jiebi/CodeConvo huggingface dataset:
Code change:
}; <del> config = with cfg; let secretsFile = ipsecSecrets cfg.secrets; in mkIf enable </del> <ins> config = with cfg; mkIf enable </ins> { # here we should use the default strongswan ipsec.secrets and # append to it (default one is empty so not a pb for now) <del> environment.etc."ipsec.secrets".source = secretsFile; </del> <ins> environment.etc."ipsec.secrets".text = ipsecSecrets cfg.secrets; </ins> systemd.services.strongswan = { description = "strongSwan IPSec Service";

Related discussion:
text: Phew, a big title! Trying to write down as much as I can before I forget. First, the last part: If doesn't exist, will show failing like: fixes this problem. NixOS should probably create this file. I'm not sure if this file should be writable or not, when it exists, I have only ever seen it contain: I don't know what writes that there. Now for can't edit L2TP VPNs, but (GUI) can, even though nm-applet doesn't work under sway. If you see this in the system logs: try enabling "legacy proposals" in nm-connection-editor's IPSec Settings and try again. system: host os: multi-user?: sandbox: version: channels(root): channels(grahamc): nixpkgs:
Side note, how do I know for sure fixes it? I erased my dozens of times nailing it down, reproducing it to exactly this.
I think the strongswan module creates that file and the actual L2TP plugin appends that line to this file.
Nice find that the strongswan module does create that file! I don't have the strongswan module enabled, it seems something else in the stack would periodically create this file?
I'm not sure what does create it eventually, but it appears the plugin expects the file to exist so we should just do exactly that. It doesn't help that it expects it to be mutable, so maybe we can handle this within the NM module to add more secrets. Though it would probably duplicate what the strongswan module does.
^ does this make sense to you?
So I just remembered about this module I have: maybe instead we should have the networkmanager do when it detects the l2tp plugin but I am not sure how to do that. Maybe we would need to introduce a new option in networkmanager to add the nm-l2tp plugin and create the file. I tend to connect physically to the private network and only as a last resort rely to nm-l2tp since it tends to not work regularly and I am not sure if it's blocked by the network or some l2tp breakage.
Code change:
}; <del> config = with cfg; let secretsFile = ipsecSecrets cfg.secrets; in mkIf enable </del> <ins> config = with cfg; mkIf enable </ins> { # here we should use the default strongswan ipsec.secrets and # append to it (default one is empty so not a pb for now) <del> environment.etc."ipsec.secrets".source = secretsFile; </del> <ins> environment.etc."ipsec.secrets".text = ipsecSecrets cfg.secrets; </ins> systemd.services.strongswan = { description = "strongSwan IPSec Service";

Related discussion:
text: We could add an option to networkmanager in the same way there's one for strongswan there
Was there ever any follow up on :
Hello, I'm a bot and I thank you in the name of the community for opening this issue. To help our human contributors focus on the most-relevant reports, I check up on old issues to see if they're still relevant. This issue has had no activity for 180 days, and so I marked it as stale, but you can rest assured it will never be closed by a non-human. The community would appreciate your effort in checking if the issue is still valid. If it isn't, please close it. If the issue persists, and you'd like to remove the stale label, you simply need to leave a comment. Your comment can be as simple as "still important to me". If you'd like it to get more attention, you can ask for help by searching for maintainers and people that previously touched related code and @ mention them in a comment. You can use or on the relevant files to find them. Lastly, you can always ask for help at or at .
i guess, it's still relevant, maybe not so urgent. this helped me big time:
I marked this as stale due to inactivity. &rarr;
I just ran into this on 21.05. Seeing a log like this: <details<summaryjournalctl log when starting vpn</summary<pre<codecharon[2059]: 00[CFG] loading ca certificates from '/nix/store/va01sq5aqg6p7yakvpg2zlnsdj4pm9dj-strongswan-5.8.1/etc/ipsec.d/cacerts' charon[2059]: 00[CFG] loading aa certificates from '/nix/store/va01sq5aqg6p7yakvpg2zlnsdj4pm9dj-strongswan-5.8.1/etc/ipsec.d/aacerts' charon[2059]: 00[CFG] loading ocsp signer certificates from '/nix/store/va01sq5aqg6p7yakvpg2zlnsdj4pm9dj-strongswan-5.8.1/etc/ipsec.
Code change:
}; <del> config = with cfg; let secretsFile = ipsecSecrets cfg.secrets; in mkIf enable </del> <ins> config = with cfg; mkIf enable </ins> { # here we should use the default strongswan ipsec.secrets and # append to it (default one is empty so not a pb for now) <del> environment.etc."ipsec.secrets".source = secretsFile; </del> <ins> environment.etc."ipsec.secrets".text = ipsecSecrets cfg.secrets; </ins> systemd.services.strongswan = { description = "strongSwan IPSec Service";

Related discussion:
text: d/ocspcerts' charon[2059]: 00[CFG] loading attribute certificates from '/nix/store/va01sq5aqg6p7yakvpg2zlnsdj4pm9dj-strongswan-5.8.1/etc/ipsec.d/acerts' charon[2059]: 00[CFG] loading crls from '/nix/store/va01sq5aqg6p7yakvpg2zlnsdj4pm9dj-strongswan-5.8.1/etc/ipsec.d/crls' charon[2059]: 00[CFG] loading secrets from '/nix/store/va01sq5aqg6p7yakvpg2zlnsdj4pm9dj-strongswan-5.8.1/etc/ipsec.secrets' charon[2059]: 00[CFG] expanding file expression '/etc/ipsec.secrets' failed charon[2059]: 00[CFG] opening triplet file /nix/store/va01sq5aqg6p7yakvpg2zlnsdj4pm9dj-strongswan- failed: No such file or directory charon[2059]: 00[CFG] loaded 0 RADIUS server configurations charon[2059]: 00[CFG] no script for ext-auth script defined,
Code change:
}; <del> config = with cfg; let secretsFile = ipsecSecrets cfg.secrets; in mkIf enable </del> <ins> config = with cfg; mkIf enable </ins> { # here we should use the default strongswan ipsec.secrets and # append to it (default one is empty so not a pb for now) <del> environment.etc."ipsec.secrets".source = secretsFile; </del> <ins> environment.etc."ipsec.secrets".text = ipsecSecrets cfg.secrets; </ins> systemd.services.strongswan = { description = "strongSwan IPSec Service";

Related discussion:
text: disabled charon[2059]: 00[LIB] loaded plugins: charon unbound pkcs11 aesni aes des rc2 sha2 sha1 md5 mgf1 rdrand random nonce x509 revocation constraints acert pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey dnscert pem openssl af-alg fips-prf gmp curve25519 chapoly xcbc cmac hmac curl attr kernel-netlink resolve socket-default connmark forecast farp stroke vici updown eap-identity eap-sim eap-sim-pcsc eap-aka eap-aka-3gpp2 eap-simaka-pseudonym eap-simaka-reauth eap-md5 eap-gtc eap-mschapv2 eap-radius xauth-generic xauth-eap xauth-pam dhcp counters charon[2059]: 00[JOB] spawning 16 worker threads ipsecstarter[2058]: charon (2059) started after 660 ms charon[2059]: 11[CFG] received stroke: add connection '-ebef-4658-8991-' charon[2059]: 11[CFG] configuration '-ebef-4658-8991-' charon[2059]: 13[CFG] rereading secrets charon[2059]: 13[CFG] loading secrets from '/nix/store/va01sq5aqg6p7yakvpg2zlnsdj4pm9dj-strongswan-5.8.1/etc/ipsec.secrets' charon[2059]: 13[CFG] expanding file expression '/etc/ipsec.secrets' failed charon[2059]: 14[CFG] received stroke: initiate '-ebef-4658-8991-' charon[2059]: 15[IKE] initiating Main Mode IKESA -ebef-4658-8991-[1] to 123.111.111.111 charon[2059]: 15[IKE] initiating Main Mode IKESA -ebef-4658-8991-[1] to 123.111.111.
Code change:
}; <del> config = with cfg; let secretsFile = ipsecSecrets cfg.secrets; in mkIf enable </del> <ins> config = with cfg; mkIf enable </ins> { # here we should use the default strongswan ipsec.secrets and # append to it (default one is empty so not a pb for now) <del> environment.etc."ipsec.secrets".source = secretsFile; </del> <ins> environment.etc."ipsec.secrets".text = ipsecSecrets cfg.secrets; </ins> systemd.services.strongswan = { description = "strongSwan IPSec Service";

Related discussion:
text: 111 charon[2059]: 15[ENC] generating IDPROT request 0 [ SA V V V V V ] charon[2059]: 15[NET] sending packet: from 192.168.1.11[500] to 123.111.111.111[500] (304 bytes) charon[2059]: 03[NET] received packet: from 123.111.111.111[500] to 192.168.1.11[500] (204 bytes) charon[2059]: 03[ENC] parsed IDPROT response 0 [ SA V V V V V V ] charon[2059]: 03[IKE] received NAT-T (RFC 3947) vendor ID charon[2059]: 03[IKE] received draft-ietf-ipsec-nat-t-ike-03 vendor ID charon[2059]: 03[IKE] received draft-ietf-ipsec-nat-t-ike-02n vendor ID charon[2059]: 03[IKE] received draft-ietf-ipsec-nat-t-ike-02 vendor ID charon[2059]: 03[IKE] received draft-ietf-ipsec-nat-t-ike-00 vendor ID charon[2059]: 03[IKE] received DPD vendor ID charon[2059]: 03[CFG] selected proposal: IKE:AESCBC128/HMACSHA196/PRFHMACSHA1/MODP2048 charon[2059]: 03[ENC] generating IDPROT request 0 [ KE No NAT-D NAT-D ] charon[2059]: 03[NET] sending packet: from 192.168.1.11[500] to 123.111.111.111[500] (372 bytes) charon[2059]: 04[NET] received packet: from 123.111.111.111[500] to 192.168.1.11[500] (356 bytes) charon[2059]: 04[ENC] parsed IDPROT response 0 [ KE No NAT-D NAT-D ] charon[2059]: 04[IKE] no shared key found for 192.168.1.11 - 123.111.111.
Code change:
}; <del> config = with cfg; let secretsFile = ipsecSecrets cfg.secrets; in mkIf enable </del> <ins> config = with cfg; mkIf enable </ins> { # here we should use the default strongswan ipsec.secrets and # append to it (default one is empty so not a pb for now) <del> environment.etc."ipsec.secrets".source = secretsFile; </del> <ins> environment.etc."ipsec.secrets".text = ipsecSecrets cfg.secrets; </ins> systemd.services.strongswan = { description = "strongSwan IPSec Service";

Related discussion:
text: 111 charon[2059]: 04[ENC] generating INFORMATIONALV1 request [ N(INVALKE) ] charon[2059]: 04[NET] sending packet: from 192.168.1.11[500] to 123.111.111.111[500] (56 bytes) NetworkManager[2277]: initiating Main Mode IKESA -ebef-4658-8991-[1] to 123.111.111.111 NetworkManager[2277]: generating IDPROT request 0 [ SA V V V V V ] NetworkManager[2277]: sending packet: from 192.168.1.11[500] to 123.111.111.111[500] (304 bytes) NetworkManager[2277]: received packet: from 123.111.111.111[500] to 192.168.1.11[500] (204 bytes) NetworkManager[2277]: parsed IDPROT response 0 [ SA V V V V V V ] NetworkManager[2277]: received NAT-T (RFC 3947) vendor ID NetworkManager[2277]: received draft-ietf-ipsec-nat-t-ike-03 vendor ID NetworkManager[2277]: received draft-ietf-ipsec-nat-t-ike-02n vendor ID NetworkManager[2277]: received draft-ietf-ipsec-nat-t-ike-02 vendor ID NetworkManager[2277]: received draft-ietf-ipsec-nat-t-ike-00 vendor ID NetworkManager[2277]: received DPD vendor ID NetworkManager[2277]: selected proposal: IKE:AESCBC128/HMACSHA196/PRFHMACSHA1/MODP2048 NetworkManager[2277]: generating IDPROT request 0 [ KE No NAT-D NAT-D ] NetworkManager[2277]: sending packet: from 192.168.1.11[500] to 123.111.111.111[500] (372 bytes) NetworkManager[2277]: received packet: from 123.111.111.111[500] to 192.168.1.11[500] (356 bytes) NetworkManager[2277]: parsed IDPROT response 0 [ KE No NAT-D NAT-D ] NetworkManager[2277]: no shared key found for 192.168.1.11 - 123.111.111.
Code change:
}; <del> config = with cfg; let secretsFile = ipsecSecrets cfg.secrets; in mkIf enable </del> <ins> config = with cfg; mkIf enable </ins> { # here we should use the default strongswan ipsec.secrets and # append to it (default one is empty so not a pb for now) <del> environment.etc."ipsec.secrets".source = secretsFile; </del> <ins> environment.etc."ipsec.secrets".text = ipsecSecrets cfg.secrets; </ins> systemd.services.strongswan = { description = "strongSwan IPSec Service";

Related discussion:
text: 111 NetworkManager[2277]: generating INFORMATIONALV1 request [ N(INVALKE) ] NetworkManager[2277]: sending packet: from 192.168.1.11[500] to 123.111.111.111[500] (56 bytes) NetworkManager[2277]: establishing connection '-ebef-4658-8991-' failed NetworkManager[2283]: Stopping strongSwan IPsec. charon[2059]: 00[DMN] signal of type SIGINT received. Shutting down ipsecstarter[2058]: child 2059 (charon) has quit (exit code 0) ipsecstarter[2058]: ipsecstarter[2058]: charon stopped after 200 ms ipsecstarter[2058]: ipsec starter stopped nm-l2tp-service[2039]: gdbusmethodinvocationtake_error: assertion 'error != NULL' failed NetworkManager[954]: <warn[.6803] vpn-connection[0x24c60a0,-ebef-4658-8991-,"my-l2tp-vpn",0]: VPN connection: failed to connect: 'Message recipient disconnected from message bus without replying' .nm-applet-wrap[1470]: Failed to show notification: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.Notifications was not provided by any .service files </pre</code</detailsRunning the following command fixed my error and allowed me to connect: The networking part of my only has .
This still appears relevant in 21.11. Adding this (as mentioned above) to my config appears to get an L2TP and IPSec VPN working with NetworkManager:
Still relevant in 22.05. I am confirming that with a clean install, trying to set up L2TP/IPsec VPNs fail with the following indicator: fixed the issue for me straight away as well.
Fix in
Code change:
<ins> From a642ad542e3d3f34e949c5c66923ca8a6e6cbbd8 Mon Sep 17 00:00:00 2001 From: Stig Palmquist <stig@stig.io> Date: Tue, 11 Jan 2022 13:23:13 +0100 Subject: [PATCH] test: fix support for gpgsm in gnupg 2.3 gpgsm --list-keys output changed the label for fingerprints from "fingerprint: " to "sha[12] fpr: " breaking tests with gnupg 2.3. this adds support for both. --- test/test-lib.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/test/test-lib.sh b/test/test-lib.sh index 6bc0b723..3de608f9 100644 --- a/test/test-lib.sh +++ b/test/test-lib.sh @@ -145,7 +145,7 @@ add_gpgsm_home () { mkdir -p -m 0700 "$GNUPGHOME" gpgsm --batch --no-tty --no-common-certs-import --pinentry-mode=loopback --passphrase-fd 3  --disable-dirmngr --import  >"$GNUPGHOME"/import.log 2>&1 3<<<'' <$NOTMUCH_SRCDIR/test/smime/0xE0972A47.p12 -    fpr=$(gpgsm --batch --list-key test_suite@notmuchmail.org | sed -n 's/.*fingerprint: //p') +    fpr=$(gpgsm --batch --list-key test_suite@notmuchmail.org | sed -n 's/.*(fingerprint|sha1 fpr): //p') echo "$fpr S relax" >> "$GNUPGHOME/trustlist.txt" gpgsm --quiet --batch --no-tty --no-common-certs-import --disable-dirmngr --import < $NOTMUCH_SRCDIR/test/smime/ca.crt echo "4D:E0:FF:63:C0:E9:EC:01:29:11:C8:7A:EE:DA:3A:9A:7F:6E:C1:0D S" >> "$GNUPGHOME/trustlist.txt" -- 2.34.1 </ins>

Related discussion:
text: The build is failing on master; it has been reproduced at . An example of the failure is below: There is a new release () which also doesn't pass, so I didn't send the PR as it'd fail on CI. Steps to reproduce the behavior:
Those aren't the failing tests (BROKEN means they are known to fail). These are the real failures: Looks like a broken test directory setup in the build environment.
fixed in the next point release I think
prior work
Code change:
machine.succeed("curl -sSI http://localhost/api/tasks 2>&1 | grep '401 Unauthorized'") <ins> file_name = "test.txt" file_name_base64 = b64encode(file_name.encode('ascii')).decode('ascii') file_name_base64_urlencode = quote(file_name_base64) machine.succeed( f"echo Sample equipment manual > /tmp/{file_name}" ) machine.succeed( f"curl -sSf -X 'PUT' -b 'grocy_session={cookie}' " + f" 'http://localhost/api/files/equipmentmanuals/{file_name_base64_urlencode}' " + "  --header 'Accept: */*' " + "  --header 'Content-Type: application/octet-stream' " + f" --data-binary '@/tmp/{file_name}' " ) machine.succeed( f"curl -sSf -X 'GET' -b 'grocy_session={cookie}' " + f" 'http://localhost/api/files/equipmentmanuals/{file_name_base64_urlencode}' " + "  --header 'Accept: application/octet-stream' " + f" | cmp /tmp/{file_name}" ) </ins> machine.shutdown() ''; })

Related discussion:
text: Grocy does not properly save manuals for equipment The issue appears to be introduced by in a patch applied by nixpkgs. Changing that hunk to: Fixes the issue. I'm not currently setup for making a PR, I'm a bit busy, but I wanted an issue for other people to find if they run into the problem. grocy in nixos configuration (admin/admin is default) a new piece of equipment and attach a PDF manual to it to download manual; it will fail system: host os: multi-user?: sandbox: version: channels(aidenn): channels(root): nixpkgs:
appears to be the maintainer.
I marked this as stale due to inactivity. &rarr;
Code change:
<ins> --- a/resources/pulsar.sh	2023-03-16 04:11:14.000000000 +0100 +++ b/resources/pulsar.sh	2023-03-24 14:37:13.468813964 +0100 @@ -123,7 +123,7 @@ elif [ $OS == 'Linux' ]; then SCRIPT=$(readlink -f "$0") -  PULSAR_PATH="/opt/Pulsar/pulsar" +  # PULSAR_PATH is set-up via `wrapProgram` in the postFixup phase #Set tmpdir only if tmpdir is unset : ${TMPDIR:=/tmp} </ins>

Related discussion:
text: Package name: pulsar Latest released version: 1.117.0 Current version on the unstable channel: 1.114.0 Current version on the stable/release channel: 1.117.0 Notify maintainers
Code change:
inherit fontforge; }; <ins> lmmath = callPackage ../data/fonts/lmodern/lmmath.nix {}; </ins> lmodern = callPackage ../data/fonts/lmodern { }; manpages = callPackage ../data/documentation/man-pages { };

Related discussion:
text: Describe the bug Thunderbird 78.2.1 is working. master (Thunderbird 78.2.2) has rendering issues (see screenshot). Most buttons do not react to clicks and the menu is also not reacting. To Reproduce Switch to the mentioned commit and rebuild. Expected behavior Normally working thunderbird. Screenshots ! Notify maintainers Metadata
This was also a bug in Ubuntu, it was fixed there with:
Upstream bug appears to be
Btw temporary workaround would be to switch to thunderbird-bin-78 if you are not opposed to binaries
Code change:
inherit fontforge; }; <ins> lmmath = callPackage ../data/fonts/lmodern/lmmath.nix {}; </ins> lmodern = callPackage ../data/fonts/lmodern { }; manpages = callPackage ../data/documentation/man-pages { };

Related discussion:
text: Steps to reproduce the behavior: Add any other context about the problem here. <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
might be fixed by confirmed. closing.
Hello. I'm new to NixOS, and also facing this problem: How can I apply that fix? I just updated my NixOS system flake to latest version: But still getting error during system rebuild:
try and update again, the fix is in unstable now.
Code change:
headsetcontrol = callPackage ../tools/audio/headsetcontrol { }; <ins> httm = callPackage ../tools/filesystems/httm { }; </ins> ksnip = libsForQt5.callPackage ../tools/misc/ksnip { }; license-generator = callPackage ../tools/misc/license-generator { };

Related discussion:
text: Project description httm prints the size, date and corresponding locations of available unique versions (deduplicated by modify time and size) of files residing on ZFS snapshots, but can also be used interactively to view and restore such files. httm might change the way you use ZFS snapshots (because ZFS isn't designed for finding for unique file versions) or the Time Machine concept (because httm is very fast!). Metadata homepage URL: source URL: license: Mozilla Public License 2.0 platforms: unix, linux, darwin
Oh great thanks! Searched first but missed this.
Code change:
<ins> diff --git a/bin/nexus b/bin/nexus index d06cb44..37c606e 100755 --- a/bin/nexus +++ b/bin/nexus @@ -88,7 +88,7 @@ create_db_entry() { fi db_new_file=${db_file}_new if [ -f "$db_file" ]; then -    awk '$2 != "'"$test_dir"'" {print $0}' $db_file > $db_new_file +    awk '$2 != "'"$test_dir"'" {print $scriptname}' $db_file > $db_new_file rm "$db_file" mv "$db_new_file" "$db_file" fi @@ -246,7 +246,7 @@ read_vmoptions() { unpack_file() { if [ -f "$1" ]; then -    jar_file=`echo "$1" | awk '{ print substr($0,1,length-5) }'` +    jar_file=`echo "$1" | awk '{ print substr($scriptname,1,length-5) }'` bin/unpack200 -r "$1" "$jar_file" if [ $? -ne 0 ]; then @@ -377,9 +377,14 @@ fi old_pwd=`pwd` -progname=`basename "$0"` -linkdir=`dirname "$0"` +scriptname=$0 +if [ ! -z "$ALTERNATIVE_NAME" ]; then +  scriptname=`dirname "$0"`"/"$ALTERNATIVE_NAME +fi + +progname=`basename "$scriptname"` +linkdir=`dirname "$scriptname"` cd "$linkdir" prg="$progname" @@ -590,7 +595,7 @@ return_code=$? ;; *) -        echo "Usage: $0 {start|stop|run|run-redirect|status|restart|force-reload}" +        echo "Usage: $scriptname {start|stop|run|run-redirect|status|restart|force-reload}" exit 1 ;; esac </ins>

Related discussion:
text: Package name: nexus Latest released version: 3.69.0 <!-- Search your package here: --- Current version on the unstable channel: 3.68.1-02 Current version on the stable/release channel: 3.68.1-02 <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- Notify maintainers <!-- If the result shows no maintainers, tag the person that last updated the package. --Note for maintainers: Please tag this issue in your PR. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Code change:
libgeos_c = GEOS_LIBRARY_PATH; libc = lib.optionalString (!stdenv.isDarwin) "${stdenv.cc.libc}/lib/libc${stdenv.hostPlatform.extensions.sharedLibrary}.6"; }) <del> (fetchpatch { name = "fix-tests-geos-3.11.patch"; url = "https://github.com/shapely/shapely/commit/21c8e8a7909e7fb3cce6daa5c5b8284ac927fcb0.patch"; includes = [ "tests/test_parallel_offset.py" ]; sha256 = "sha256-85c8NlmAzzfCgepe/411ug5Sq+665dFMb3ySaUt9Kew="; }) </del> ]; preCheck = '' rm -r shapely # prevent import of local shapely ''; <del> disabledTests = [ "test_collection" </del> <ins> disabledTests = lib.optionals (stdenv.isDarwin && stdenv.isAarch64) [ # FIXME(lf-): these logging tests are broken, which is definitely our # fault. I've tried figuring out the cause and failed. # # It is apparently some sandbox or no-sandbox related thing on macOS only # though. "test_error_handler_exception" "test_error_handler" "test_info_handler" </ins> ]; pythonImportsCheck = [ "shapely" ];

Related discussion:
text: Add any other context about the problem here. Please run and paste the result. repro'd on commit id
backtrace: <details<summaryBacktrace from lldb</summary</details
shapely 1.8.4 with the fix is now in pypi, I saw you wanted to upgrade it, did you get around to do it?
thanks for the reminder, committed it