward to also seeing @bms63's PR checklist updates to this vignette for https://github.com/pharmaverse/admiral/issues/817 which will then complete the guide nicely.

authors: bundfussr rossfarrugia

repo: pharmaverse/admiral


text:
DRAFT: #41 create a basic ADSL for peds test subjects

Thank you for your Pull Request! We have developed this task checklist from the Development Process Guide to help with the final steps of the process. Completing the below tasks helps to ensure our reviewers can maximize their time on your code as well as making sure the admiral codebase remains robust and consistent.
Please check off each taskbox as an acknowledgment that you completed the task or check off that it is not relevant to your Pull Request. This checklist is part of the Github Action workflows and the Pull Request will not be merged into the main branch until you have checked off each task.

[ ] Place Closes #<insert_issue_number> into the beginning of your Pull Request Title (Use Edit button in top-right if you need to update)
[ ] Code is formatted according to the tidyverse style guide. Run styler::style_file() to style R and Rmd files
[ ] Updated relevant unit tests or have written new unit tests, which should consider realistic data scenarios and edge cases, e.g. empty datasets, errors, boundary cases etc. - See Unit Test Guide
[ ] If you removed/replaced any function and/or function parameters, did you fully follow the deprecation guidance?
[ ] Update to all relevant roxygen headers and examples, including keywords and families. Refer to the categorization of functions to tag appropriate keyword/family.
[ ] Run devtools::document() so all .Rd files in the man folder and the NAMESPACE file in the project root are updated appropriately
[ ] Address any updates needed for vignettes and/or templates
[ ] Update NEWS.md under the header # admiralpeds (development version) if the changes pertain to a user-facing function (i.e. it has an @export tag) or documentation aimed at users (rather than developers)
[ ] Build admiralpeds site pkgdown::build_site() and check that all affected examples are displayed correctly and that all new functions occur on the Reference page.
[ ] Address or fix all lintr warnings and errors - lintr::lint_package()
[ ] Run R CMD check locally and address all errors and warnings - devtools::check()
[ ] Link the issue in the Development Section on the right hand side.
[ ] Address all merge conflicts and resolve appropriately
[ ] Pat yourself on the back for a job well done! Much love to your accomplishment!

Need to add the actual adsl_peds.rda dataset to this PR (and update the man/ file) but will only run that once we have https://github.com/pharmaverse/admiralpeds/pull/39 completed so that using the stable input datasets from there.

repo: pharmaverse/admiralpeds


text:
Move default PHPCS standard path into code.

This and #92 can be merged in any order.

I looked into detecting if the PHP package is present as a way of keying activating the tools, and that seems fine. However, the problem with making an implicit default of bin/phpcs is that it's kind of specific to our example composer.json file, and it's something I think is a messy practice for projects that might have custom scripts. Should we remove the composer.json bin-dir setting as part of this?

I'm going to merge this, and we'll follow up on the question of binary/script paths in #102.

authors: arithmetric grayside


text:
ColorMatrix PreFX not working in Firefox on Linux (image goes black)

Version

Phaser Version: 3.87.0 (or lower)

Operating system: Ubuntu, Arch Linux, Steam OS

Browser: Firefox 132.0.2 (or lower)

Description

When using any ColorMatrix PreFX, the image goes completely black (or white, in some cases). I tried Ubuntu, Arch Linux and Steam OS (running on my Steam Deck). Doesn't happen on Android version of Firefox.
Example Test Code

Everything is apparent from this Labs example.
Additional Information
Screenshot from Ubuntu:

This is a known issue that we've resolved in the v4.0.0 renderer. In the meantime, please use PostFX and then upgrade when the time is right.

authors: Baegus photonstorm

repo: phaserjs/phaser


text:
Dev test: Wave Interference 1.0.0-dev.51

@ariel-phet and @KatieWoe, Wave Interference 1.0.0-dev.51 is ready for the first round of dev testing.  This sim has a publication deadline of Jan 31, 2019 but will be great to complete sooner because other sims share the same deadline.  The dev test should focus on searching for buggy or sim breaking behavior.  This is a PhET Brand sim and does not require PhET-iO testing.
Please document issues in https://github.com/phetsims/wave-interference/issues.  Assign issues to @samreid and link them back to this QA issue.
Per @ariel-phet's direction, I'm labeling top priority and assigning to Katie.

General Dev Test

What to Test

Click every single button.
Make sure you can't lose anything.
Play with the sim normally.
Try to break the sim.

Focus and Special Instructions
In addition to the general QA Dev testing, please test crashing conditions on iPad 2.  How long can you use the sim before it crashes?  Does any particular conditions lead to crashing?  Please test multiple trials and report results at https://github.com/phetsims/wave-interference/issues/128. Per @ariel-phet's direction, take a little bit of time exploring this, but not too long.

General Dev Test Platforms

[x] Latest macOS, Chrome and Safari
[x] Latest iOS, Safari
[x] Windows 10, all browsers
[x] Latest Chrome OS, Chrome

Link(s)

Simulation

FAQs for QA Members

There are multiple tests in this issue... Which test should I do first?
Test in order! Test the first thing first, the second thing second, and so on.

How should I format my issue?
Here's a template for making issues:
  Test Device

  blah

  Operating System

  blah

  Browser

  blah

  Problem Description

  blah

  Steps to Reproduce

  blah

  Visuals

  blah

  Troubleshooting Information

  blah

Who should I assign?
We typically assign the developer who opened the issue in the QA repository.

My question isn't in here... What should I do?
You should:

Consult the QA Book.
Google it.
Ask Katie.
Ask a developer.
Google it again.
Cry.

Reopening to double check on https://github.com/phetsims/wave-interference/issues/128#issuecomment-447537364

https://github.com/phetsims/wave-interference/issues/128#issuecomment-447886331

Thanks @KatieWoe, closing.

authors: KatieWoe samreid

repo: phetsims/QA


text:
Add toggle command to open/close the side bars

Currently we have the ability to open and close, Would be good to have a command to toggle the state of the side bar.

Thanks, I serched for everything but the word toggle....


text:
MIME type ('text/html') is not a supported stylesheet MIME type, and strict MIME checking is enabled.

Hallo, ich benutzte Mailman mit Docker in einem Subfolder.
Für die Weiterleitung nutze ich nginx.
Leider erhalte ich beim Aufruf von Mailman die folgende Fehlermeldung:

Refused to apply style from 'https://XXX.XY/mailman/static/css/main.27ff0ba0.css' because its MIME type ('text/html') is not a supported stylesheet MIME type, and strict MIME checking is enabled.

Das Dockerfile wurde mit der Eigenschaft: Subfolder gestartet und wurde auch in der .env bzw. bei NGINX so konfiguriert.

Sieht so aus als würde nginx die index.html auslieferen. Kannst du mal die nginx config hier posten?

`
server {
listen 443 ssl http2;
server_name XXX.YY;
    ssl_certificate /etc/letsencrypt/live/XXX.YY/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/XXX.YY/privkey.pem;
    ssl_trusted_certificate /etc/letsencrypt/live/XXX.YY/chain.pem;

    include snippets/ssl.conf;
    include snippets/letsencrypt.conf;
    include snippets/php-fpm.conf;

    #return 301 https://XXX.YY$request_uri;
    index index.php index.html index.htm index.nginx-debian.html;
    root /var/www/html;

    add_header X-Content-Type-Options nosniff;

location /mailman {
proxy_pass       http://127.0.0.1:4000/;
proxy_set_header Host      $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

}`

Habe exakt dasselbe Problem. Selbst mit der vorgeschlagenen Minimaleinstellung beim nginx.

authors: JohKa phiilu t0rkh

repo: phiilu/mailman


text:
Aliases with NULL for Source-Adress causes Mailman to stop working

In the current Version of the Tutorial of Thomas Leister is decribed that an Catch-All Adress has to be setup by setting the source_username to null.

This is not possible within mailman. So i descided to set the source_username to @ at first. Then u Updates the database rows within the sql shell.
After changing the souce_username to null the mailman stop working.

What worked for me: directly inserting an empty string as the source_username in the database. Mailman will just display this empty string as, well, an empty string so effectively you'll end up with a source address looking like @yourdomain.tld
NOTE: I use this forked version, but iirc nothing with aliases was changed: https://git.fridaysforfutu.re/websiteag/mailman

Thanks for the Comment but in fact this change will make the collect-all addresses unusable. However i've followed your suggestion and fixed the aliases script that postfix now uses an empty-string instead of null as catch-all identifier

authors: SchroeerM karlbeecken


text:
Evaluate Switching to Traefik

Could be interesting to move to Traefik for a few reasons:

Try some new things!
Looks like it's possible to support Plex w/ SSL.

Some implementation examples:

https://www.smarthomebeginner.com/traefik-reverse-proxy-tutorial-for-docker/#Traefik_vs_Nginx_Proxy

Traefik: https://traefik.io/

Here's my version of the docker-compose.yml file with Traefik:
version: '2'

services:
    router:
        image: traefik:tetedemoine-alpine
        container_name: traefik
        restart: always
        network_mode: bridge
        ports:
            - 80:80
            - 443:443
            - 8080:8080
        volumes:
            - /var/run/docker.sock:/var/run/docker.sock
            - ./config/traefik:/etc/traefik
            - ./log/traefik:/var/log/traefik
        labels:
            - "traefik.backend=router"
            - "traefik.port=8080"
            - "traefik.frontend.entryPoints=http,https"
            - "traefik.frontend.rule=Host:router.${DOMAIN}"

    plex:
        container_name: plex
        image: plexinc/pms-docker:${PMSTAG}
        restart: unless-stopped
        network_mode: bridge
        ports:
            - '${IP_ADDRESS}:32400:32400/tcp'
            - '${IP_ADDRESS}:3005:3005/tcp'
            - '${IP_ADDRESS}:8324:8324/tcp'
            - '${IP_ADDRESS}:32469:32469/tcp'
            - '${IP_ADDRESS}:1900:1900/udp'
            - '${IP_ADDRESS}:32410:32410/udp'
            - '${IP_ADDRESS}:32412:32412/udp'
            - '${IP_ADDRESS}:32413:32413/udp'
            - '${IP_ADDRESS}:32414:32414/udp'
        environment:
            - PLEX_CLAIM=${PMSTOKEN}
            - ADVERTISE_IP=http://${IP_ADDRESS}:32400/
            - PLEX_UID=${PUID}
            - PLEX_GID=${PGID}
        hostname: ${HOSTNAME}
        volumes:
            - './plex:/config'
            - './plex/transcode:/transcode'
            - '/home/${LOCALUSER}/media/Media/Media/Movies:/data/movies'
            - '/home/${LOCALUSER}/media/Media/Media/TVShows:/data/tvshows'
            - '/usr/share/zoneinfo/Europe/Paris:/etc/localtime:ro'
        labels:
            - "traefik.backend=plex"
            - "traefik.port=32400"
            - "traefik.frontend.entryPoints=http,https"
            - "traefik.frontend.rule=Host:plex.${DOMAIN}"

    rtorrent:
        image: vaeyo/rtorrent
        container_name: rtorrent
        restart: always
        network_mode: bridge
        volumes:
            - '/home/${LOCALUSER}/media/Media/Torrents:/downloads'
            - './rtorrent/config:/config'
            - './rtorrent/rutorrent/themes/MaterialDesign:/usr/share/webapps/rutorrent/plugins/theme/themes/MaterialDesign'
            - '/usr/share/zoneinfo/Europe/Paris:/etc/localtime:ro'
        environment:
            - PUID=${PUID}
            - PGID=${PGID}
            - TZ=${TZ}
        labels:
            - "traefik.rutorrent.backend=rtorrent-rutorrent"
            - "traefik.rutorrent.port=80"
            - "traefik.rutorrent.frontend.rule=Host:rutorrent.${
            - "traefik.flood.backend=rtorrent-flood"
            - "traefik.flood.port=3000"
            - "traefik.flood.frontend.rule=Host:flood.${DOMAIN}"
            - "traefik.frontend.entryPoints=https"

    sonarr:
        image: linuxserver/sonarr
        container_name: sonarr
        restart: always
        network_mode: bridge
        environment:
            - PUID=${PUID}
            - PGID=${PGID}
            - VIRTUAL_HOST=sonarr.${DOMAIN}
            - LETSENCRYPT_HOST=sonarr.${DOMAIN}
            - LETSENCRYPT_EMAIL=${EMAIL}
        volumes:
            - './sonarr:/config'
            - '/home/${LOCALUSER}/media/Media/Torrents/Completed:/data/Completed'
            - '/home/${LOCALUSER}/media/Media/Media/TVShows:/tv'
            - '/usr/share/zoneinfo/Europe/Paris:/etc/localtime:ro'
        labels:
            - "traefik.backend=sonarr"
            - "traefik.port=8989"
            - "traefik.frontend.entryPoints=http,https"
            - "traefik.frontend.rule=Host:sonarr.${DOMAIN}"

    radarr:
        image: linuxserver/radarr
        container_name: radarr
        restart: always
        network_mode: bridge
        environment:
            - PUID=${PUID}
            - PGID=${PGID}
            - VIRTUAL_HOST=radarr.${DOMAIN}
            - LETSENCRYPT_HOST=radarr.${DOMAIN}
            - LETSENCRYPT_EMAIL=${EMAIL}
        volumes:
            - './radarr:/config'
            - '/home/${LOCALUSER}/media/Media/Torrents/Completed:/data/Completed'
            - '/home/${LOCALUSER}/media/Media/Media/Movies:/movies'
            - '/usr/share/zoneinfo/Europe/Paris:/etc/localtime:ro'
        labels:
            - "traefik.backend=radarr"
            - "traefik.port=7878"
            - "traefik.frontend.entryPoints=http,https"
            - "traefik.frontend.rule=Host:radarr.${DOMAIN}"

    jackett:
        image: linuxserver/jackett
        container_name: jackett
        restart: always
        network_mode: bridge
        environment:
            - PUID=${PUID}
            - PGID=${PGID}
            - VIRTUAL_HOST=jackett.${DOMAIN}
            - LETSENCRYPT_HOST=jackett.${DOMAIN}
            - LETSENCRYPT_EMAIL=${EMAIL}
        volumes:
            - './jackett:/config'
            - '/home/${LOCALUSER}/media/Media/Torrents/Completed:/downloads'
            - '/usr/share/zoneinfo/Europe/Paris:/etc/localtime:ro'
        labels:
            - "traefik.backend=jackett"
            - "traefik.port=9117"
            - "traefik.frontend.entryPoints=http,https"
            - "traefik.frontend.rule=Host:jackett.${DOMAIN}"

    plexpy:
        image: linuxserver/tautulli
        container_name: plexpy
        restart: always
        network_mode: bridge
        environment:
            - PUID=${PUID}
            - PGID=${PGID}
            - VIRTUAL_HOST=plexpy.${DOMAIN}
            - LETSENCRYPT_HOST=plexpy.${DOMAIN}
            - LETSENCRYPT_EMAIL=${EMAIL}
        volumes:
            - './plexpy:/config'
            - './plex/Library/Application Support/Plex Media Server/Logs:/logs:ro'
            - '/usr/share/zoneinfo/Europe/Paris:/etc/localtime:ro'
        depends_on:
            - plex
        labels:
            - "traefik.backend=plexpy"
            - "traefik.port=8181"
            - "traefik.frontend.entryPoints=http,https"
            - "traefik.frontend.rule=Host:plexpy.${DOMAIN}"

    ombi:
        image: linuxserver/ombi
        container_name: ombi
        restart: always
        network_mode: bridge
        environment:
            - PUID=${PUID}
            - PGID=${PGID}
            - VIRTUAL_HOST=request.${DOMAIN}
            - LETSENCRYPT_HOST=request.${DOMAIN}
            - LETSENCRYPT_EMAIL=${EMAIL}
        volumes:
            - './ombi:/config'
            - '/usr/share/zoneinfo/Europe/Paris:/etc/localtime:ro'
        labels:
            - "traefik.backend=ombi"
            - "traefik.port=3579"
            - "traefik.frontend.entryPoints=http,https"
            - "traefik.frontend.rule=Host:ombi.${DOMAIN}"

    portainer:
        image: portainer/portainer:latest
        container_name: portainer
        restart: always
        network_mode: bridge
        environment:
            - PUID=${PUID}
            - PGID=${PGID}
            - VIRTUAL_HOST=portainer.${DOMAIN}
            - LETSENCRYPT_HOST=portainer.${DOMAIN}
            - LETSENCRYPT_EMAIL=${EMAIL}
        volumes:
            - './portainer:/data'
            - '/var/run/docker.sock:/var/run/docker.sock'
            - '/usr/share/zoneinfo/Europe/Paris:/etc/localtime:ro'
        labels:
            - "traefik.backend=portainer"
            - "traefik.port=9000"
            - "traefik.frontend.entryPoints=http,https"
            - "traefik.frontend.rule=Host:portainer.${DOMAIN}"

    watchtower:
        image: v2tec/watchtower
        container_name: watchtower
        restart: always
        network_mode: bridge
        environment:
            - TZ=${TZ}
            - WATCHTOWER_NOTIFICATIONS=email
            - WATCHTOWER_NOTIFICATION_EMAIL_FROM=${SMTP_FROM}
            - WATCHTOWER_NOTIFICATION_EMAIL_TO=${WATCHTOWER_EMAIL}
            - WATCHTOWER_NOTIFICATION_EMAIL_SERVER=${SMTP_SERVER}
            - WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PORT=${SMTP_PORT}
            - WATCHTOWER_NOTIFICATION_EMAIL_SERVER_USER=${SMTP_USER}
            - WATCHTOWER_NOTIFICATION_EMAIL_SERVER_PASSWORD=${SMTP_PASS}
        volumes:
            - '/var/run/docker.sock:/var/run/docker.sock'
            - '/etc/ssl/certs:/etc/ssl/certs'
        command: portainer --schedule @midnight --cleanup

    netdata:
        image: titpetric/netdata
        container_name: netdata
        restart: always
        network_mode: bridge
        environment:
            - PUID=${PUID}
            - PGID=${PGID}
            - VIRTUAL_HOST=netdata.${DOMAIN}
            - LETSENCRYPT_HOST=netdata.${DOMAIN}
            - LETSENCRYPT_EMAIL=${EMAIL}
        volumes:
            - '/proc:/host/proc:ro'
            - '/sys:/host/sys:ro'
            - '/usr/share/zoneinfo/Europe/Paris:/etc/localtime:ro'
            - '/var/run/docker.sock:/var/run/docker.sock'
        labels:
            - "traefik.backend=netdata"
            - "traefik.port=19999"
            - "traefik.frontend.entryPoints=http,https"
            - "traefik.frontend.rule=Host:netdata.${DOMAIN}"

    duplicati:
        image: linuxserver/duplicati
        container_name: duplicati
        restart: always
        network_mode: bridge
        environment:
            - PUID=${PUID}
            - PGID=${PGID}
            - VIRTUAL_HOST=duplicati.${DOMAIN}
            - LETSENCRYPT_HOST=duplicati.${DOMAIN}
            - LETSENCRYPT_EMAIL=${EMAIL}
        volumes:
            - './duplicati:/config'
            - '/home/${LOCALUSER}/media/Media/Media:/media'
            - '/usr/share/zoneinfo/Europe/Paris:/etc/localtime:ro'
        labels:
            - "traefik.backend=duplicati"
            - "traefik.port=8200"
            - "traefik.frontend.entryPoints=http,https"
            - "traefik.frontend.rule=Host:duplicati.${DOMAIN}"

If it could help you ;)

authors: phikai welcoMattic

repo: phikai/htpc-docker-standup


text:
Use plain JS for config file

Why use JSON for it?
You can't even have comments and have to add "" everywhere.

The reason for JSON was just that its easier to read with require and that is a well known format.
I didn't realy think that the "'s were a problem, and don't know why you would need comments.
I'd by happy the integrate some simpler config format, if I were given an alternative.

Right.
Just to be sure, is the sample config missing some keys or you'll add them after implementing everything?

In principle all keys are optional, nsfw for example defaults to false if not specified.

authors: phikal underr


text:
Map IDs to names

The hvac-iot-controller hardware was flashed with an id -> name mapping. This is a difficult place to update though.
Add a way for this project to map the id to a name, potentially overwriting the supplied name.

Closed by #65

repo: philipcristiano/hvac-iot-mqtt-influx


text:
Add django 1.11 support

Will close #83.
Issue is django removed the format_output method from forms.MultiWidget, see https://docs.djangoproject.com/en/1.11/releases/1.11/#changes-due-to-the-introduction-of-template-based-widget-rendering.
I've tried to keep support for both >1.11 and <=1.10 by adding a template_name and get_context to GeopositionWidget but leaving the existing format_output.
It's working on 1.11, have not checked on 1.10 or 1.8.

Thanks @wjdp for this!!
I'm merging this into a django-1.11 branch first in order to change the test settings and include 1.11 before merging into master.

[...] change the test settings and include 1.11 before merging into master.

Done in #86 :)

authors: philippbosch rcotrina94 wjdp

repo: philippbosch/django-geoposition


text:
VISIBILITY_STATE

Hi, thanks for putting the time in to come up with this repo and to blog about it!
I've noticed this little snippet in the example code, but it doesn't seem to be mentioned in the blog.
VISIBILITY_STATE: 'dimension8',

I'm new to implementing ga so i'm not all there with how scope works etc. buy I'm guessing it's hit scope?

Ahh, yeah, looks like I forgot to include that in the post, but it is a custom dimension I track (and yes,  it's hit scoped).
Basically this will tell you things like whether or not a user opened the page in a hidden tab (e.g. by command clicking or something similar).
https://developer.mozilla.org/en-US/docs/Web/API/Page_Visibility_API
When I have a chance I'll add some info about it (and all the custom dimensions) to the README.

authors: peter-mouland philipwalton

repo: philipwalton/analyticsjs-boilerplate

license: ISC


text:
sorting of Process.filter(....)

I have a process filter which should return 2 processes.
I would like to be able to sort the list that is returned so I can test based on the process. ps provide the --sort option, i.e. --sort user or --sort args or --sort pid. Is there such a thing with the Process command?

I guess one solution could be http://stackoverflow.com/questions/403421/how-to-sort-a-list-of-objects-in-python-based-on-an-attribute-of-the-objects ...

repo: philpep/testinfra


text:
test workflow all

test

to do


text:
Get scope completions from existing git history?

Yo,
Instead of the settings.json approach, how about parsing existing commit history for the scope completions? I mean, the scopes are there, I just can never remember them, and adding them to settings is a bit of work.
Also, it would be nice if using the command palette opened the commit editor in the same project as the active file, in multi root projects.

Thank you for the suggestion.
I'll add the two suggestions you suggested to the backlog.

authors: losnappas phoihos


text:
Add --host param to phonegap remote

This is mostly selfish at the moment so that we at PhoneGap Build can push to a test server -- however if alternatives to PGB pop up one day (if we were to say open source Build), then this would become useful. I'll try to get some time to do this myself if y'all can't get to it, but tracking here for now.

I think this is totally reasonable. Most of the underlining architecture is abstracted to support other end-points, so I'll look into adding this.
@wildabeast any particular deadline?

Published phonegap@5.5.0 with this feature.
I wasn't able to test it on a separate end-point, so let me know if you run into any issues.
All of the remote commands now have --protocol, --host, --port, --path, and --proxy exposed.
For example:
$ phonegap remote login --help

Usage: phonegap remote login [options]

Description:

  Log into your PhoneGap/Build account.

Options:

  -u, --username       your username (email address)
  -p, --password       your password
  --protocol           server protocol (default: 'https:')
  --host               server host (default: 'build.phonegap.com')
  --port               server port (default: '443')
  --path               server path prefix (default: '/api/v1')
  --proxy              proxy server to route requests

phonegap@5.5.0 made the following changes https://github.com/phonegap/phonegap-cli/compare/5.4.1+cordova.5.4.1...5.5.0+cordova.5.4.1
phonegap-build@0.10.0 made the following changes https://github.com/phonegap/node-phonegap-build/compare/0.9.2...0.10.0
phonegap-build-api@0.4.0 made the following changes https://github.com/phonegap/node-phonegap-build-api/compare/0.3.3...0.4.0

authors: mwbrooks wildabeast

repo: phonegap/phonegap-cli


text:
Not able to get new registerid for Android

Expected Behaviour
get the new registerid when listening to pushNotification.on('registration')
Actual Behaviour
seem like android os has changed the device id on some phone so when retrieving the registerid I get the old registerid.  I would have to delete my app and re-install it to retrieve the new registerid.
Reproduce Scenario (including but not limited to)
Hard to reproduce.  When trying the retrieve the registerid on the app loads the plugin returns the old registerid so push notification does not work anymore.  I would have to delete the app and reinstall then open the app to get the new registerid.
Steps to Reproduce
Platform and Version (eg. Android 5.0 or iOS 9.2.1)
Android
(Android) What device vendor (e.g. Samsung, HTC, Sony...)
Samsung
Cordova CLI version and cordova platform version
cordova --version                                    # 6.1.2
cordova platform version android                     # 6 and above

Plugin version
cordova plugin version | grep phonegap-plugin-push   # e.g. 1.5.3

Sample Push Data Payload
Sample Code that illustrates the problem
Logs taken while reproducing problem

@tigergroup can you modify the issue to fill in the missing information?

authors: macdonst tigergroup

repo: phonegap/phonegap-plugin-push


text:
Currency icon - Kazakhstan tenge

Describe the requested icon
Currency icon - Kazakhstan tenge
Screenshots

Additional context
Wikipedia.

Added currency-kzt in v1.4.0!

authors: YerlenZhubangaliyev rektdeckard

repo: phosphor-icons/phosphor-home