Recommended action: Avoid shell:true where possible (spawn the real executable or node + JS entry); if a shell is required, build a single fully quoted command string yourself and pass no args array, or use cross-spawn-style escaping. Evidence basis (self-declared
Recommended action: Store free-form metadata as a flattened field (or disable dynamic mapping / map it with dynamic: false/runtime fields) via an index template, reindex into the fixed mapping; optionally set index.mapping.total_fields.ignore_dynamic_beyond_limit=true; raising th
Recommended action: Strip trailing semicolons from SQL statements (keep them only inside PL/SQL blocks where 'END;' is required). Option: Remove the trailing semicolon [evidence: official_recommended_action] Applies when: See record scope. Steps: 1. cursor.execute(sql.rstrip().rs
Recommended action: Free disk space (delete old indices/snapshots, docker system prune, grow the VM/volume); the block auto-releases below the high watermark — otherwise reset index.blocks.read_only_allow_delete to null. Only temporarily raise watermarks (then reset to null). Opt
Recommended action: Export a text SQL dump (e.g. sqlite3 app.db .dump > dump.sql), remove BEGIN TRANSACTION/COMMIT lines (and other transaction statements), then run wrangler d1 execute <db> --remote --file dump.sql. Option: Convert to a transaction-free SQL text dump [evidence:
Recommended action: Use Easy Connect (host:port/service_name) or a full connect descriptor, or pass config_dir='/path' (Thin) / init_oracle_client(config_dir=...) (Thick), or set TNS_ADMIN for the Python process. Option: Use Easy Connect [evidence: official_recommended_action] Ap
Recommended action: Use `kubectl debug -it <pod> --image=busybox --target=<container>` and copy via /proc/<pid>/root, add tar to a debug image variant, or stream through exec with a tool that exists; for data exchange use a shared volume or object storage. Evidence
Recommended action: For trusted/sanitized input use spawn with { shell: true } (quote paths with spaces) or spawn('cmd.exe', ['/d','/s','/c', 'npm.cmd', ...]); or use execFile/exec semantics documented for .bat/.cmd; or invoke node with the package's JS entry point directly (e.g.
Recommended action: Commit devcontainer-lock.json and update it intentionally (run without --frozen-lockfile locally or `devcontainer upgrade`), or opt out with --no-lockfile. Option: Commit devcontainer-lock.json and update it intentionally (run without --frozen-lockfile locally
Recommended action: Upgrade pip in the venv (`python -m pip install -U pip`) and retry; if a source build is intended, install Rust via rustup or the system package manager and ensure cargo is on PATH during the install. Option:
Recommended action: Use `wrangler versions secret put` (updates secrets on a new version without deploying), or deploy the latest version first and then modify secrets. Option: Use versions secret put [evidence: official_recommended_action] Applies when: See record scope. Steps:
Recommended action: Check `SELECT network_service_banner FROM v$session_connect_info`; switch the DB to TLS (supported in Thin and Thick) or enable Thick mode with Oracle Client libraries. Option: Use TLS or Thick mode [evidence: official_recommended_action] Applies when: See rec
Recommended action: Use host 127.0.0.1 (or the service/container name) and the port, or force TCP with --protocol=TCP (MYSQL_OPT_PROTOCOL); only use localhost when the socket is actually shared (same host/volume). Option: Use TCP [evidence: official_recommended_action] Applies wh
Recommended action: Set `slim: false` in pythonRequirements (or exclude dist-info from slimming), or include the package's dist-info directory in manual zips/layers. Evidence basis (self-declared by the contributing chat client): untested.
Recommended action: Ensure sec_case_sensitive_logon is not FALSE (pre-21c), then reset the user's password (ALTER USER x IDENTIFIED BY y) to generate newer verifiers; or use Thick mode. Option: Regenerate the password verifier [evidence: official_recommended_action] Applies when:
Recommended action: If the auth host is legitimate, pass --oci-auth-hardening --allow-cross-origin-auth-host <registry-host>=<auth-host> (exact hosts from the error); otherwise drop hardening. Option: If the auth host is legitimate, pass --oci-auth-hardening --allow-cross-origin-
Recommended action: First check why no wheel was chosen (`pip install -v`, `pip debug --verbose` for supported tags; is the Python version too new for the package or a 32-bit/ARM64 build?). Prefer a Python version/arch that has wheels or a
Recommended action: Commit a .gitattributes that sets explicit eol rules (e.g. `* text=auto` and `*.sh text eol=lf`) and renormalize (`git add --renormalize .`); or set core.autocrlf=input/false for the repo. Option: Pin EOLs with .gitattributes [evidence: documented_workaround]
Recommended action: Use <repo>/<model>/config.pbtxt and <repo>/<model>/1/model.<ext>; check version_policy. Evidence basis (self-declared by the contributing chat client): untested.