Help Wanted

AI Summary: The Watchtower service, when enabled via the 'auto-update' profile, mounts the Docker daemon socket. This grants the Watchtower container full host OS control, posing a significant security risk as a compromise of Watchtower would lead to a complete host compromise. The recommendation is to use a Docker socket proxy to limit access or consider Kubernetes-native rolling updates.

AI Summary: This issue requests the implementation of persistent compression presets for an image compression service. Users will be able to save and apply custom compression settings, which will be stored globally in a JSON file. A feature flag will control the availability of this functionality.

AI Summary: This issue is a beginner-friendly task to add a new anime quote to a JSON file. It requires no coding and can be completed directly in the browser by forking the repository, editing the `anime-quotes.json` file, and submitting a pull request.

AI Summary: This issue aims to test the CSS loader's behavior when subjected to rapid and successive state transitions (idle, loading, cancel, loading, complete, reset). The goal is to identify and fix potential bugs like incorrect states, duplicate class/event emissions, stale animations, or an incorrect final state.

AI Summary: This issue requests the creation of new unit tests for the `InetAddressPattern` class introduced in Jetty 12.1.x. The goal is to ensure the pattern's behavior is correctly verified and to prevent future regressions.

AI Summary: This issue proposes standardizing on SI units within the pyAML library by leveraging the `pint` library for unit conversions. The goal is for `get()` methods to always return SI values and `set()` methods to accept SI values, simplifying unit handling for users and preventing common errors seen in other systems like Tango.

AI Summary: This issue requests the creation of a new documentation page for ScubaGear that provides instructions on how to download and execute the latest active development code directly from the main branch on GitHub. This will streamline the process for users and reduce the need for ad-hoc explanations.

AI Summary: This issue proposes adding a convenience redirect from the `/reports` URL to `/research/publications/`. This is an enhancement to improve user experience by providing a shorter, more memorable link for accessing publications.

AI Summary: This issue is a "Good First Issue" designed for absolute beginners to make their first open-source contribution. It involves adding a new Japanese grammar point to a JSON file directly from the browser, requiring no coding or local setup. The task is straightforward and estimated to take less than a minute.

AI Summary: This issue addresses significant linting debt in the project, with ESLint reporting ~665 problems and Ruff reporting 274 errors. The proposed fix involves updating ESLint configurations to ignore tooling output, applying auto-fixers, manually resolving remaining issues, consolidating duplicated code, refactoring complex functions, and encoding intentional test patterns. The goal is to clean up the codebase and enable usable quality gates.

AI Summary: This issue addresses a regression in the injection scanner where five specific "you are now" jailbreak phrases are no longer blocked after a recent change. The fix involves updating the `INJECTION_PATTERNS` to explicitly include these missing phrases and adding corresponding test cases to ensure they are correctly blocked.

AI Summary: This bug report identifies an incorrect type hint for the `partition_assignment_strategy` parameter in the `faststream.kafka` library. The current type hint expects a sequence of partition assignor instances, but it should expect a sequence of partition assignor types. This fix will ensure correct type checking for this parameter.

AI Summary: This issue proposes adding a compile-time ComponentTypeID to all components within the aegis engine. This ID is necessary for the correct functioning of GetType() and was inadvertently omitted during development. The fix involves defining a static constexpr member and an associated enum for each component.

AI Summary: This issue requests the creation of a "Neon Pulse Button" using CSS and HTML. The button should feature a neon glow effect, and on hover, it should animate with a slight pulse (scaling) and an intensified glow. The provided path indicates it's an example within a submissions directory.

AI Summary: The `process_s3_file` function in the `datacontract` library incorrectly validates only the last file matched by an S3 glob pattern, leading to silent failures for invalid records in other files. The issue stems from a generator being overwritten in a loop, causing validation to occur only once after all files have been processed. The fix involves validating each file within the loop and accumulating any exceptions.

AI Summary: This issue is a beginner-friendly task to add a new Japanese proverb to a JSON file. No coding experience is required, and the contribution can be made directly from the browser in under a minute. The task involves forking the repository, editing a specific JSON file to include the new proverb, and submitting a pull request.

AI Summary: All agents in the llm-d FMA hive are crashing with a "claude native binary not installed" error. This indicates a problem with the installation or availability of a required native binary for the Claude model, likely due to issues with the post-installation script or optional dependency downloads.

AI Summary: This issue is a beginner-friendly task to add a new fun fact about Japan to a JSON file. No coding experience is required, and the contribution can be made directly from the browser in under a minute. It's designed for first-time contributors and is suitable for Hacktoberfest.

AI Summary: The REST API endpoint for registering cluster nodes currently creates a new node entry each time a worker restarts and re-registers, leading to an overcounting of available capacity. This issue requires updating the REST handler to mirror the idempotent behavior of the gRPC handler, ensuring that restarting workers update their existing entry instead of creating new ones.

AI Summary: This issue addresses the need to consolidate sixteen redundant path containment checks across the codebase into a single shared helper function. The goal is to reduce code duplication, prevent inconsistencies, and ensure a more robust security check by leveraging the existing `bernstein.core.security.path_containment` helper. The work is designed to be sliced into smaller, manageable pull requests.

AI Summary: This issue identifies four previously overlooked call sites to `list_tasks()` that are not properly scoping their queries by tenant. This can lead to incorrect counts and resource exhaustion across tenants. The fix involves ensuring these call sites properly utilize tenant scope before querying task data, with a specific design decision needed for the `health_check` function.

AI Summary: This issue proposes refactoring the Meshery REST API documentation to generate content from published OpenAPI schemas instead of relying on Go code comments. The goal is to decouple documentation from the server codebase and ensure only Meshery Server endpoints are included, using a Jekyll data source approach.

AI Summary: The `get_predictions` endpoint incorrectly computes budget-exhaustion forecasts using cost history from all tenants, rather than just the caller's tenant. This issue mirrors a previous bug in the `/costs/alerts` endpoint and needs to be fixed by correctly scoping the forecast to the requesting tenant. The fix should include tests to verify tenant isolation and ensure historical data is handled appropriately.

AI Summary: This issue proposes adding visual indicators for task deadlines to the Schedule view, similar to how the Planner view currently handles them. The goal is to make tasks with deadlines visible and informative in the Schedule, without implying a time span between the planned date and the deadline.

AI Summary: This issue requests the creation of a Hugo shortcode equivalent to a Jekyll include that rendered a "Resource Access" alert box. The shortcode needs to be created and then inserted into a specific Markdown file to restore a lost documentation element.

AI Summary: This issue requests the identification and implementation of missing relationships for Azure Batch within Meshery's model. The goal is to accurately represent how Azure Batch integrates with other Azure services like Virtual Networks, Storage Accounts, and Key Vault to reflect real-world architectures.

AI Summary: A critical security vulnerability exists where offline write requests, including bearer authentication tokens and sensitive request bodies, are stored in plaintext in AsyncStorage. This exposes user credentials and PII to exfiltration. Additionally, a separate defect allows for duplicate request submissions due to a lack of in-flight guards during offline queue flushing.

AI Summary: This issue proposes proving the equivalence between two characterizations of sets in a formal proof system. The first characterization, `is-set`, is provided, and the second, `is-0-type`, needs to be defined. The task involves applying proof techniques to demonstrate that these two definitions describe the same concept.

AI Summary: This issue proposes adding the version information, currently available via the `./proxy --version` command, to the web UI. The goal is to display this version number, likely in the footer, to easily allow users to check if they are running a recent version of the software. The contributor has identified a potential implementation path but is seeking guidance on the most idiomatic Go way to pass this information.

AI Summary: This issue proposes removing the obsolete `EARTHLY_INSTALL_ID` environment variable from GitHub Actions and Buildkite CI configurations. This variable is a remnant of a removed analytics subsystem and is no longer used, causing unnecessary clutter and potential confusion for contributors.