sharjeelyunus/github-issues-dataset huggingface dataset:
Repository: angular
Issue: Polynomial regular expression used on uncontrolled data
Labels: area: security

<!-- Warning: The suggested title contains the alert rule name. This can expose security information. -->

Tracking issue for:
- [x] https://github.com/angular/angular/security/code-scanning/90
- [x] https://github.com/angular/angular/security/code-scanning/89
- [x] https://github.com/angular/angular/security/code-scanning/88
- [x] https://github.com/angular/angular/security/code-scanning/87
- [x] https://github.com/angular/angular/security/code-scanning/86
- [ ] https://github.com/angular/angular/security/code-scanning/85
- [ ] https://github.com/angular/angular/security/code-scanning/84
Repository: TypeScript
Issue: Only first unreachable statement flagged in 'case'
Labels: Bug

### 🔎 Search Terms

In `case`, only the first unreachable statement is flagged. This is inconsistent e.g. with function scope.

### 🕗 Version & Regression Information

Reproduces on 5.2.2 and nightly.

### ⏯ Playground Link

See [Playground](https://www.typescriptlang.org/play?#code/GYVwdgxgLglg9mABMAFASkQbwFCMQJwFMoR8wBuXRCBAZzgBtCA6BuAcxQCIBDLtSnhph6TVh258B2AL7ZsoSLASJOGHHloB3GFAgALRJP5YqQnrUKJeXAFxm8BYqQoOhdRizacb0x4+FRLwlfQUQ5OWxCAA8ABzh8KCwZSiA)


### 💻 Code

```typescript
function g() {
  switch ("a") {
    case "a":
      return;
      console.log("a"); // grayed out
      console.log("a"); // not grayed out
  }
}
```

### 🙁 Actual behavior

First statement grayed out.

### 🙂 Expected behavior

Both statements grayed out.
Repository: flutter
Issue: Encoded URI param on deep link is decoded incorrectly
Labels: package,has reproducible steps,P2,p: go_router,team-go_router,triaged-go_router,found in release: 3.13,found in release: 3.14

### Is there an existing issue for this?

- [X] I have searched the [existing package issues](https://github.com/flutter/flutter/issues?q=is%3Aopen+is%3Aissue+label%3Apackage)
- [X] I have read the [guide to filing a bug](https://flutter.dev/docs/resources/bug-reports)

### What package does this bug report belong to?

go_router

### What target platforms are you seeing this bug on?

Android, iOS

### Have you already upgraded your packages?

Yes

### Dependency versions

_No response_

### Steps to reproduce

1. Deeplink to a URL with an encoded query param, e.g. `scheme://com.example.test/login?email=test%2B2%40example.com` (test+2@example.com)
2. In the GoRoute pageBuilder function, fetch the query parameter e.g. state.uri.queryParameters["email"]

### Expected results

The result should be decoded correctly as test+2@example.com

### Actual results

The result is `test 2@example.com`

I believe the issue occurs when the router decodes the uri to pass into the location property (Flutter's router.dart:69). When this is later converted back to a uri by go_router the `+` character is converted to an empty space.

### Code sample

<details><summary>Code sample</summary>

```dart
I'll provide if needed
```

</details>


### Screenshots or Videos

_No response_

### Logs

_No response_

### Flutter Doctor output

<details><summary>Doctor output</summary>

```console
[Paste your output here]
```

</details>
Repository: vscode
Issue: Should json sort on save also apply to JsonL
Labels: feature-request,json,json-sorting

Testing #191455

Should the new setting also apply to the individual json entries in a json lines file? For example:

```
{"x": 1, "a": 1}
{"y": 1, "b": 1}
```
Repository: vscode
Issue: Moved lines aren't indicated to screen reader users
Labels: feature-request,accessibility,diff-editor

Testing #191508

This feature is super cool and works well for a sighted user. We will want to think about how we can make this accessible for screen reader users. 

Maybe when one enters such a section with their cursor, we can alert `Code moved from line xxx to yyy` and also provide a keybinding to use the compare action?

Once that happens, when the setting is enabled, we can add the info to the help menu.

https://github.com/microsoft/vscode/assets/29464607/55b8777d-d360-40cf-a75b-85096bd16032
Repository: PowerToys
Issue: Network shares are being opened up in the browser rather than Explorer
Labels: Issue-Bug,Product-PowerToys Run,Needs-Triage,Needs-Team-Response

### Microsoft PowerToys version

0.72.0

### Installation method

Microsoft Store

### Running as admin

No

### Area(s) with issue?

PowerToys Run

### Steps to reproduce

search for a share e.g. `\\nas\Videos`



### ✔️ Expected Behavior

`\\nas\Videos` open up in Explorer

### ❌ Actual Behavior

`\\nas\Videos` open up in Browser

### Other Software

_No response_
Repository: puppeteer
Issue: [Bug]: ctrl+C does not copy the highlighted text of pdf
Labels: bug,confirmed,P3

### Minimal, reproducible example

```TypeScript
import puppeteer from "puppeteer";

const browser = await puppeteer.launch({
    headless: false,
    product : "chrome",
    defaultViewport : null,
});

const page = (await browser.pages())[0];

await page.goto(
    'https://www.et.gr/api/DownloadFeksApiDailySmall1/?fek_pdf=20230100144',
    {
        waitUntil : "load"
    }
);

await page.evaluate(() =>
    document.body.insertAdjacentHTML(
        "afterbegin",
        '<input style="position : absolute;top : 0;left : 0;z-index : 1">'
    )
);

await page.waitForSelector("embed");

await pressCtrlAC();
await page.click("input");
await pressCtrlV();

const toLog = await page.evaluate(() => {
    const input = document.getElementsByTagName("input")[0];
    if (input === undefined) throw Error();
    return `log:${input.value}`;
});

console.log(toLog);

await browser.close();

//#region utils

async function pressCtrlAC() {
    await sleep(5e3);
    await page.keyboard.down('ControlLeft');
    await sleep(100);
    await page.keyboard.press('KeyA');
    await sleep(100);
    await page.keyboard.press('KeyC');
    await sleep(100);
    await page.keyboard.up('ControlLeft');
    await sleep(100);
}

async function pressCtrlV() {
    await sleep(3e3);
    await page.keyboard.down('ControlLeft');
    await sleep(100);
    await page.keyboard.press('KeyV');
    await sleep(100);
    await page.keyboard.up('ControlLeft');
    await sleep(100);
}

/**@type {(dt : number) => Promise<void>}*/
async function sleep(dt) {
    return await new Promise((res) => setTimeout(res,dt));
}
//#endregion
```


### Error string

no error

### Bug behavior

- [ ] Flaky
- [X] PDF

### Background

I want to be able to programmatically copy the **rendered** text of a pdf file. There are libraries that extract text from pdf, however the extracted text is not formatted like the rendered text [link](https://github.com/mozilla/pdf.js/issues/16796#issuecomment-1666791545). For example in the rendered text the spaces are preserved while in the non rendered some spaces are omitted, hence words are merged.

I have already tried to use firefox with puppeteer since it would be easier to copy the text because of the way firefox renders pdf (no ctrl+A+C+V needed, just `.innerText`), but firefox in puppeteer is experimental and almost nothing works , making it currently not a viable solution.

### Expectation

Copy the text from the pdf file.

### Reality

The copy does not happen for the rendered pdf text.

### Puppeteer configuration file (if used)

_No response_

### Puppeteer version

21.1.1

### Node version

18.15.0

### Package manager

npm

### Package manager version

9.5.0

### Operating system

Windows
Repository: rust
Issue: Tracking Issue for std::fmt::Arguments::from_str
Labels: T-libs-api,C-tracking-issue,A-fmt

Feature gate: `#![feature(fmt_arguments_from_str)]`

This is a tracking issue for `std::fmt::Arguments::from_str`.

### Public API

<!--
For most library features, it'd be useful to include a summarized version of the public API.
(E.g. just the public function signatures without their doc comments or implementation.)
-->

```rust
// core::fmt

impl Arguments<'_> {
    pub const fn from_str(string: &'static str) -> Self;
}
```

### Steps / History

- [ ] Implementation: https://github.com/rust-lang/rust/pull/115129
- [ ] Final comment period (FCP)[^1]
- [ ] Stabilization PR

### Unresolved Questions

- Are we comfortable committing to restricting future fmt::Arguments implementations by always having to support conversion from `&'static str`?
- Naming (`new`, `new_const`, `new_str`, ...?)
- Should this (also) be available as `From<&'static str>` implementation?

[^1]: https://std-dev-guide.rust-lang.org/feature-lifecycle/stabilization.html
Repository: PowerToys
Issue: Assign shortcut keys to place a active window in a particular area of the screen
Labels: Idea-Enhancement,Product-FancyZones,Needs-Triage

### Description of the new feature / enhancement

Changing zones and then switching to a desired Window placement setting is multiple shortcut key presses. I am mostly influenced with the feature what gTile (gnome extension in Linux world) offers here, they provide user an option to define a short cut and to that, we can configure where an active window can be placed and sized. 

It would be a great addition if we bring this feature to Fancy Zone

### Scenario when this would be used?

More independent window layout options can be configured without changing the zones (i.e., less shortcut key press).

### Supporting information

gTile (https://github.com/gTile/gTile)
Repository: kubernetes
Issue: CEL cost system: differentiate where the cost comes from when exceed the limit
Labels: sig/api-machinery,kind/feature,triage/accepted

### What would you like to be added?

While discussing the cost exceed case raised by @padlar, @liggitt suggested to surface whether the cost was dominated by the complexity of the expression / unbounded size of the things referenced in the expression, or number of times the expression is evaluated. Those information will be extremely helpful in terms of resolving the "cost exceeded" error.

### Why is this needed?

Those information will be extremely helpful in terms of resolving the "cost exceeded" error.
Repository: transformers
Issue: Add D_Nikud model
Labels: New model

### Model description

Model description
The repository is dedicated to the implementation of our innovative D-Nikud model, which use the TavBERT architecture and Bi-LSTM to predict and apply diacritics (nikud) to Hebrew text. Diacritics play a crucial role in accurately conveying pronunciation and interpretation, making our model an essential tool for enhancing the quality of Hebrew text analysis.

Open source status
 The model implementation is available
 The model weights are available

Provide useful links for the implementation
Github: https://github.com/NadavShaked/D_Nikud
HuggingFaceHub: https://huggingface.co/NadavShaked/D_Nikud (include the model weights at model folder)
model weights: https://drive.google.com/drive/folders/1osK503txvsEWlZASBViSqOiNJMzAlD0F
Paper: https://arxiv.org/abs/2402.00075
train/dev/test data: https://github.com/NadavShaked/D_Nikud_Data


### Open source status

- [X] The model implementation is available
- [X] The model weights are available

### Provide useful links for the implementation

In the readme file there are an explanation how to run the predict, train and eval methods
Repository: neovim
Issue: on_lines misreports the number of changed bytes when changes skip some lines in the range
Labels: bug,api,events

### Problem

When using block selection to delete characters, such that some lines are unaffected, on_lines receives the byte count of the affected lines only, and not the whole range.

### Steps to reproduce

- Have a buffer with
  ```
  ab
  c
  de
  ```
- Attach on_lines listener, `vim.api.nvim_buf_attach(0, false, { on_lines = print })`.
- Use visual-block mode to delete a column from `b` to `e` (for ex. `ggg_<C-v>2jx`).
- Listener reports `lines <buf> <tick> 0 3 3 6`.

The "byte count of previous contents", reported as 6, is incorrect. It counts only lines 0 and 2. Moreover, if the change is undone and redone, the listener correctly reports 8 bytes.

This is problematic as it makes it impossible to correctly track incremental changes without keeping a copy of the buffer.

### Expected behavior

Byte count of changed contents should include all lines in range.

### Neovim version (nvim -v)

NVIM v0.9.1

### Vim (not Nvim) behaves the same?

n/a

### Operating system/version

Linux

### Terminal name/version

n/a

### $TERM environment variable

n/a

### Installation

official Arch extra repository
Repository: vscode
Issue: Missing progress indicator for quick search
Labels: feature-request,search

Testing #191499

When doing a longer running search, I never see the progress animation. I would expect to see a quick pick progress bar for this.
Repository: vscode
Issue: Should the results coming from open editors be clearly separated
Labels: feature-request,search

Testing #191499

Right now if you do a search, in order to have a fast experience and keep results stable, we show open editor results first. However, this kind of makes the sort order of the results feel random. Should we clearly delineate the two types of results so they have a predictable order?
Repository: vscode
Issue: Experience when having a lot of matches
Labels: feature-request,search

Testing #191499

If a search is just too generic, there can be too many results. In the search view, we have a warning about this at the top of the results. In quick text search, the amount of results we are willing to show is even lower since the experience is more geared towards smaller result sets. Should we have validation messaging when the results are too large and encourage opening in the search view.
Repository: pytorch
Issue: FlashAttentionV2 will OOM when building on ci/cd with default settings
Labels: module: cuda,module: ci,triaged

# Summary
Changes were needed to be able to build FlashAttentionV2 on the CI/CD runners that are used when building Cuda with with Arch_list = 8.6.

The default MAX_JOBS will cause the docker container building PyTorch to get killed with exit code 137 from utilizing more than its allocated 16gb of memory. This was resolved by setting MAX_JOBS =2.

## Investigate
This issue is to investigate potential other solutions that maintain build speed.

PR that added this functionality: 
https://github.com/pytorch/pytorch/pull/105602

cc @ptrblck @seemethere @malfet @pytorch/pytorch-dev-infra
Repository: pytorch
Issue: Enable FlashAttentionV2 on Windows
Labels: triaged,module: sdpa

# Summary
This PR: https://github.com/pytorch/pytorch/issues/108174 will update the FlashAttention kernel within PyTorch core to V2. Currently this kernel does not support windows. This Issue is used to track support.

See: https://github.com/Dao-AILab/flash-attention/issues/345
Repository: node
Issue: Resolution Algorithm Specification fixing
Labels: doc

### Affected URL(s)

https://nodejs.org/dist/latest-v20.x/docs/api/esm.html#resolution-algorithm-specification

### Description of the problem

**PACKAGE_RESOLVE** function step 11.1 should contains:
Let _packageURL_ be the URL resolution of "_node_modules/_" concatenated with _packageName_, relative to _parentURL_.

The original **PACKAGE_EXPORTS_RESOLVE** is wrong if _subpath_ is "./xyz" and the keys of _exports_ are not starting with "." (conditions) the step 4 is executed. The suggestion how **PACKAGE_EXPORTS_RESOLVE** should be implemented.

**PACKAGE_EXPORTS_RESOLVE**(_packageURL_, _subpath_, _exports_, _conditions_)

1. If _exports_ is an Object with both a key starting with "." and a key not starting with ".", throw an _Invalid Package Configuration error_.
2. Let _mainExport_ be **undefined**.
3. Let _resolved_ be **undefined**.
4. If _subpath_ is equal to "." and _exports_ is an Object containing a key equal to ".", then
         1. Let _mainExport_ be _exports_["."].
5. Otherwise if _exports_ is a String or Array, or an Object containing no keys starting with ".", then
         1. Let _mainExport_ be _exports_.
6. If _mainExport_ is not **undefined**, then
         1. Let _resolved_ be the result of **PACKAGE_TARGET_RESOLVE**(_packageURL_, _mainExport_, **null**, **false**, _conditions_).
7. Otherwise, if _exports_ is an Object and all keys of _exports_ start with ".", then
         1. Let _resolved_ be the result of **PACKAGE_IMPORTS_EXPORTS_RESOLVE**(_subpath_, _exports_, _packageURL_, **false**, conditions).
8. If _resolved_ is not **null** or **undefined**, then return _resolved_.
9. Throw a _Package Path Not Exported_ error.
Repository: vscode
Issue: Current active presentation type is incorrect after changing display style 1st image.
Labels: bug,notebook-output

Testing #191502

![Recording 2023-08-29 at 11 47 46](https://github.com/microsoft/vscode/assets/25044782/3eb19e93-4b3d-4539-b083-41ac6059fb6a)
Repository: go
Issue: cmd/link: panic with `index out of range` in `cmd/link/internal/loader.(*Loader).resolve`
Labels: NeedsInvestigation,compiler/runtime

```
#!watchflakes
post <- log ~ `panic: runtime error: index out of range` && log ~ `^\s*cmd/link/internal/loader\.\(\*Loader\)\.resolve`
```

Issue created automatically to collect these failures.

Example ([log](https://build.golang.org/log/0bb8c747db075efb974aa09ff7bbe23a63f99a70)):

    panic: runtime error: index out of range [2147483635] with length 6
    
    goroutine 22 [running]:
    cmd/link/internal/loader.(*Loader).resolve(0xc000142a80, 0xc000070680, {0x7ffffff3, 0x1f})
    	cmd/link/internal/loader/loader.go:658 +0x2ac
    cmd/link/internal/loader.Reloc.Sym({0x7fffaa5498c1, 0xc000070680, 0xc000142a80})
    	cmd/link/internal/loader/loader.go:61 +0x94
    cmd/link/internal/ld.(*relocSymState).relocsym(0xc001200ef0, 0xb3aa, {0x7fffa94071a0, 0xf8, 0x204e60})
    	cmd/link/internal/ld/data.go:202 +0x148
    cmd/link/internal/ld.writeBlock(0xc000174200, 0xc0000b6070, 0xc000142a80, {0xc001208000, 0x57c2, 0x57c2}, 0x2b0000, 0x114140, {0x52bae0, 0x200, ...})
    	cmd/link/internal/ld/data.go:1084 +0x410
    cmd/link/internal/ld.writeBlocks.func1(0xc0000b6070, 0xc000142a80, {0xc001208000, 0x57c2, 0x57c2}, 0x2b0000, 0x114140, {0x52bae0, 0x200, 0x200})
    	cmd/link/internal/ld/data.go:1040 +0x90
    created by cmd/link/internal/ld.writeBlocks in goroutine 62
    	cmd/link/internal/ld/data.go:1039 +0x4a8
    go tool dist: FAILED: /tmp/workdir-host-linux-loong64-3a5000/go/pkg/tool/linux_loong64/go_bootstrap install cmd: exit status 1


— [watchflakes](https://go.dev/wiki/Watchflakes)
Repository: vscode
Issue: Ask GitHub Copilot item updates slowly, making the command palette feel sluggish
Labels: bug,quick-open

Testing #191496

Repro:

- Type a query into the command palette
- Type a character, ❗ the character updates in the item after ~500ms-1s

![Image](https://github.com/microsoft/vscode/assets/2193314/930ef509-f6ea-47a3-8129-a2f58e9fe527)

If it's not possible to get the text immediately (slow going via exthost?) then I don't think we need the updated text at all tbh. If it was just a static item at the bottom that never changed it would make the command palette feel more snappy
Repository: rust
Issue: Performance of `BinaryHeap::into_sorted_vec` vs. `Vec::sort_unstable`
Labels: I-slow,C-enhancement,T-libs,C-optimization

I think the implementation of `BinaryHeap::into_sorted_vec` should just use `Vec::sort_unstable` instead of sorting by repeated Heap operations. For very small N (N < 1000), the current implementation is maybe 5% faster some times, but for bigger N `Vec::sort_unstable` will be more than 10 to 30 times faster.

Also, I assume sorting by Heap operations requires 2\*N\*Log2(N) key comparisons in average and worst case when using the default Heapsort like in the standard library, while `Vec::sort_unstable` probably requires less than 1.5\*N\*Log2(N) key comparisons in average case and also a lower number of moves in average case.

I don't have good statistics, maybe others could add some.

Here is an example, to show the performance difference:

```rust
/*
[dependencies]
fastrand = "2.0.0"
*/

use std::{collections::BinaryHeap, time::Instant};

fn main() {
    let N: usize = 10_000_000;
    let mut a_elements_in_random_order: Vec<usize> = Vec::from_iter(0..N);
    fastrand::shuffle(&mut a_elements_in_random_order);
    let mut heap: BinaryHeap<usize> = BinaryHeap::with_capacity(N);
    for i in 0..N {
        heap.push(a_elements_in_random_order[i]);
    }
    // both Vecs are now identical
    let mut a_sorted_by_sort_unstable = heap.clone().into_vec();
    let now = Instant::now();
    a_sorted_by_sort_unstable.sort_unstable();
    let runtime_sort_unstable = now.elapsed();
    let now = Instant::now();
    let a_sorted_by_heap = heap.into_sorted_vec();
    let runtime_sorted_by_heap = now.elapsed();
    assert!(a_sorted_by_sort_unstable == a_sorted_by_heap);
    println!("runtime_sort_unstable={:?}", runtime_sort_unstable);
    println!("runtime_sorted_by_heap={:?}", runtime_sorted_by_heap);
}
```

```
N=10_000_000
runtime_sort_unstable=403.8169ms
runtime_sorted_by_heap=4.6621243s
```
```
N=100_000_000
runtime_sort_unstable=3.6869678s
runtime_sorted_by_heap=95.9239879s
```
Repository: vscode
Issue: Quick question border radius is cutting off the focus border
Labels: bug,polish,quick-chat

Testing #191496

See the bottom left and right corners:

![Image](https://github.com/microsoft/vscode/assets/2193314/e6118d3b-9205-455a-84cb-55094076fc11)

This might be just how the browser renders it 🤔
Repository: vscode
Issue: Dismissing a message will shrink the quick question UI
Labels: bug,polish,quick-chat

Testing #191496

Repro:

1. Open quick question
2. Ask copilot to tell you a story about programming a few times
3. Scroll up to expand the history
4. Click `x` to dismiss one, 🐛 the history shrunk, despite there being enough content to fill the full size of the previous viewport
Repository: material-ui
Issue: [base-ui][Autocomplete] Virtualization/infinite scroll support
Labels: new feature,performance,component: autocomplete

### Summary 💡

Dashboard apps often handle extensive data, requiring efficient data management tools. The Autocomplete component is crucial for handling large data sets but lacks optimal performance when dealing with hundreds of records that need pagination.

### Solution
Integrate virtualization and infinite scroll features into the MUI Libraries' Autocomplete component.

### Benefits
- **Efficiency**: Virtualization renders only visible data, ensuring smooth performance even with extensive datasets.
- **Seamless Navigation**: Infinite scroll enable users to smoothly explore records without manual clicks.
- **Time Savings**: Users can access and review vast datasets quickly.

### Examples 🌈

- https://mui.com/material-ui/react-autocomplete/#virtualization 

### Motivation 🔦

_No response_