all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe6a:5057
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 7fac1645-fc40-4328-bb7b-6166b919b559
        host_id: 25afcdcd4b24cc9d1766f11f81549380a3029030a455889bb61ec093
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe6a:5057
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.7.35
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.193.212
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe6a:5057
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job ansible-lint explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#7>'
      - '<Job ansible-lint explicit: None implied: None source: osism/container-image-inventory-reconciler/.zuul.yaml@main#104>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 42145006b3a045c3af1552de66d8dcf1
      build_refs:
      - branch: main
        change: '414'
        change_message: "chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.8.12\n\nThis
          PR contains the following updates:\n\n| Package | Type | Update | Change
          |\n|---|---|---|---|\n| [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv)
          | stage | patch | `0.8.4` -> `0.8.12` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>astral-sh/uv
          (ghcr.io/astral-sh/uv)</summary>\n\n### [`v0.8.12`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0812)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.11...0.8.12)\n\n#####
          Python\n\n- Add 3.13.7\n- Improve performance of zstd in Python 3.14\n\nSee
          the [python-build-standalone release notes](https://redirect.github.com/astral-sh/python-build-standalone/releases/tag/20250818)
          for details.\n\n##### Enhancements\n\n- Add an `aarch64-pc-windows-msvc`
          target for `python-platform` ([#&#8203;15347](https://redirect.github.com/astral-sh/uv/pull/15347))\n-
          Add fallback parent process detection to `uv tool update-shell` ([#&#8203;15356](https://redirect.github.com/astral-sh/uv/pull/15356))\n-
          Install non-build-isolation packages in a second phase ([#&#8203;15306](https://redirect.github.com/astral-sh/uv/pull/15306))\n\n#####
          Bug fixes\n\n- Reject already-installed wheels built with outdated settings
          ([#&#8203;15289](https://redirect.github.com/astral-sh/uv/pull/15289))\n-
          Skip interpreters that are not found on query ([#&#8203;15315](https://redirect.github.com/astral-sh/uv/pull/15315))\n-
          Handle dotted package names in script path resolution ([#&#8203;15300](https://redirect.github.com/astral-sh/uv/pull/15300))\n-
          Reject `match-runtime = true` for dynamic packages ([#&#8203;15292](https://redirect.github.com/astral-sh/uv/pull/15292))\n\n#####
          Documentation\n\n- Document improvements to build-isolation setups ([#&#8203;15326](https://redirect.github.com/astral-sh/uv/pull/15326))\n-
          Fix reference documentation recommendation to use `uv cache clean` instead
          of `clear` ([#&#8203;15313](https://redirect.github.com/astral-sh/uv/pull/15313))\n\n###
          [`v0.8.11`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0811)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.10...0.8.11)\n\n#####
          Python\n\n- Add Python 3.14.0rc2\n- Update Pyodide to 0.28.1\n\n##### Enhancements\n\n-
          Add Debian 13 trixie to published Docker images ([#&#8203;15269](https://redirect.github.com/astral-sh/uv/pull/15269))\n-
          Add `extra-build-dependencies` hint for any missing module on build failure
          ([#&#8203;15252](https://redirect.github.com/astral-sh/uv/pull/15252))\n-
          Make 'v' prefix cyan in overlap warnings ([#&#8203;15259](https://redirect.github.com/astral-sh/uv/pull/15259))\n\n#####
          Bug fixes\n\n- Fix missing uv version in extended Docker image tags ([#&#8203;15263](https://redirect.github.com/astral-sh/uv/pull/15263))\n-
          Persist cache info when re-installing cached wheels ([#&#8203;15274](https://redirect.github.com/astral-sh/uv/pull/15274))\n\n#####
          Rust API\n\n- Allow passing custom `reqwest` clients to `RegistryClient`
          ([#&#8203;15281](https://redirect.github.com/astral-sh/uv/pull/15281))\n\n###
          [`v0.8.10`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0810)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.9...0.8.10)\n\n#####
          Python\n\n- Add support for installing Pyodide versions ([#&#8203;14518](https://redirect.github.com/astral-sh/uv/pull/14518))\n\n#####
          Enhancements\n\n- Allow Python requests with missing segments, e.g., just
          `aarch64` ([#&#8203;14399](https://redirect.github.com/astral-sh/uv/pull/14399))\n\n#####
          Preview\n\n- Move warnings for conflicting modules into preview ([#&#8203;15253](https://redirect.github.com/astral-sh/uv/pull/15253))\n\n###
          [`v0.8.9`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#089)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.8...0.8.9)\n\n#####
          Enhancements\n\n- Add `--reinstall` flag to `uv python upgrade` ([#&#8203;15194](https://redirect.github.com/astral-sh/uv/pull/15194))\n\n#####
          Bug fixes\n\n- Include build settings in cache key for registry source distribution
          lookups ([#&#8203;15225](https://redirect.github.com/astral-sh/uv/pull/15225))\n-
          Avoid creating bin links on `uv python upgrade` if they don't already exist
          ([#&#8203;15192](https://redirect.github.com/astral-sh/uv/pull/15192))\n-
          Respect system proxies on macOS and Windows ([#&#8203;15221](https://redirect.github.com/astral-sh/uv/pull/15221))\n\n#####
          Documentation\n\n- Add the 3.14 classifier ([#&#8203;15187](https://redirect.github.com/astral-sh/uv/pull/15187))\n\n###
          [`v0.8.8`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#088)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.7...0.8.8)\n\n#####
          Bug fixes\n\n- Fix `find_uv_bin` compatibility with Python <3.10 ([#&#8203;15177](https://redirect.github.com/astral-sh/uv/pull/15177))\n\n###
          [`v0.8.7`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#087)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.6...0.8.7)\n\n#####
          Python\n\n- On Mac/Linux, libtcl, libtk, and \\_tkinter are built as separate
          shared objects, which fixes matplotlib's `tkagg` backend (the default on
          Linux), Pillow's `PIL.ImageTk` library, and other extension modules that
          need to use libtcl/libtk directly.\n- Tix is no longer provided on Linux.
          This is a deprecated Tk extension that appears to have been previously broken.\n\nSee
          the [`python-build-standalone` release notes](https://redirect.github.com/astral-sh/python-build-standalone/releases/tag/20250808)
          for details.\n\n##### Enhancements\n\n- Do not update `uv.lock` when using
          `--isolated` ([#&#8203;15154](https://redirect.github.com/astral-sh/uv/pull/15154))\n-
          Add support for `--prefix` and `--with` installations in `find_uv_bin` ([#&#8203;14184](https://redirect.github.com/astral-sh/uv/pull/14184))\n-
          Add support for discovering base prefix installations in `find_uv_bin` ([#&#8203;14181](https://redirect.github.com/astral-sh/uv/pull/14181))\n-
          Improve error messages in `find_uv_bin` ([#&#8203;14182](https://redirect.github.com/astral-sh/uv/pull/14182))\n-
          Warn when two packages write to the same module ([#&#8203;13437](https://redirect.github.com/astral-sh/uv/pull/13437))\n\n#####
          Preview features\n\n- Add support for `package`-level conflicts in workspaces
          ([#&#8203;14906](https://redirect.github.com/astral-sh/uv/pull/14906))\n\n#####
          Configuration\n\n- Add `UV_DEV` and `UV_NO_DEV` environment variables (for
          `--dev` and `--no-dev`) ([#&#8203;15010](https://redirect.github.com/astral-sh/uv/pull/15010))\n\n#####
          Bug fixes\n\n- Fix regression where `--require-hashes` applied to build
          dependencies in `uv pip install` ([#&#8203;15153](https://redirect.github.com/astral-sh/uv/pull/15153))\n-
          Ignore GraalPy devtags ([#&#8203;15013](https://redirect.github.com/astral-sh/uv/pull/15013))\n-
          Include all site packages directories in ephemeral environment overlays
          ([#&#8203;15121](https://redirect.github.com/astral-sh/uv/pull/15121))\n-
          Search in the user scheme scripts directory last in `find_uv_bin` ([#&#8203;14191](https://redirect.github.com/astral-sh/uv/pull/14191))\n\n#####
          Documentation\n\n- Add missing periods (`.`) to list elements in `Features`
          docs page ([#&#8203;15138](https://redirect.github.com/astral-sh/uv/pull/15138))\n\n###
          [`v0.8.6`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#086)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.5...0.8.6)\n\nThis
          release contains hardening measures to address differentials in behavior
          between uv and Python's built-in ZIP parser ([CVE-2025-54368](https://redirect.github.com/astral-sh/uv/security/advisories/GHSA-8qf3-x8v5-2pj8)).\n\nPrior
          to this release, attackers could construct ZIP files that would be extracted
          differently by pip, uv, and other tools. As a result, ZIPs could be constructed
          that would be considered harmless by (e.g.) scanners, but contain a malicious
          payload when extracted by uv. As of v0.8.6, uv now applies additional checks
          to reject such ZIPs.\n\nThanks to a triage effort with the [Python Security
          Response Team](https://devguide.python.org/developer-workflow/psrt/) and
          PyPI maintainers, we were able to determine that these differentials **were
          not exploited** via PyPI during the time they were present. The PyPI team
          has also implemented similar checks and now guards against these parsing
          differentials on upload.\n\nAlthough the practical risk of exploitation
          is low, we take the *hypothetical* risk of parser differentials very seriously.
          Out of an abundance of caution, we have assigned this advisory a CVE identifier
          and have given it a \"moderate\" severity suggestion.\n\nThese changes have
          been validated against the top 15,000 PyPI packages; however, it's plausible
          that a non-malicious ZIP could be falsely rejected with this additional
          hardening. As an escape hatch, users who do encounter breaking changes can
          enable `UV_INSECURE_NO_ZIP_VALIDATION` to restore the previous behavior.
          If you encounter such a rejection, please file an issue in uv and to the
          upstream package.\n\nFor additional information, please refer to the following
          blog posts:\n\n- [Astral: uv security advisory: ZIP payload obfuscation](https://astral.sh/blog/uv-security-advisory-cve-2025-54368)\n-
          [PyPI: Preventing ZIP parser confusion attacks on Python package installers](https://blog.pypi.org/posts/2025-08-07-wheel-archive-confusion-attacks/)\n\n#####
          Security\n\n- Harden ZIP streaming to reject repeated entries and other
          malformed ZIP files ([#&#8203;15136](https://redirect.github.com/astral-sh/uv/pull/15136))\n\n#####
          Python\n\n- Add CPython 3.13.6\n\n##### Configuration\n\n- Add support for
          per-project build-time environment variables ([#&#8203;15095](https://redirect.github.com/astral-sh/uv/pull/15095))\n\n#####
          Bug fixes\n\n- Avoid invalid simplification with conflict markers  ([#&#8203;15041](https://redirect.github.com/astral-sh/uv/pull/15041))\n-
          Respect `UV_HTTP_RETRIES` in `uv publish` ([#&#8203;15106](https://redirect.github.com/astral-sh/uv/pull/15106))\n-
          Support `UV_NO_EDITABLE` where `--no-editable` is supported ([#&#8203;15107](https://redirect.github.com/astral-sh/uv/pull/15107))\n-
          Upgrade `cargo-dist` to add `UV_INSTALLER_URL` to PowerShell installer ([#&#8203;15114](https://redirect.github.com/astral-sh/uv/pull/15114))\n-
          Upgrade `h2` again to avoid `too_many_internal_resets` errors ([#&#8203;15111](https://redirect.github.com/astral-sh/uv/pull/15111))\n-
          Consider `pythonw` when copying entry points in uv run ([#&#8203;15134](https://redirect.github.com/astral-sh/uv/pull/15134))\n\n#####
          Documentation\n\n- Ensure symlink warning is shown ([#&#8203;15126](https://redirect.github.com/astral-sh/uv/pull/15126))\n\n###
          [`v0.8.5`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#085)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.4...0.8.5)\n\n#####
          Enhancements\n\n- Enable `uv run` with a GitHub Gist ([#&#8203;15058](https://redirect.github.com/astral-sh/uv/pull/15058))\n-
          Improve HTTP response caching log messages ([#&#8203;15067](https://redirect.github.com/astral-sh/uv/pull/15067))\n-
          Show wheel tag hints in install plan ([#&#8203;15066](https://redirect.github.com/astral-sh/uv/pull/15066))\n-
          Support installing additional executables in `uv tool install` ([#&#8203;14014](https://redirect.github.com/astral-sh/uv/pull/14014))\n\n#####
          Preview features\n\n- Enable extra build dependencies to 'match runtime'
          versions ([#&#8203;15036](https://redirect.github.com/astral-sh/uv/pull/15036))\n-
          Remove duplicate `extra-build-dependencies` warnings for `uv pip` ([#&#8203;15088](https://redirect.github.com/astral-sh/uv/pull/15088))\n-
          Use \"option\" instead of \"setting\" in `pylock` warning ([#&#8203;15089](https://redirect.github.com/astral-sh/uv/pull/15089))\n-
          Respect extra build requires when reading from wheel cache ([#&#8203;15030](https://redirect.github.com/astral-sh/uv/pull/15030))\n-
          Preserve lowered extra build dependencies ([#&#8203;15038](https://redirect.github.com/astral-sh/uv/pull/15038))\n\n#####
          Bug fixes\n\n- Add Python versions to markers implied from wheels ([#&#8203;14913](https://redirect.github.com/astral-sh/uv/pull/14913))\n-
          Ensure consistent indentation when adding dependencies ([#&#8203;14991](https://redirect.github.com/astral-sh/uv/pull/14991))\n-
          Fix handling of `python-preference = system` when managed interpreters are
          on the PATH ([#&#8203;15059](https://redirect.github.com/astral-sh/uv/pull/15059))\n-
          Fix symlink preservation in virtual environment creation ([#&#8203;14933](https://redirect.github.com/astral-sh/uv/pull/14933))\n-
          Gracefully handle entrypoint permission errors ([#&#8203;15026](https://redirect.github.com/astral-sh/uv/pull/15026))\n-
          Include wheel hashes from local Simple indexes ([#&#8203;14993](https://redirect.github.com/astral-sh/uv/pull/14993))\n-
          Prefer system Python installations over managed ones when `--system` is
          used ([#&#8203;15061](https://redirect.github.com/astral-sh/uv/pull/15061))\n-
          Remove retry wrapper when matching on error kind ([#&#8203;14996](https://redirect.github.com/astral-sh/uv/pull/14996))\n-
          Revert `h2` upgrade ([#&#8203;15079](https://redirect.github.com/astral-sh/uv/pull/15079))\n\n#####
          Documentation\n\n- Improve visibility of copy and line separator in dark
          mode ([#&#8203;14987](https://redirect.github.com/astral-sh/uv/pull/14987))\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
          tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR
          and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/osism/container-image-inventory-reconciler).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS41MS4xIiwidXBkYXRlZEluVmVyIjoiNDEuNzEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/osism/container-image-inventory-reconciler/pull/414
        commit_id: ef652d5e93119657f17f3db0da24c7ec8c17b549
        patchset: ef652d5e93119657f17f3db0da24c7ec8c17b549
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-inventory-reconciler
          name: osism/container-image-inventory-reconciler
          short_name: container-image-inventory-reconciler
        src_dir: src/github.com/osism/container-image-inventory-reconciler
        topic: null
      buildset: 2602a3fe991742f2826c568f3da7c783
      buildset_refs:
      - branch: main
        change: '414'
        change_message: "chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.8.12\n\nThis
          PR contains the following updates:\n\n| Package | Type | Update | Change
          |\n|---|---|---|---|\n| [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv)
          | stage | patch | `0.8.4` -> `0.8.12` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>astral-sh/uv
          (ghcr.io/astral-sh/uv)</summary>\n\n### [`v0.8.12`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0812)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.11...0.8.12)\n\n#####
          Python\n\n- Add 3.13.7\n- Improve performance of zstd in Python 3.14\n\nSee
          the [python-build-standalone release notes](https://redirect.github.com/astral-sh/python-build-standalone/releases/tag/20250818)
          for details.\n\n##### Enhancements\n\n- Add an `aarch64-pc-windows-msvc`
          target for `python-platform` ([#&#8203;15347](https://redirect.github.com/astral-sh/uv/pull/15347))\n-
          Add fallback parent process detection to `uv tool update-shell` ([#&#8203;15356](https://redirect.github.com/astral-sh/uv/pull/15356))\n-
          Install non-build-isolation packages in a second phase ([#&#8203;15306](https://redirect.github.com/astral-sh/uv/pull/15306))\n\n#####
          Bug fixes\n\n- Reject already-installed wheels built with outdated settings
          ([#&#8203;15289](https://redirect.github.com/astral-sh/uv/pull/15289))\n-
          Skip interpreters that are not found on query ([#&#8203;15315](https://redirect.github.com/astral-sh/uv/pull/15315))\n-
          Handle dotted package names in script path resolution ([#&#8203;15300](https://redirect.github.com/astral-sh/uv/pull/15300))\n-
          Reject `match-runtime = true` for dynamic packages ([#&#8203;15292](https://redirect.github.com/astral-sh/uv/pull/15292))\n\n#####
          Documentation\n\n- Document improvements to build-isolation setups ([#&#8203;15326](https://redirect.github.com/astral-sh/uv/pull/15326))\n-
          Fix reference documentation recommendation to use `uv cache clean` instead
          of `clear` ([#&#8203;15313](https://redirect.github.com/astral-sh/uv/pull/15313))\n\n###
          [`v0.8.11`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0811)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.10...0.8.11)\n\n#####
          Python\n\n- Add Python 3.14.0rc2\n- Update Pyodide to 0.28.1\n\n##### Enhancements\n\n-
          Add Debian 13 trixie to published Docker images ([#&#8203;15269](https://redirect.github.com/astral-sh/uv/pull/15269))\n-
          Add `extra-build-dependencies` hint for any missing module on build failure
          ([#&#8203;15252](https://redirect.github.com/astral-sh/uv/pull/15252))\n-
          Make 'v' prefix cyan in overlap warnings ([#&#8203;15259](https://redirect.github.com/astral-sh/uv/pull/15259))\n\n#####
          Bug fixes\n\n- Fix missing uv version in extended Docker image tags ([#&#8203;15263](https://redirect.github.com/astral-sh/uv/pull/15263))\n-
          Persist cache info when re-installing cached wheels ([#&#8203;15274](https://redirect.github.com/astral-sh/uv/pull/15274))\n\n#####
          Rust API\n\n- Allow passing custom `reqwest` clients to `RegistryClient`
          ([#&#8203;15281](https://redirect.github.com/astral-sh/uv/pull/15281))\n\n###
          [`v0.8.10`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0810)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.9...0.8.10)\n\n#####
          Python\n\n- Add support for installing Pyodide versions ([#&#8203;14518](https://redirect.github.com/astral-sh/uv/pull/14518))\n\n#####
          Enhancements\n\n- Allow Python requests with missing segments, e.g., just
          `aarch64` ([#&#8203;14399](https://redirect.github.com/astral-sh/uv/pull/14399))\n\n#####
          Preview\n\n- Move warnings for conflicting modules into preview ([#&#8203;15253](https://redirect.github.com/astral-sh/uv/pull/15253))\n\n###
          [`v0.8.9`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#089)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.8...0.8.9)\n\n#####
          Enhancements\n\n- Add `--reinstall` flag to `uv python upgrade` ([#&#8203;15194](https://redirect.github.com/astral-sh/uv/pull/15194))\n\n#####
          Bug fixes\n\n- Include build settings in cache key for registry source distribution
          lookups ([#&#8203;15225](https://redirect.github.com/astral-sh/uv/pull/15225))\n-
          Avoid creating bin links on `uv python upgrade` if they don't already exist
          ([#&#8203;15192](https://redirect.github.com/astral-sh/uv/pull/15192))\n-
          Respect system proxies on macOS and Windows ([#&#8203;15221](https://redirect.github.com/astral-sh/uv/pull/15221))\n\n#####
          Documentation\n\n- Add the 3.14 classifier ([#&#8203;15187](https://redirect.github.com/astral-sh/uv/pull/15187))\n\n###
          [`v0.8.8`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#088)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.7...0.8.8)\n\n#####
          Bug fixes\n\n- Fix `find_uv_bin` compatibility with Python <3.10 ([#&#8203;15177](https://redirect.github.com/astral-sh/uv/pull/15177))\n\n###
          [`v0.8.7`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#087)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.6...0.8.7)\n\n#####
          Python\n\n- On Mac/Linux, libtcl, libtk, and \\_tkinter are built as separate
          shared objects, which fixes matplotlib's `tkagg` backend (the default on
          Linux), Pillow's `PIL.ImageTk` library, and other extension modules that
          need to use libtcl/libtk directly.\n- Tix is no longer provided on Linux.
          This is a deprecated Tk extension that appears to have been previously broken.\n\nSee
          the [`python-build-standalone` release notes](https://redirect.github.com/astral-sh/python-build-standalone/releases/tag/20250808)
          for details.\n\n##### Enhancements\n\n- Do not update `uv.lock` when using
          `--isolated` ([#&#8203;15154](https://redirect.github.com/astral-sh/uv/pull/15154))\n-
          Add support for `--prefix` and `--with` installations in `find_uv_bin` ([#&#8203;14184](https://redirect.github.com/astral-sh/uv/pull/14184))\n-
          Add support for discovering base prefix installations in `find_uv_bin` ([#&#8203;14181](https://redirect.github.com/astral-sh/uv/pull/14181))\n-
          Improve error messages in `find_uv_bin` ([#&#8203;14182](https://redirect.github.com/astral-sh/uv/pull/14182))\n-
          Warn when two packages write to the same module ([#&#8203;13437](https://redirect.github.com/astral-sh/uv/pull/13437))\n\n#####
          Preview features\n\n- Add support for `package`-level conflicts in workspaces
          ([#&#8203;14906](https://redirect.github.com/astral-sh/uv/pull/14906))\n\n#####
          Configuration\n\n- Add `UV_DEV` and `UV_NO_DEV` environment variables (for
          `--dev` and `--no-dev`) ([#&#8203;15010](https://redirect.github.com/astral-sh/uv/pull/15010))\n\n#####
          Bug fixes\n\n- Fix regression where `--require-hashes` applied to build
          dependencies in `uv pip install` ([#&#8203;15153](https://redirect.github.com/astral-sh/uv/pull/15153))\n-
          Ignore GraalPy devtags ([#&#8203;15013](https://redirect.github.com/astral-sh/uv/pull/15013))\n-
          Include all site packages directories in ephemeral environment overlays
          ([#&#8203;15121](https://redirect.github.com/astral-sh/uv/pull/15121))\n-
          Search in the user scheme scripts directory last in `find_uv_bin` ([#&#8203;14191](https://redirect.github.com/astral-sh/uv/pull/14191))\n\n#####
          Documentation\n\n- Add missing periods (`.`) to list elements in `Features`
          docs page ([#&#8203;15138](https://redirect.github.com/astral-sh/uv/pull/15138))\n\n###
          [`v0.8.6`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#086)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.5...0.8.6)\n\nThis
          release contains hardening measures to address differentials in behavior
          between uv and Python's built-in ZIP parser ([CVE-2025-54368](https://redirect.github.com/astral-sh/uv/security/advisories/GHSA-8qf3-x8v5-2pj8)).\n\nPrior
          to this release, attackers could construct ZIP files that would be extracted
          differently by pip, uv, and other tools. As a result, ZIPs could be constructed
          that would be considered harmless by (e.g.) scanners, but contain a malicious
          payload when extracted by uv. As of v0.8.6, uv now applies additional checks
          to reject such ZIPs.\n\nThanks to a triage effort with the [Python Security
          Response Team](https://devguide.python.org/developer-workflow/psrt/) and
          PyPI maintainers, we were able to determine that these differentials **were
          not exploited** via PyPI during the time they were present. The PyPI team
          has also implemented similar checks and now guards against these parsing
          differentials on upload.\n\nAlthough the practical risk of exploitation
          is low, we take the *hypothetical* risk of parser differentials very seriously.
          Out of an abundance of caution, we have assigned this advisory a CVE identifier
          and have given it a \"moderate\" severity suggestion.\n\nThese changes have
          been validated against the top 15,000 PyPI packages; however, it's plausible
          that a non-malicious ZIP could be falsely rejected with this additional
          hardening. As an escape hatch, users who do encounter breaking changes can
          enable `UV_INSECURE_NO_ZIP_VALIDATION` to restore the previous behavior.
          If you encounter such a rejection, please file an issue in uv and to the
          upstream package.\n\nFor additional information, please refer to the following
          blog posts:\n\n- [Astral: uv security advisory: ZIP payload obfuscation](https://astral.sh/blog/uv-security-advisory-cve-2025-54368)\n-
          [PyPI: Preventing ZIP parser confusion attacks on Python package installers](https://blog.pypi.org/posts/2025-08-07-wheel-archive-confusion-attacks/)\n\n#####
          Security\n\n- Harden ZIP streaming to reject repeated entries and other
          malformed ZIP files ([#&#8203;15136](https://redirect.github.com/astral-sh/uv/pull/15136))\n\n#####
          Python\n\n- Add CPython 3.13.6\n\n##### Configuration\n\n- Add support for
          per-project build-time environment variables ([#&#8203;15095](https://redirect.github.com/astral-sh/uv/pull/15095))\n\n#####
          Bug fixes\n\n- Avoid invalid simplification with conflict markers  ([#&#8203;15041](https://redirect.github.com/astral-sh/uv/pull/15041))\n-
          Respect `UV_HTTP_RETRIES` in `uv publish` ([#&#8203;15106](https://redirect.github.com/astral-sh/uv/pull/15106))\n-
          Support `UV_NO_EDITABLE` where `--no-editable` is supported ([#&#8203;15107](https://redirect.github.com/astral-sh/uv/pull/15107))\n-
          Upgrade `cargo-dist` to add `UV_INSTALLER_URL` to PowerShell installer ([#&#8203;15114](https://redirect.github.com/astral-sh/uv/pull/15114))\n-
          Upgrade `h2` again to avoid `too_many_internal_resets` errors ([#&#8203;15111](https://redirect.github.com/astral-sh/uv/pull/15111))\n-
          Consider `pythonw` when copying entry points in uv run ([#&#8203;15134](https://redirect.github.com/astral-sh/uv/pull/15134))\n\n#####
          Documentation\n\n- Ensure symlink warning is shown ([#&#8203;15126](https://redirect.github.com/astral-sh/uv/pull/15126))\n\n###
          [`v0.8.5`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#085)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.4...0.8.5)\n\n#####
          Enhancements\n\n- Enable `uv run` with a GitHub Gist ([#&#8203;15058](https://redirect.github.com/astral-sh/uv/pull/15058))\n-
          Improve HTTP response caching log messages ([#&#8203;15067](https://redirect.github.com/astral-sh/uv/pull/15067))\n-
          Show wheel tag hints in install plan ([#&#8203;15066](https://redirect.github.com/astral-sh/uv/pull/15066))\n-
          Support installing additional executables in `uv tool install` ([#&#8203;14014](https://redirect.github.com/astral-sh/uv/pull/14014))\n\n#####
          Preview features\n\n- Enable extra build dependencies to 'match runtime'
          versions ([#&#8203;15036](https://redirect.github.com/astral-sh/uv/pull/15036))\n-
          Remove duplicate `extra-build-dependencies` warnings for `uv pip` ([#&#8203;15088](https://redirect.github.com/astral-sh/uv/pull/15088))\n-
          Use \"option\" instead of \"setting\" in `pylock` warning ([#&#8203;15089](https://redirect.github.com/astral-sh/uv/pull/15089))\n-
          Respect extra build requires when reading from wheel cache ([#&#8203;15030](https://redirect.github.com/astral-sh/uv/pull/15030))\n-
          Preserve lowered extra build dependencies ([#&#8203;15038](https://redirect.github.com/astral-sh/uv/pull/15038))\n\n#####
          Bug fixes\n\n- Add Python versions to markers implied from wheels ([#&#8203;14913](https://redirect.github.com/astral-sh/uv/pull/14913))\n-
          Ensure consistent indentation when adding dependencies ([#&#8203;14991](https://redirect.github.com/astral-sh/uv/pull/14991))\n-
          Fix handling of `python-preference = system` when managed interpreters are
          on the PATH ([#&#8203;15059](https://redirect.github.com/astral-sh/uv/pull/15059))\n-
          Fix symlink preservation in virtual environment creation ([#&#8203;14933](https://redirect.github.com/astral-sh/uv/pull/14933))\n-
          Gracefully handle entrypoint permission errors ([#&#8203;15026](https://redirect.github.com/astral-sh/uv/pull/15026))\n-
          Include wheel hashes from local Simple indexes ([#&#8203;14993](https://redirect.github.com/astral-sh/uv/pull/14993))\n-
          Prefer system Python installations over managed ones when `--system` is
          used ([#&#8203;15061](https://redirect.github.com/astral-sh/uv/pull/15061))\n-
          Remove retry wrapper when matching on error kind ([#&#8203;14996](https://redirect.github.com/astral-sh/uv/pull/14996))\n-
          Revert `h2` upgrade ([#&#8203;15079](https://redirect.github.com/astral-sh/uv/pull/15079))\n\n#####
          Documentation\n\n- Improve visibility of copy and line separator in dark
          mode ([#&#8203;14987](https://redirect.github.com/astral-sh/uv/pull/14987))\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
          tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR
          and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/osism/container-image-inventory-reconciler).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS41MS4xIiwidXBkYXRlZEluVmVyIjoiNDEuNzEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/osism/container-image-inventory-reconciler/pull/414
        commit_id: ef652d5e93119657f17f3db0da24c7ec8c17b549
        patchset: ef652d5e93119657f17f3db0da24c7ec8c17b549
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-inventory-reconciler
          name: osism/container-image-inventory-reconciler
          short_name: container-image-inventory-reconciler
        src_dir: src/github.com/osism/container-image-inventory-reconciler
        topic: null
      change: '414'
      change_message: "chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.8.12\n\nThis
        PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|
        [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv) | stage |
        patch | `0.8.4` -> `0.8.12` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>astral-sh/uv
        (ghcr.io/astral-sh/uv)</summary>\n\n### [`v0.8.12`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0812)\n\n[Compare
        Source](https://redirect.github.com/astral-sh/uv/compare/0.8.11...0.8.12)\n\n#####
        Python\n\n- Add 3.13.7\n- Improve performance of zstd in Python 3.14\n\nSee
        the [python-build-standalone release notes](https://redirect.github.com/astral-sh/python-build-standalone/releases/tag/20250818)
        for details.\n\n##### Enhancements\n\n- Add an `aarch64-pc-windows-msvc` target
        for `python-platform` ([#&#8203;15347](https://redirect.github.com/astral-sh/uv/pull/15347))\n-
        Add fallback parent process detection to `uv tool update-shell` ([#&#8203;15356](https://redirect.github.com/astral-sh/uv/pull/15356))\n-
        Install non-build-isolation packages in a second phase ([#&#8203;15306](https://redirect.github.com/astral-sh/uv/pull/15306))\n\n#####
        Bug fixes\n\n- Reject already-installed wheels built with outdated settings
        ([#&#8203;15289](https://redirect.github.com/astral-sh/uv/pull/15289))\n-
        Skip interpreters that are not found on query ([#&#8203;15315](https://redirect.github.com/astral-sh/uv/pull/15315))\n-
        Handle dotted package names in script path resolution ([#&#8203;15300](https://redirect.github.com/astral-sh/uv/pull/15300))\n-
        Reject `match-runtime = true` for dynamic packages ([#&#8203;15292](https://redirect.github.com/astral-sh/uv/pull/15292))\n\n#####
        Documentation\n\n- Document improvements to build-isolation setups ([#&#8203;15326](https://redirect.github.com/astral-sh/uv/pull/15326))\n-
        Fix reference documentation recommendation to use `uv cache clean` instead
        of `clear` ([#&#8203;15313](https://redirect.github.com/astral-sh/uv/pull/15313))\n\n###
        [`v0.8.11`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0811)\n\n[Compare
        Source](https://redirect.github.com/astral-sh/uv/compare/0.8.10...0.8.11)\n\n#####
        Python\n\n- Add Python 3.14.0rc2\n- Update Pyodide to 0.28.1\n\n##### Enhancements\n\n-
        Add Debian 13 trixie to published Docker images ([#&#8203;15269](https://redirect.github.com/astral-sh/uv/pull/15269))\n-
        Add `extra-build-dependencies` hint for any missing module on build failure
        ([#&#8203;15252](https://redirect.github.com/astral-sh/uv/pull/15252))\n-
        Make 'v' prefix cyan in overlap warnings ([#&#8203;15259](https://redirect.github.com/astral-sh/uv/pull/15259))\n\n#####
        Bug fixes\n\n- Fix missing uv version in extended Docker image tags ([#&#8203;15263](https://redirect.github.com/astral-sh/uv/pull/15263))\n-
        Persist cache info when re-installing cached wheels ([#&#8203;15274](https://redirect.github.com/astral-sh/uv/pull/15274))\n\n#####
        Rust API\n\n- Allow passing custom `reqwest` clients to `RegistryClient` ([#&#8203;15281](https://redirect.github.com/astral-sh/uv/pull/15281))\n\n###
        [`v0.8.10`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0810)\n\n[Compare
        Source](https://redirect.github.com/astral-sh/uv/compare/0.8.9...0.8.10)\n\n#####
        Python\n\n- Add support for installing Pyodide versions ([#&#8203;14518](https://redirect.github.com/astral-sh/uv/pull/14518))\n\n#####
        Enhancements\n\n- Allow Python requests with missing segments, e.g., just
        `aarch64` ([#&#8203;14399](https://redirect.github.com/astral-sh/uv/pull/14399))\n\n#####
        Preview\n\n- Move warnings for conflicting modules into preview ([#&#8203;15253](https://redirect.github.com/astral-sh/uv/pull/15253))\n\n###
        [`v0.8.9`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#089)\n\n[Compare
        Source](https://redirect.github.com/astral-sh/uv/compare/0.8.8...0.8.9)\n\n#####
        Enhancements\n\n- Add `--reinstall` flag to `uv python upgrade` ([#&#8203;15194](https://redirect.github.com/astral-sh/uv/pull/15194))\n\n#####
        Bug fixes\n\n- Include build settings in cache key for registry source distribution
        lookups ([#&#8203;15225](https://redirect.github.com/astral-sh/uv/pull/15225))\n-
        Avoid creating bin links on `uv python upgrade` if they don't already exist
        ([#&#8203;15192](https://redirect.github.com/astral-sh/uv/pull/15192))\n-
        Respect system proxies on macOS and Windows ([#&#8203;15221](https://redirect.github.com/astral-sh/uv/pull/15221))\n\n#####
        Documentation\n\n- Add the 3.14 classifier ([#&#8203;15187](https://redirect.github.com/astral-sh/uv/pull/15187))\n\n###
        [`v0.8.8`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#088)\n\n[Compare
        Source](https://redirect.github.com/astral-sh/uv/compare/0.8.7...0.8.8)\n\n#####
        Bug fixes\n\n- Fix `find_uv_bin` compatibility with Python <3.10 ([#&#8203;15177](https://redirect.github.com/astral-sh/uv/pull/15177))\n\n###
        [`v0.8.7`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#087)\n\n[Compare
        Source](https://redirect.github.com/astral-sh/uv/compare/0.8.6...0.8.7)\n\n#####
        Python\n\n- On Mac/Linux, libtcl, libtk, and \\_tkinter are built as separate
        shared objects, which fixes matplotlib's `tkagg` backend (the default on Linux),
        Pillow's `PIL.ImageTk` library, and other extension modules that need to use
        libtcl/libtk directly.\n- Tix is no longer provided on Linux. This is a deprecated
        Tk extension that appears to have been previously broken.\n\nSee the [`python-build-standalone`
        release notes](https://redirect.github.com/astral-sh/python-build-standalone/releases/tag/20250808)
        for details.\n\n##### Enhancements\n\n- Do not update `uv.lock` when using
        `--isolated` ([#&#8203;15154](https://redirect.github.com/astral-sh/uv/pull/15154))\n-
        Add support for `--prefix` and `--with` installations in `find_uv_bin` ([#&#8203;14184](https://redirect.github.com/astral-sh/uv/pull/14184))\n-
        Add support for discovering base prefix installations in `find_uv_bin` ([#&#8203;14181](https://redirect.github.com/astral-sh/uv/pull/14181))\n-
        Improve error messages in `find_uv_bin` ([#&#8203;14182](https://redirect.github.com/astral-sh/uv/pull/14182))\n-
        Warn when two packages write to the same module ([#&#8203;13437](https://redirect.github.com/astral-sh/uv/pull/13437))\n\n#####
        Preview features\n\n- Add support for `package`-level conflicts in workspaces
        ([#&#8203;14906](https://redirect.github.com/astral-sh/uv/pull/14906))\n\n#####
        Configuration\n\n- Add `UV_DEV` and `UV_NO_DEV` environment variables (for
        `--dev` and `--no-dev`) ([#&#8203;15010](https://redirect.github.com/astral-sh/uv/pull/15010))\n\n#####
        Bug fixes\n\n- Fix regression where `--require-hashes` applied to build dependencies
        in `uv pip install` ([#&#8203;15153](https://redirect.github.com/astral-sh/uv/pull/15153))\n-
        Ignore GraalPy devtags ([#&#8203;15013](https://redirect.github.com/astral-sh/uv/pull/15013))\n-
        Include all site packages directories in ephemeral environment overlays ([#&#8203;15121](https://redirect.github.com/astral-sh/uv/pull/15121))\n-
        Search in the user scheme scripts directory last in `find_uv_bin` ([#&#8203;14191](https://redirect.github.com/astral-sh/uv/pull/14191))\n\n#####
        Documentation\n\n- Add missing periods (`.`) to list elements in `Features`
        docs page ([#&#8203;15138](https://redirect.github.com/astral-sh/uv/pull/15138))\n\n###
        [`v0.8.6`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#086)\n\n[Compare
        Source](https://redirect.github.com/astral-sh/uv/compare/0.8.5...0.8.6)\n\nThis
        release contains hardening measures to address differentials in behavior between
        uv and Python's built-in ZIP parser ([CVE-2025-54368](https://redirect.github.com/astral-sh/uv/security/advisories/GHSA-8qf3-x8v5-2pj8)).\n\nPrior
        to this release, attackers could construct ZIP files that would be extracted
        differently by pip, uv, and other tools. As a result, ZIPs could be constructed
        that would be considered harmless by (e.g.) scanners, but contain a malicious
        payload when extracted by uv. As of v0.8.6, uv now applies additional checks
        to reject such ZIPs.\n\nThanks to a triage effort with the [Python Security
        Response Team](https://devguide.python.org/developer-workflow/psrt/) and PyPI
        maintainers, we were able to determine that these differentials **were not
        exploited** via PyPI during the time they were present. The PyPI team has
        also implemented similar checks and now guards against these parsing differentials
        on upload.\n\nAlthough the practical risk of exploitation is low, we take
        the *hypothetical* risk of parser differentials very seriously. Out of an
        abundance of caution, we have assigned this advisory a CVE identifier and
        have given it a \"moderate\" severity suggestion.\n\nThese changes have been
        validated against the top 15,000 PyPI packages; however, it's plausible that
        a non-malicious ZIP could be falsely rejected with this additional hardening.
        As an escape hatch, users who do encounter breaking changes can enable `UV_INSECURE_NO_ZIP_VALIDATION`
        to restore the previous behavior. If you encounter such a rejection, please
        file an issue in uv and to the upstream package.\n\nFor additional information,
        please refer to the following blog posts:\n\n- [Astral: uv security advisory:
        ZIP payload obfuscation](https://astral.sh/blog/uv-security-advisory-cve-2025-54368)\n-
        [PyPI: Preventing ZIP parser confusion attacks on Python package installers](https://blog.pypi.org/posts/2025-08-07-wheel-archive-confusion-attacks/)\n\n#####
        Security\n\n- Harden ZIP streaming to reject repeated entries and other malformed
        ZIP files ([#&#8203;15136](https://redirect.github.com/astral-sh/uv/pull/15136))\n\n#####
        Python\n\n- Add CPython 3.13.6\n\n##### Configuration\n\n- Add support for
        per-project build-time environment variables ([#&#8203;15095](https://redirect.github.com/astral-sh/uv/pull/15095))\n\n#####
        Bug fixes\n\n- Avoid invalid simplification with conflict markers  ([#&#8203;15041](https://redirect.github.com/astral-sh/uv/pull/15041))\n-
        Respect `UV_HTTP_RETRIES` in `uv publish` ([#&#8203;15106](https://redirect.github.com/astral-sh/uv/pull/15106))\n-
        Support `UV_NO_EDITABLE` where `--no-editable` is supported ([#&#8203;15107](https://redirect.github.com/astral-sh/uv/pull/15107))\n-
        Upgrade `cargo-dist` to add `UV_INSTALLER_URL` to PowerShell installer ([#&#8203;15114](https://redirect.github.com/astral-sh/uv/pull/15114))\n-
        Upgrade `h2` again to avoid `too_many_internal_resets` errors ([#&#8203;15111](https://redirect.github.com/astral-sh/uv/pull/15111))\n-
        Consider `pythonw` when copying entry points in uv run ([#&#8203;15134](https://redirect.github.com/astral-sh/uv/pull/15134))\n\n#####
        Documentation\n\n- Ensure symlink warning is shown ([#&#8203;15126](https://redirect.github.com/astral-sh/uv/pull/15126))\n\n###
        [`v0.8.5`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#085)\n\n[Compare
        Source](https://redirect.github.com/astral-sh/uv/compare/0.8.4...0.8.5)\n\n#####
        Enhancements\n\n- Enable `uv run` with a GitHub Gist ([#&#8203;15058](https://redirect.github.com/astral-sh/uv/pull/15058))\n-
        Improve HTTP response caching log messages ([#&#8203;15067](https://redirect.github.com/astral-sh/uv/pull/15067))\n-
        Show wheel tag hints in install plan ([#&#8203;15066](https://redirect.github.com/astral-sh/uv/pull/15066))\n-
        Support installing additional executables in `uv tool install` ([#&#8203;14014](https://redirect.github.com/astral-sh/uv/pull/14014))\n\n#####
        Preview features\n\n- Enable extra build dependencies to 'match runtime' versions
        ([#&#8203;15036](https://redirect.github.com/astral-sh/uv/pull/15036))\n-
        Remove duplicate `extra-build-dependencies` warnings for `uv pip` ([#&#8203;15088](https://redirect.github.com/astral-sh/uv/pull/15088))\n-
        Use \"option\" instead of \"setting\" in `pylock` warning ([#&#8203;15089](https://redirect.github.com/astral-sh/uv/pull/15089))\n-
        Respect extra build requires when reading from wheel cache ([#&#8203;15030](https://redirect.github.com/astral-sh/uv/pull/15030))\n-
        Preserve lowered extra build dependencies ([#&#8203;15038](https://redirect.github.com/astral-sh/uv/pull/15038))\n\n#####
        Bug fixes\n\n- Add Python versions to markers implied from wheels ([#&#8203;14913](https://redirect.github.com/astral-sh/uv/pull/14913))\n-
        Ensure consistent indentation when adding dependencies ([#&#8203;14991](https://redirect.github.com/astral-sh/uv/pull/14991))\n-
        Fix handling of `python-preference = system` when managed interpreters are
        on the PATH ([#&#8203;15059](https://redirect.github.com/astral-sh/uv/pull/15059))\n-
        Fix symlink preservation in virtual environment creation ([#&#8203;14933](https://redirect.github.com/astral-sh/uv/pull/14933))\n-
        Gracefully handle entrypoint permission errors ([#&#8203;15026](https://redirect.github.com/astral-sh/uv/pull/15026))\n-
        Include wheel hashes from local Simple indexes ([#&#8203;14993](https://redirect.github.com/astral-sh/uv/pull/14993))\n-
        Prefer system Python installations over managed ones when `--system` is used
        ([#&#8203;15061](https://redirect.github.com/astral-sh/uv/pull/15061))\n-
        Remove retry wrapper when matching on error kind ([#&#8203;14996](https://redirect.github.com/astral-sh/uv/pull/14996))\n-
        Revert `h2` upgrade ([#&#8203;15079](https://redirect.github.com/astral-sh/uv/pull/15079))\n\n#####
        Documentation\n\n- Improve visibility of copy and line separator in dark mode
        ([#&#8203;14987](https://redirect.github.com/astral-sh/uv/pull/14987))\n\n</details>\n\n---\n\n###
        Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time (no
        schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
        **Automerge**: Disabled by config. Please merge this manually once you are
        satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
        tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR and
        you won't be reminded about this update again.\n\n---\n\n - [ ] <!-- rebase-check
        -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was
        generated by [Mend Renovate](https://mend.io/renovate/). View the [repository
        job log](https://developer.mend.io/github/osism/container-image-inventory-reconciler).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS41MS4xIiwidXBkYXRlZEluVmVyIjoiNDEuNzEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
      change_url: https://github.com/osism/container-image-inventory-reconciler/pull/414
      child_jobs: []
      commit_id: ef652d5e93119657f17f3db0da24c7ec8c17b549
      event_id: 9a627570-7ca4-11f0-855d-7dd56d559917
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/42145006b3a045c3af1552de66d8dcf1/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/42145006b3a045c3af1552de66d8dcf1/work/logs
        result_data_file: /var/lib/zuul/builds/42145006b3a045c3af1552de66d8dcf1/work/results.json
        src_root: /var/lib/zuul/builds/42145006b3a045c3af1552de66d8dcf1/work/src
        work_root: /var/lib/zuul/builds/42145006b3a045c3af1552de66d8dcf1/work
      include_vars: []
      items:
      - branch: main
        change: '414'
        change_message: "chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.8.12\n\nThis
          PR contains the following updates:\n\n| Package | Type | Update | Change
          |\n|---|---|---|---|\n| [ghcr.io/astral-sh/uv](https://redirect.github.com/astral-sh/uv)
          | stage | patch | `0.8.4` -> `0.8.12` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>astral-sh/uv
          (ghcr.io/astral-sh/uv)</summary>\n\n### [`v0.8.12`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0812)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.11...0.8.12)\n\n#####
          Python\n\n- Add 3.13.7\n- Improve performance of zstd in Python 3.14\n\nSee
          the [python-build-standalone release notes](https://redirect.github.com/astral-sh/python-build-standalone/releases/tag/20250818)
          for details.\n\n##### Enhancements\n\n- Add an `aarch64-pc-windows-msvc`
          target for `python-platform` ([#&#8203;15347](https://redirect.github.com/astral-sh/uv/pull/15347))\n-
          Add fallback parent process detection to `uv tool update-shell` ([#&#8203;15356](https://redirect.github.com/astral-sh/uv/pull/15356))\n-
          Install non-build-isolation packages in a second phase ([#&#8203;15306](https://redirect.github.com/astral-sh/uv/pull/15306))\n\n#####
          Bug fixes\n\n- Reject already-installed wheels built with outdated settings
          ([#&#8203;15289](https://redirect.github.com/astral-sh/uv/pull/15289))\n-
          Skip interpreters that are not found on query ([#&#8203;15315](https://redirect.github.com/astral-sh/uv/pull/15315))\n-
          Handle dotted package names in script path resolution ([#&#8203;15300](https://redirect.github.com/astral-sh/uv/pull/15300))\n-
          Reject `match-runtime = true` for dynamic packages ([#&#8203;15292](https://redirect.github.com/astral-sh/uv/pull/15292))\n\n#####
          Documentation\n\n- Document improvements to build-isolation setups ([#&#8203;15326](https://redirect.github.com/astral-sh/uv/pull/15326))\n-
          Fix reference documentation recommendation to use `uv cache clean` instead
          of `clear` ([#&#8203;15313](https://redirect.github.com/astral-sh/uv/pull/15313))\n\n###
          [`v0.8.11`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0811)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.10...0.8.11)\n\n#####
          Python\n\n- Add Python 3.14.0rc2\n- Update Pyodide to 0.28.1\n\n##### Enhancements\n\n-
          Add Debian 13 trixie to published Docker images ([#&#8203;15269](https://redirect.github.com/astral-sh/uv/pull/15269))\n-
          Add `extra-build-dependencies` hint for any missing module on build failure
          ([#&#8203;15252](https://redirect.github.com/astral-sh/uv/pull/15252))\n-
          Make 'v' prefix cyan in overlap warnings ([#&#8203;15259](https://redirect.github.com/astral-sh/uv/pull/15259))\n\n#####
          Bug fixes\n\n- Fix missing uv version in extended Docker image tags ([#&#8203;15263](https://redirect.github.com/astral-sh/uv/pull/15263))\n-
          Persist cache info when re-installing cached wheels ([#&#8203;15274](https://redirect.github.com/astral-sh/uv/pull/15274))\n\n#####
          Rust API\n\n- Allow passing custom `reqwest` clients to `RegistryClient`
          ([#&#8203;15281](https://redirect.github.com/astral-sh/uv/pull/15281))\n\n###
          [`v0.8.10`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#0810)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.9...0.8.10)\n\n#####
          Python\n\n- Add support for installing Pyodide versions ([#&#8203;14518](https://redirect.github.com/astral-sh/uv/pull/14518))\n\n#####
          Enhancements\n\n- Allow Python requests with missing segments, e.g., just
          `aarch64` ([#&#8203;14399](https://redirect.github.com/astral-sh/uv/pull/14399))\n\n#####
          Preview\n\n- Move warnings for conflicting modules into preview ([#&#8203;15253](https://redirect.github.com/astral-sh/uv/pull/15253))\n\n###
          [`v0.8.9`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#089)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.8...0.8.9)\n\n#####
          Enhancements\n\n- Add `--reinstall` flag to `uv python upgrade` ([#&#8203;15194](https://redirect.github.com/astral-sh/uv/pull/15194))\n\n#####
          Bug fixes\n\n- Include build settings in cache key for registry source distribution
          lookups ([#&#8203;15225](https://redirect.github.com/astral-sh/uv/pull/15225))\n-
          Avoid creating bin links on `uv python upgrade` if they don't already exist
          ([#&#8203;15192](https://redirect.github.com/astral-sh/uv/pull/15192))\n-
          Respect system proxies on macOS and Windows ([#&#8203;15221](https://redirect.github.com/astral-sh/uv/pull/15221))\n\n#####
          Documentation\n\n- Add the 3.14 classifier ([#&#8203;15187](https://redirect.github.com/astral-sh/uv/pull/15187))\n\n###
          [`v0.8.8`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#088)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.7...0.8.8)\n\n#####
          Bug fixes\n\n- Fix `find_uv_bin` compatibility with Python <3.10 ([#&#8203;15177](https://redirect.github.com/astral-sh/uv/pull/15177))\n\n###
          [`v0.8.7`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#087)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.6...0.8.7)\n\n#####
          Python\n\n- On Mac/Linux, libtcl, libtk, and \\_tkinter are built as separate
          shared objects, which fixes matplotlib's `tkagg` backend (the default on
          Linux), Pillow's `PIL.ImageTk` library, and other extension modules that
          need to use libtcl/libtk directly.\n- Tix is no longer provided on Linux.
          This is a deprecated Tk extension that appears to have been previously broken.\n\nSee
          the [`python-build-standalone` release notes](https://redirect.github.com/astral-sh/python-build-standalone/releases/tag/20250808)
          for details.\n\n##### Enhancements\n\n- Do not update `uv.lock` when using
          `--isolated` ([#&#8203;15154](https://redirect.github.com/astral-sh/uv/pull/15154))\n-
          Add support for `--prefix` and `--with` installations in `find_uv_bin` ([#&#8203;14184](https://redirect.github.com/astral-sh/uv/pull/14184))\n-
          Add support for discovering base prefix installations in `find_uv_bin` ([#&#8203;14181](https://redirect.github.com/astral-sh/uv/pull/14181))\n-
          Improve error messages in `find_uv_bin` ([#&#8203;14182](https://redirect.github.com/astral-sh/uv/pull/14182))\n-
          Warn when two packages write to the same module ([#&#8203;13437](https://redirect.github.com/astral-sh/uv/pull/13437))\n\n#####
          Preview features\n\n- Add support for `package`-level conflicts in workspaces
          ([#&#8203;14906](https://redirect.github.com/astral-sh/uv/pull/14906))\n\n#####
          Configuration\n\n- Add `UV_DEV` and `UV_NO_DEV` environment variables (for
          `--dev` and `--no-dev`) ([#&#8203;15010](https://redirect.github.com/astral-sh/uv/pull/15010))\n\n#####
          Bug fixes\n\n- Fix regression where `--require-hashes` applied to build
          dependencies in `uv pip install` ([#&#8203;15153](https://redirect.github.com/astral-sh/uv/pull/15153))\n-
          Ignore GraalPy devtags ([#&#8203;15013](https://redirect.github.com/astral-sh/uv/pull/15013))\n-
          Include all site packages directories in ephemeral environment overlays
          ([#&#8203;15121](https://redirect.github.com/astral-sh/uv/pull/15121))\n-
          Search in the user scheme scripts directory last in `find_uv_bin` ([#&#8203;14191](https://redirect.github.com/astral-sh/uv/pull/14191))\n\n#####
          Documentation\n\n- Add missing periods (`.`) to list elements in `Features`
          docs page ([#&#8203;15138](https://redirect.github.com/astral-sh/uv/pull/15138))\n\n###
          [`v0.8.6`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#086)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.5...0.8.6)\n\nThis
          release contains hardening measures to address differentials in behavior
          between uv and Python's built-in ZIP parser ([CVE-2025-54368](https://redirect.github.com/astral-sh/uv/security/advisories/GHSA-8qf3-x8v5-2pj8)).\n\nPrior
          to this release, attackers could construct ZIP files that would be extracted
          differently by pip, uv, and other tools. As a result, ZIPs could be constructed
          that would be considered harmless by (e.g.) scanners, but contain a malicious
          payload when extracted by uv. As of v0.8.6, uv now applies additional checks
          to reject such ZIPs.\n\nThanks to a triage effort with the [Python Security
          Response Team](https://devguide.python.org/developer-workflow/psrt/) and
          PyPI maintainers, we were able to determine that these differentials **were
          not exploited** via PyPI during the time they were present. The PyPI team
          has also implemented similar checks and now guards against these parsing
          differentials on upload.\n\nAlthough the practical risk of exploitation
          is low, we take the *hypothetical* risk of parser differentials very seriously.
          Out of an abundance of caution, we have assigned this advisory a CVE identifier
          and have given it a \"moderate\" severity suggestion.\n\nThese changes have
          been validated against the top 15,000 PyPI packages; however, it's plausible
          that a non-malicious ZIP could be falsely rejected with this additional
          hardening. As an escape hatch, users who do encounter breaking changes can
          enable `UV_INSECURE_NO_ZIP_VALIDATION` to restore the previous behavior.
          If you encounter such a rejection, please file an issue in uv and to the
          upstream package.\n\nFor additional information, please refer to the following
          blog posts:\n\n- [Astral: uv security advisory: ZIP payload obfuscation](https://astral.sh/blog/uv-security-advisory-cve-2025-54368)\n-
          [PyPI: Preventing ZIP parser confusion attacks on Python package installers](https://blog.pypi.org/posts/2025-08-07-wheel-archive-confusion-attacks/)\n\n#####
          Security\n\n- Harden ZIP streaming to reject repeated entries and other
          malformed ZIP files ([#&#8203;15136](https://redirect.github.com/astral-sh/uv/pull/15136))\n\n#####
          Python\n\n- Add CPython 3.13.6\n\n##### Configuration\n\n- Add support for
          per-project build-time environment variables ([#&#8203;15095](https://redirect.github.com/astral-sh/uv/pull/15095))\n\n#####
          Bug fixes\n\n- Avoid invalid simplification with conflict markers  ([#&#8203;15041](https://redirect.github.com/astral-sh/uv/pull/15041))\n-
          Respect `UV_HTTP_RETRIES` in `uv publish` ([#&#8203;15106](https://redirect.github.com/astral-sh/uv/pull/15106))\n-
          Support `UV_NO_EDITABLE` where `--no-editable` is supported ([#&#8203;15107](https://redirect.github.com/astral-sh/uv/pull/15107))\n-
          Upgrade `cargo-dist` to add `UV_INSTALLER_URL` to PowerShell installer ([#&#8203;15114](https://redirect.github.com/astral-sh/uv/pull/15114))\n-
          Upgrade `h2` again to avoid `too_many_internal_resets` errors ([#&#8203;15111](https://redirect.github.com/astral-sh/uv/pull/15111))\n-
          Consider `pythonw` when copying entry points in uv run ([#&#8203;15134](https://redirect.github.com/astral-sh/uv/pull/15134))\n\n#####
          Documentation\n\n- Ensure symlink warning is shown ([#&#8203;15126](https://redirect.github.com/astral-sh/uv/pull/15126))\n\n###
          [`v0.8.5`](https://redirect.github.com/astral-sh/uv/blob/HEAD/CHANGELOG.md#085)\n\n[Compare
          Source](https://redirect.github.com/astral-sh/uv/compare/0.8.4...0.8.5)\n\n#####
          Enhancements\n\n- Enable `uv run` with a GitHub Gist ([#&#8203;15058](https://redirect.github.com/astral-sh/uv/pull/15058))\n-
          Improve HTTP response caching log messages ([#&#8203;15067](https://redirect.github.com/astral-sh/uv/pull/15067))\n-
          Show wheel tag hints in install plan ([#&#8203;15066](https://redirect.github.com/astral-sh/uv/pull/15066))\n-
          Support installing additional executables in `uv tool install` ([#&#8203;14014](https://redirect.github.com/astral-sh/uv/pull/14014))\n\n#####
          Preview features\n\n- Enable extra build dependencies to 'match runtime'
          versions ([#&#8203;15036](https://redirect.github.com/astral-sh/uv/pull/15036))\n-
          Remove duplicate `extra-build-dependencies` warnings for `uv pip` ([#&#8203;15088](https://redirect.github.com/astral-sh/uv/pull/15088))\n-
          Use \"option\" instead of \"setting\" in `pylock` warning ([#&#8203;15089](https://redirect.github.com/astral-sh/uv/pull/15089))\n-
          Respect extra build requires when reading from wheel cache ([#&#8203;15030](https://redirect.github.com/astral-sh/uv/pull/15030))\n-
          Preserve lowered extra build dependencies ([#&#8203;15038](https://redirect.github.com/astral-sh/uv/pull/15038))\n\n#####
          Bug fixes\n\n- Add Python versions to markers implied from wheels ([#&#8203;14913](https://redirect.github.com/astral-sh/uv/pull/14913))\n-
          Ensure consistent indentation when adding dependencies ([#&#8203;14991](https://redirect.github.com/astral-sh/uv/pull/14991))\n-
          Fix handling of `python-preference = system` when managed interpreters are
          on the PATH ([#&#8203;15059](https://redirect.github.com/astral-sh/uv/pull/15059))\n-
          Fix symlink preservation in virtual environment creation ([#&#8203;14933](https://redirect.github.com/astral-sh/uv/pull/14933))\n-
          Gracefully handle entrypoint permission errors ([#&#8203;15026](https://redirect.github.com/astral-sh/uv/pull/15026))\n-
          Include wheel hashes from local Simple indexes ([#&#8203;14993](https://redirect.github.com/astral-sh/uv/pull/14993))\n-
          Prefer system Python installations over managed ones when `--system` is
          used ([#&#8203;15061](https://redirect.github.com/astral-sh/uv/pull/15061))\n-
          Remove retry wrapper when matching on error kind ([#&#8203;14996](https://redirect.github.com/astral-sh/uv/pull/14996))\n-
          Revert `h2` upgrade ([#&#8203;15079](https://redirect.github.com/astral-sh/uv/pull/15079))\n\n#####
          Documentation\n\n- Improve visibility of copy and line separator in dark
          mode ([#&#8203;14987](https://redirect.github.com/astral-sh/uv/pull/14987))\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
          tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR
          and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/osism/container-image-inventory-reconciler).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS41MS4xIiwidXBkYXRlZEluVmVyIjoiNDEuNzEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/osism/container-image-inventory-reconciler/pull/414
        commit_id: ef652d5e93119657f17f3db0da24c7ec8c17b549
        patchset: ef652d5e93119657f17f3db0da24c7ec8c17b549
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-inventory-reconciler
          name: osism/container-image-inventory-reconciler
          short_name: container-image-inventory-reconciler
          src_dir: src/github.com/osism/container-image-inventory-reconciler
        topic: null
      job: ansible-lint
      jobtags: []
      max_attempts: 3
      message: Y2hvcmUoZGVwcyk6IHVwZGF0ZSBnaGNyLmlvL2FzdHJhbC1zaC91diBkb2NrZXIgdGFnIHRvIHYwLjguMTIKClRoaXMgUFIgY29udGFpbnMgdGhlIGZvbGxvd2luZyB1cGRhdGVzOgoKfCBQYWNrYWdlIHwgVHlwZSB8IFVwZGF0ZSB8IENoYW5nZSB8CnwtLS18LS0tfC0tLXwtLS18CnwgW2doY3IuaW8vYXN0cmFsLXNoL3V2XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2KSB8IHN0YWdlIHwgcGF0Y2ggfCBgMC44LjRgIC0+IGAwLjguMTJgIHwKCi0tLQoKIyMjIFJlbGVhc2UgTm90ZXMKCjxkZXRhaWxzPgo8c3VtbWFyeT5hc3RyYWwtc2gvdXYgKGdoY3IuaW8vYXN0cmFsLXNoL3V2KTwvc3VtbWFyeT4KCiMjIyBbYHYwLjguMTJgXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L2Jsb2IvSEVBRC9DSEFOR0VMT0cubWQjMDgxMikKCltDb21wYXJlIFNvdXJjZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9jb21wYXJlLzAuOC4xMS4uLjAuOC4xMikKCiMjIyMjIFB5dGhvbgoKLSBBZGQgMy4xMy43Ci0gSW1wcm92ZSBwZXJmb3JtYW5jZSBvZiB6c3RkIGluIFB5dGhvbiAzLjE0CgpTZWUgdGhlIFtweXRob24tYnVpbGQtc3RhbmRhbG9uZSByZWxlYXNlIG5vdGVzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3B5dGhvbi1idWlsZC1zdGFuZGFsb25lL3JlbGVhc2VzL3RhZy8yMDI1MDgxOCkgZm9yIGRldGFpbHMuCgojIyMjIyBFbmhhbmNlbWVudHMKCi0gQWRkIGFuIGBhYXJjaDY0LXBjLXdpbmRvd3MtbXN2Y2AgdGFyZ2V0IGZvciBgcHl0aG9uLXBsYXRmb3JtYCAoWyMmIzgyMDM7MTUzNDddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNTM0NykpCi0gQWRkIGZhbGxiYWNrIHBhcmVudCBwcm9jZXNzIGRldGVjdGlvbiB0byBgdXYgdG9vbCB1cGRhdGUtc2hlbGxgIChbIyYjODIwMzsxNTM1Nl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9wdWxsLzE1MzU2KSkKLSBJbnN0YWxsIG5vbi1idWlsZC1pc29sYXRpb24gcGFja2FnZXMgaW4gYSBzZWNvbmQgcGhhc2UgKFsjJiM4MjAzOzE1MzA2XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTUzMDYpKQoKIyMjIyMgQnVnIGZpeGVzCgotIFJlamVjdCBhbHJlYWR5LWluc3RhbGxlZCB3aGVlbHMgYnVpbHQgd2l0aCBvdXRkYXRlZCBzZXR0aW5ncyAoWyMmIzgyMDM7MTUyODldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNTI4OSkpCi0gU2tpcCBpbnRlcnByZXRlcnMgdGhhdCBhcmUgbm90IGZvdW5kIG9uIHF1ZXJ5IChbIyYjODIwMzsxNTMxNV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9wdWxsLzE1MzE1KSkKLSBIYW5kbGUgZG90dGVkIHBhY2thZ2UgbmFtZXMgaW4gc2NyaXB0IHBhdGggcmVzb2x1dGlvbiAoWyMmIzgyMDM7MTUzMDBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNTMwMCkpCi0gUmVqZWN0IGBtYXRjaC1ydW50aW1lID0gdHJ1ZWAgZm9yIGR5bmFtaWMgcGFja2FnZXMgKFsjJiM4MjAzOzE1MjkyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTUyOTIpKQoKIyMjIyMgRG9jdW1lbnRhdGlvbgoKLSBEb2N1bWVudCBpbXByb3ZlbWVudHMgdG8gYnVpbGQtaXNvbGF0aW9uIHNldHVwcyAoWyMmIzgyMDM7MTUzMjZdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNTMyNikpCi0gRml4IHJlZmVyZW5jZSBkb2N1bWVudGF0aW9uIHJlY29tbWVuZGF0aW9uIHRvIHVzZSBgdXYgY2FjaGUgY2xlYW5gIGluc3RlYWQgb2YgYGNsZWFyYCAoWyMmIzgyMDM7MTUzMTNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNTMxMykpCgojIyMgW2B2MC44LjExYF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9ibG9iL0hFQUQvQ0hBTkdFTE9HLm1kIzA4MTEpCgpbQ29tcGFyZSBTb3VyY2VdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvY29tcGFyZS8wLjguMTAuLi4wLjguMTEpCgojIyMjIyBQeXRob24KCi0gQWRkIFB5dGhvbiAzLjE0LjByYzIKLSBVcGRhdGUgUHlvZGlkZSB0byAwLjI4LjEKCiMjIyMjIEVuaGFuY2VtZW50cwoKLSBBZGQgRGViaWFuIDEzIHRyaXhpZSB0byBwdWJsaXNoZWQgRG9ja2VyIGltYWdlcyAoWyMmIzgyMDM7MTUyNjldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNTI2OSkpCi0gQWRkIGBleHRyYS1idWlsZC1kZXBlbmRlbmNpZXNgIGhpbnQgZm9yIGFueSBtaXNzaW5nIG1vZHVsZSBvbiBidWlsZCBmYWlsdXJlIChbIyYjODIwMzsxNTI1Ml0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9wdWxsLzE1MjUyKSkKLSBNYWtlICd2JyBwcmVmaXggY3lhbiBpbiBvdmVybGFwIHdhcm5pbmdzIChbIyYjODIwMzsxNTI1OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9wdWxsLzE1MjU5KSkKCiMjIyMjIEJ1ZyBmaXhlcwoKLSBGaXggbWlzc2luZyB1diB2ZXJzaW9uIGluIGV4dGVuZGVkIERvY2tlciBpbWFnZSB0YWdzIChbIyYjODIwMzsxNTI2M10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9wdWxsLzE1MjYzKSkKLSBQZXJzaXN0IGNhY2hlIGluZm8gd2hlbiByZS1pbnN0YWxsaW5nIGNhY2hlZCB3aGVlbHMgKFsjJiM4MjAzOzE1Mjc0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTUyNzQpKQoKIyMjIyMgUnVzdCBBUEkKCi0gQWxsb3cgcGFzc2luZyBjdXN0b20gYHJlcXdlc3RgIGNsaWVudHMgdG8gYFJlZ2lzdHJ5Q2xpZW50YCAoWyMmIzgyMDM7MTUyODFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNTI4MSkpCgojIyMgW2B2MC44LjEwYF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9ibG9iL0hFQUQvQ0hBTkdFTE9HLm1kIzA4MTApCgpbQ29tcGFyZSBTb3VyY2VdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvY29tcGFyZS8wLjguOS4uLjAuOC4xMCkKCiMjIyMjIFB5dGhvbgoKLSBBZGQgc3VwcG9ydCBmb3IgaW5zdGFsbGluZyBQeW9kaWRlIHZlcnNpb25zIChbIyYjODIwMzsxNDUxOF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9wdWxsLzE0NTE4KSkKCiMjIyMjIEVuaGFuY2VtZW50cwoKLSBBbGxvdyBQeXRob24gcmVxdWVzdHMgd2l0aCBtaXNzaW5nIHNlZ21lbnRzLCBlLmcuLCBqdXN0IGBhYXJjaDY0YCAoWyMmIzgyMDM7MTQzOTldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNDM5OSkpCgojIyMjIyBQcmV2aWV3CgotIE1vdmUgd2FybmluZ3MgZm9yIGNvbmZsaWN0aW5nIG1vZHVsZXMgaW50byBwcmV2aWV3IChbIyYjODIwMzsxNTI1M10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9wdWxsLzE1MjUzKSkKCiMjIyBbYHYwLjguOWBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvYmxvYi9IRUFEL0NIQU5HRUxPRy5tZCMwODkpCgpbQ29tcGFyZSBTb3VyY2VdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvY29tcGFyZS8wLjguOC4uLjAuOC45KQoKIyMjIyMgRW5oYW5jZW1lbnRzCgotIEFkZCBgLS1yZWluc3RhbGxgIGZsYWcgdG8gYHV2IHB5dGhvbiB1cGdyYWRlYCAoWyMmIzgyMDM7MTUxOTRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNTE5NCkpCgojIyMjIyBCdWcgZml4ZXMKCi0gSW5jbHVkZSBidWlsZCBzZXR0aW5ncyBpbiBjYWNoZSBrZXkgZm9yIHJlZ2lzdHJ5IHNvdXJjZSBkaXN0cmlidXRpb24gbG9va3VwcyAoWyMmIzgyMDM7MTUyMjVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNTIyNSkpCi0gQXZvaWQgY3JlYXRpbmcgYmluIGxpbmtzIG9uIGB1diBweXRob24gdXBncmFkZWAgaWYgdGhleSBkb24ndCBhbHJlYWR5IGV4aXN0IChbIyYjODIwMzsxNTE5Ml0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9wdWxsLzE1MTkyKSkKLSBSZXNwZWN0IHN5c3RlbSBwcm94aWVzIG9uIG1hY09TIGFuZCBXaW5kb3dzIChbIyYjODIwMzsxNTIyMV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9wdWxsLzE1MjIxKSkKCiMjIyMjIERvY3VtZW50YXRpb24KCi0gQWRkIHRoZSAzLjE0IGNsYXNzaWZpZXIgKFsjJiM4MjAzOzE1MTg3XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTUxODcpKQoKIyMjIFtgdjAuOC44YF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9ibG9iL0hFQUQvQ0hBTkdFTE9HLm1kIzA4OCkKCltDb21wYXJlIFNvdXJjZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9jb21wYXJlLzAuOC43Li4uMC44LjgpCgojIyMjIyBCdWcgZml4ZXMKCi0gRml4IGBmaW5kX3V2X2JpbmAgY29tcGF0aWJpbGl0eSB3aXRoIFB5dGhvbiA8My4xMCAoWyMmIzgyMDM7MTUxNzddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNTE3NykpCgojIyMgW2B2MC44LjdgXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L2Jsb2IvSEVBRC9DSEFOR0VMT0cubWQjMDg3KQoKW0NvbXBhcmUgU291cmNlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L2NvbXBhcmUvMC44LjYuLi4wLjguNykKCiMjIyMjIFB5dGhvbgoKLSBPbiBNYWMvTGludXgsIGxpYnRjbCwgbGlidGssIGFuZCBcX3RraW50ZXIgYXJlIGJ1aWx0IGFzIHNlcGFyYXRlIHNoYXJlZCBvYmplY3RzLCB3aGljaCBmaXhlcyBtYXRwbG90bGliJ3MgYHRrYWdnYCBiYWNrZW5kICh0aGUgZGVmYXVsdCBvbiBMaW51eCksIFBpbGxvdydzIGBQSUwuSW1hZ2VUa2AgbGlicmFyeSwgYW5kIG90aGVyIGV4dGVuc2lvbiBtb2R1bGVzIHRoYXQgbmVlZCB0byB1c2UgbGlidGNsL2xpYnRrIGRpcmVjdGx5LgotIFRpeCBpcyBubyBsb25nZXIgcHJvdmlkZWQgb24gTGludXguIFRoaXMgaXMgYSBkZXByZWNhdGVkIFRrIGV4dGVuc2lvbiB0aGF0IGFwcGVhcnMgdG8gaGF2ZSBiZWVuIHByZXZpb3VzbHkgYnJva2VuLgoKU2VlIHRoZSBbYHB5dGhvbi1idWlsZC1zdGFuZGFsb25lYCByZWxlYXNlIG5vdGVzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3B5dGhvbi1idWlsZC1zdGFuZGFsb25lL3JlbGVhc2VzL3RhZy8yMDI1MDgwOCkgZm9yIGRldGFpbHMuCgojIyMjIyBFbmhhbmNlbWVudHMKCi0gRG8gbm90IHVwZGF0ZSBgdXYubG9ja2Agd2hlbiB1c2luZyBgLS1pc29sYXRlZGAgKFsjJiM4MjAzOzE1MTU0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTUxNTQpKQotIEFkZCBzdXBwb3J0IGZvciBgLS1wcmVmaXhgIGFuZCBgLS13aXRoYCBpbnN0YWxsYXRpb25zIGluIGBmaW5kX3V2X2JpbmAgKFsjJiM4MjAzOzE0MTg0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTQxODQpKQotIEFkZCBzdXBwb3J0IGZvciBkaXNjb3ZlcmluZyBiYXNlIHByZWZpeCBpbnN0YWxsYXRpb25zIGluIGBmaW5kX3V2X2JpbmAgKFsjJiM4MjAzOzE0MTgxXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTQxODEpKQotIEltcHJvdmUgZXJyb3IgbWVzc2FnZXMgaW4gYGZpbmRfdXZfYmluYCAoWyMmIzgyMDM7MTQxODJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNDE4MikpCi0gV2FybiB3aGVuIHR3byBwYWNrYWdlcyB3cml0ZSB0byB0aGUgc2FtZSBtb2R1bGUgKFsjJiM4MjAzOzEzNDM3XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTM0MzcpKQoKIyMjIyMgUHJldmlldyBmZWF0dXJlcwoKLSBBZGQgc3VwcG9ydCBmb3IgYHBhY2thZ2VgLWxldmVsIGNvbmZsaWN0cyBpbiB3b3Jrc3BhY2VzIChbIyYjODIwMzsxNDkwNl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9wdWxsLzE0OTA2KSkKCiMjIyMjIENvbmZpZ3VyYXRpb24KCi0gQWRkIGBVVl9ERVZgIGFuZCBgVVZfTk9fREVWYCBlbnZpcm9ubWVudCB2YXJpYWJsZXMgKGZvciBgLS1kZXZgIGFuZCBgLS1uby1kZXZgKSAoWyMmIzgyMDM7MTUwMTBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNTAxMCkpCgojIyMjIyBCdWcgZml4ZXMKCi0gRml4IHJlZ3Jlc3Npb24gd2hlcmUgYC0tcmVxdWlyZS1oYXNoZXNgIGFwcGxpZWQgdG8gYnVpbGQgZGVwZW5kZW5jaWVzIGluIGB1diBwaXAgaW5zdGFsbGAgKFsjJiM4MjAzOzE1MTUzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTUxNTMpKQotIElnbm9yZSBHcmFhbFB5IGRldnRhZ3MgKFsjJiM4MjAzOzE1MDEzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTUwMTMpKQotIEluY2x1ZGUgYWxsIHNpdGUgcGFja2FnZXMgZGlyZWN0b3JpZXMgaW4gZXBoZW1lcmFsIGVudmlyb25tZW50IG92ZXJsYXlzIChbIyYjODIwMzsxNTEyMV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9wdWxsLzE1MTIxKSkKLSBTZWFyY2ggaW4gdGhlIHVzZXIgc2NoZW1lIHNjcmlwdHMgZGlyZWN0b3J5IGxhc3QgaW4gYGZpbmRfdXZfYmluYCAoWyMmIzgyMDM7MTQxOTFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNDE5MSkpCgojIyMjIyBEb2N1bWVudGF0aW9uCgotIEFkZCBtaXNzaW5nIHBlcmlvZHMgKGAuYCkgdG8gbGlzdCBlbGVtZW50cyBpbiBgRmVhdHVyZXNgIGRvY3MgcGFnZSAoWyMmIzgyMDM7MTUxMzhdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNTEzOCkpCgojIyMgW2B2MC44LjZgXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L2Jsb2IvSEVBRC9DSEFOR0VMT0cubWQjMDg2KQoKW0NvbXBhcmUgU291cmNlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L2NvbXBhcmUvMC44LjUuLi4wLjguNikKClRoaXMgcmVsZWFzZSBjb250YWlucyBoYXJkZW5pbmcgbWVhc3VyZXMgdG8gYWRkcmVzcyBkaWZmZXJlbnRpYWxzIGluIGJlaGF2aW9yIGJldHdlZW4gdXYgYW5kIFB5dGhvbidzIGJ1aWx0LWluIFpJUCBwYXJzZXIgKFtDVkUtMjAyNS01NDM2OF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9zZWN1cml0eS9hZHZpc29yaWVzL0dIU0EtOHFmMy14OHY1LTJwajgpKS4KClByaW9yIHRvIHRoaXMgcmVsZWFzZSwgYXR0YWNrZXJzIGNvdWxkIGNvbnN0cnVjdCBaSVAgZmlsZXMgdGhhdCB3b3VsZCBiZSBleHRyYWN0ZWQgZGlmZmVyZW50bHkgYnkgcGlwLCB1diwgYW5kIG90aGVyIHRvb2xzLiBBcyBhIHJlc3VsdCwgWklQcyBjb3VsZCBiZSBjb25zdHJ1Y3RlZCB0aGF0IHdvdWxkIGJlIGNvbnNpZGVyZWQgaGFybWxlc3MgYnkgKGUuZy4pIHNjYW5uZXJzLCBidXQgY29udGFpbiBhIG1hbGljaW91cyBwYXlsb2FkIHdoZW4gZXh0cmFjdGVkIGJ5IHV2LiBBcyBvZiB2MC44LjYsIHV2IG5vdyBhcHBsaWVzIGFkZGl0aW9uYWwgY2hlY2tzIHRvIHJlamVjdCBzdWNoIFpJUHMuCgpUaGFua3MgdG8gYSB0cmlhZ2UgZWZmb3J0IHdpdGggdGhlIFtQeXRob24gU2VjdXJpdHkgUmVzcG9uc2UgVGVhbV0oaHR0cHM6Ly9kZXZndWlkZS5weXRob24ub3JnL2RldmVsb3Blci13b3JrZmxvdy9wc3J0LykgYW5kIFB5UEkgbWFpbnRhaW5lcnMsIHdlIHdlcmUgYWJsZSB0byBkZXRlcm1pbmUgdGhhdCB0aGVzZSBkaWZmZXJlbnRpYWxzICoqd2VyZSBub3QgZXhwbG9pdGVkKiogdmlhIFB5UEkgZHVyaW5nIHRoZSB0aW1lIHRoZXkgd2VyZSBwcmVzZW50LiBUaGUgUHlQSSB0ZWFtIGhhcyBhbHNvIGltcGxlbWVudGVkIHNpbWlsYXIgY2hlY2tzIGFuZCBub3cgZ3VhcmRzIGFnYWluc3QgdGhlc2UgcGFyc2luZyBkaWZmZXJlbnRpYWxzIG9uIHVwbG9hZC4KCkFsdGhvdWdoIHRoZSBwcmFjdGljYWwgcmlzayBvZiBleHBsb2l0YXRpb24gaXMgbG93LCB3ZSB0YWtlIHRoZSAqaHlwb3RoZXRpY2FsKiByaXNrIG9mIHBhcnNlciBkaWZmZXJlbnRpYWxzIHZlcnkgc2VyaW91c2x5LiBPdXQgb2YgYW4gYWJ1bmRhbmNlIG9mIGNhdXRpb24sIHdlIGhhdmUgYXNzaWduZWQgdGhpcyBhZHZpc29yeSBhIENWRSBpZGVudGlmaWVyIGFuZCBoYXZlIGdpdmVuIGl0IGEgIm1vZGVyYXRlIiBzZXZlcml0eSBzdWdnZXN0aW9uLgoKVGhlc2UgY2hhbmdlcyBoYXZlIGJlZW4gdmFsaWRhdGVkIGFnYWluc3QgdGhlIHRvcCAxNSwwMDAgUHlQSSBwYWNrYWdlczsgaG93ZXZlciwgaXQncyBwbGF1c2libGUgdGhhdCBhIG5vbi1tYWxpY2lvdXMgWklQIGNvdWxkIGJlIGZhbHNlbHkgcmVqZWN0ZWQgd2l0aCB0aGlzIGFkZGl0aW9uYWwgaGFyZGVuaW5nLiBBcyBhbiBlc2NhcGUgaGF0Y2gsIHVzZXJzIHdobyBkbyBlbmNvdW50ZXIgYnJlYWtpbmcgY2hhbmdlcyBjYW4gZW5hYmxlIGBVVl9JTlNFQ1VSRV9OT19aSVBfVkFMSURBVElPTmAgdG8gcmVzdG9yZSB0aGUgcHJldmlvdXMgYmVoYXZpb3IuIElmIHlvdSBlbmNvdW50ZXIgc3VjaCBhIHJlamVjdGlvbiwgcGxlYXNlIGZpbGUgYW4gaXNzdWUgaW4gdXYgYW5kIHRvIHRoZSB1cHN0cmVhbSBwYWNrYWdlLgoKRm9yIGFkZGl0aW9uYWwgaW5mb3JtYXRpb24sIHBsZWFzZSByZWZlciB0byB0aGUgZm9sbG93aW5nIGJsb2cgcG9zdHM6CgotIFtBc3RyYWw6IHV2IHNlY3VyaXR5IGFkdmlzb3J5OiBaSVAgcGF5bG9hZCBvYmZ1c2NhdGlvbl0oaHR0cHM6Ly9hc3RyYWwuc2gvYmxvZy91di1zZWN1cml0eS1hZHZpc29yeS1jdmUtMjAyNS01NDM2OCkKLSBbUHlQSTogUHJldmVudGluZyBaSVAgcGFyc2VyIGNvbmZ1c2lvbiBhdHRhY2tzIG9uIFB5dGhvbiBwYWNrYWdlIGluc3RhbGxlcnNdKGh0dHBzOi8vYmxvZy5weXBpLm9yZy9wb3N0cy8yMDI1LTA4LTA3LXdoZWVsLWFyY2hpdmUtY29uZnVzaW9uLWF0dGFja3MvKQoKIyMjIyMgU2VjdXJpdHkKCi0gSGFyZGVuIFpJUCBzdHJlYW1pbmcgdG8gcmVqZWN0IHJlcGVhdGVkIGVudHJpZXMgYW5kIG90aGVyIG1hbGZvcm1lZCBaSVAgZmlsZXMgKFsjJiM4MjAzOzE1MTM2XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTUxMzYpKQoKIyMjIyMgUHl0aG9uCgotIEFkZCBDUHl0aG9uIDMuMTMuNgoKIyMjIyMgQ29uZmlndXJhdGlvbgoKLSBBZGQgc3VwcG9ydCBmb3IgcGVyLXByb2plY3QgYnVpbGQtdGltZSBlbnZpcm9ubWVudCB2YXJpYWJsZXMgKFsjJiM4MjAzOzE1MDk1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTUwOTUpKQoKIyMjIyMgQnVnIGZpeGVzCgotIEF2b2lkIGludmFsaWQgc2ltcGxpZmljYXRpb24gd2l0aCBjb25mbGljdCBtYXJrZXJzICAoWyMmIzgyMDM7MTUwNDFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNTA0MSkpCi0gUmVzcGVjdCBgVVZfSFRUUF9SRVRSSUVTYCBpbiBgdXYgcHVibGlzaGAgKFsjJiM4MjAzOzE1MTA2XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTUxMDYpKQotIFN1cHBvcnQgYFVWX05PX0VESVRBQkxFYCB3aGVyZSBgLS1uby1lZGl0YWJsZWAgaXMgc3VwcG9ydGVkIChbIyYjODIwMzsxNTEwN10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9wdWxsLzE1MTA3KSkKLSBVcGdyYWRlIGBjYXJnby1kaXN0YCB0byBhZGQgYFVWX0lOU1RBTExFUl9VUkxgIHRvIFBvd2VyU2hlbGwgaW5zdGFsbGVyIChbIyYjODIwMzsxNTExNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9wdWxsLzE1MTE0KSkKLSBVcGdyYWRlIGBoMmAgYWdhaW4gdG8gYXZvaWQgYHRvb19tYW55X2ludGVybmFsX3Jlc2V0c2AgZXJyb3JzIChbIyYjODIwMzsxNTExMV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9wdWxsLzE1MTExKSkKLSBDb25zaWRlciBgcHl0aG9ud2Agd2hlbiBjb3B5aW5nIGVudHJ5IHBvaW50cyBpbiB1diBydW4gKFsjJiM4MjAzOzE1MTM0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTUxMzQpKQoKIyMjIyMgRG9jdW1lbnRhdGlvbgoKLSBFbnN1cmUgc3ltbGluayB3YXJuaW5nIGlzIHNob3duIChbIyYjODIwMzsxNTEyNl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9wdWxsLzE1MTI2KSkKCiMjIyBbYHYwLjguNWBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvYmxvYi9IRUFEL0NIQU5HRUxPRy5tZCMwODUpCgpbQ29tcGFyZSBTb3VyY2VdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvY29tcGFyZS8wLjguNC4uLjAuOC41KQoKIyMjIyMgRW5oYW5jZW1lbnRzCgotIEVuYWJsZSBgdXYgcnVuYCB3aXRoIGEgR2l0SHViIEdpc3QgKFsjJiM4MjAzOzE1MDU4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTUwNTgpKQotIEltcHJvdmUgSFRUUCByZXNwb25zZSBjYWNoaW5nIGxvZyBtZXNzYWdlcyAoWyMmIzgyMDM7MTUwNjddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNTA2NykpCi0gU2hvdyB3aGVlbCB0YWcgaGludHMgaW4gaW5zdGFsbCBwbGFuIChbIyYjODIwMzsxNTA2Nl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9wdWxsLzE1MDY2KSkKLSBTdXBwb3J0IGluc3RhbGxpbmcgYWRkaXRpb25hbCBleGVjdXRhYmxlcyBpbiBgdXYgdG9vbCBpbnN0YWxsYCAoWyMmIzgyMDM7MTQwMTRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNDAxNCkpCgojIyMjIyBQcmV2aWV3IGZlYXR1cmVzCgotIEVuYWJsZSBleHRyYSBidWlsZCBkZXBlbmRlbmNpZXMgdG8gJ21hdGNoIHJ1bnRpbWUnIHZlcnNpb25zIChbIyYjODIwMzsxNTAzNl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9wdWxsLzE1MDM2KSkKLSBSZW1vdmUgZHVwbGljYXRlIGBleHRyYS1idWlsZC1kZXBlbmRlbmNpZXNgIHdhcm5pbmdzIGZvciBgdXYgcGlwYCAoWyMmIzgyMDM7MTUwODhdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNTA4OCkpCi0gVXNlICJvcHRpb24iIGluc3RlYWQgb2YgInNldHRpbmciIGluIGBweWxvY2tgIHdhcm5pbmcgKFsjJiM4MjAzOzE1MDg5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTUwODkpKQotIFJlc3BlY3QgZXh0cmEgYnVpbGQgcmVxdWlyZXMgd2hlbiByZWFkaW5nIGZyb20gd2hlZWwgY2FjaGUgKFsjJiM4MjAzOzE1MDMwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTUwMzApKQotIFByZXNlcnZlIGxvd2VyZWQgZXh0cmEgYnVpbGQgZGVwZW5kZW5jaWVzIChbIyYjODIwMzsxNTAzOF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9wdWxsLzE1MDM4KSkKCiMjIyMjIEJ1ZyBmaXhlcwoKLSBBZGQgUHl0aG9uIHZlcnNpb25zIHRvIG1hcmtlcnMgaW1wbGllZCBmcm9tIHdoZWVscyAoWyMmIzgyMDM7MTQ5MTNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNDkxMykpCi0gRW5zdXJlIGNvbnNpc3RlbnQgaW5kZW50YXRpb24gd2hlbiBhZGRpbmcgZGVwZW5kZW5jaWVzIChbIyYjODIwMzsxNDk5MV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FzdHJhbC1zaC91di9wdWxsLzE0OTkxKSkKLSBGaXggaGFuZGxpbmcgb2YgYHB5dGhvbi1wcmVmZXJlbmNlID0gc3lzdGVtYCB3aGVuIG1hbmFnZWQgaW50ZXJwcmV0ZXJzIGFyZSBvbiB0aGUgUEFUSCAoWyMmIzgyMDM7MTUwNTldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNTA1OSkpCi0gRml4IHN5bWxpbmsgcHJlc2VydmF0aW9uIGluIHZpcnR1YWwgZW52aXJvbm1lbnQgY3JlYXRpb24gKFsjJiM4MjAzOzE0OTMzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTQ5MzMpKQotIEdyYWNlZnVsbHkgaGFuZGxlIGVudHJ5cG9pbnQgcGVybWlzc2lvbiBlcnJvcnMgKFsjJiM4MjAzOzE1MDI2XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTUwMjYpKQotIEluY2x1ZGUgd2hlZWwgaGFzaGVzIGZyb20gbG9jYWwgU2ltcGxlIGluZGV4ZXMgKFsjJiM4MjAzOzE0OTkzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTQ5OTMpKQotIFByZWZlciBzeXN0ZW0gUHl0aG9uIGluc3RhbGxhdGlvbnMgb3ZlciBtYW5hZ2VkIG9uZXMgd2hlbiBgLS1zeXN0ZW1gIGlzIHVzZWQgKFsjJiM4MjAzOzE1MDYxXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTUwNjEpKQotIFJlbW92ZSByZXRyeSB3cmFwcGVyIHdoZW4gbWF0Y2hpbmcgb24gZXJyb3Iga2luZCAoWyMmIzgyMDM7MTQ5OTZdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNDk5NikpCi0gUmV2ZXJ0IGBoMmAgdXBncmFkZSAoWyMmIzgyMDM7MTUwNzldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hc3RyYWwtc2gvdXYvcHVsbC8xNTA3OSkpCgojIyMjIyBEb2N1bWVudGF0aW9uCgotIEltcHJvdmUgdmlzaWJpbGl0eSBvZiBjb3B5IGFuZCBsaW5lIHNlcGFyYXRvciBpbiBkYXJrIG1vZGUgKFsjJiM4MjAzOzE0OTg3XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXN0cmFsLXNoL3V2L3B1bGwvMTQ5ODcpKQoKPC9kZXRhaWxzPgoKLS0tCgojIyMgQ29uZmlndXJhdGlvbgoK8J+ThSAqKlNjaGVkdWxlKio6IEJyYW5jaCBjcmVhdGlvbiAtIEF0IGFueSB0aW1lIChubyBzY2hlZHVsZSBkZWZpbmVkKSwgQXV0b21lcmdlIC0gQXQgYW55IHRpbWUgKG5vIHNjaGVkdWxlIGRlZmluZWQpLgoK8J+apiAqKkF1dG9tZXJnZSoqOiBEaXNhYmxlZCBieSBjb25maWcuIFBsZWFzZSBtZXJnZSB0aGlzIG1hbnVhbGx5IG9uY2UgeW91IGFyZSBzYXRpc2ZpZWQuCgrimbsgKipSZWJhc2luZyoqOiBXaGVuZXZlciBQUiBiZWNvbWVzIGNvbmZsaWN0ZWQsIG9yIHlvdSB0aWNrIHRoZSByZWJhc2UvcmV0cnkgY2hlY2tib3guCgrwn5SVICoqSWdub3JlKio6IENsb3NlIHRoaXMgUFIgYW5kIHlvdSB3b24ndCBiZSByZW1pbmRlZCBhYm91dCB0aGlzIHVwZGF0ZSBhZ2Fpbi4KCi0tLQoKIC0gWyBdIDwhLS0gcmViYXNlLWNoZWNrIC0tPklmIHlvdSB3YW50IHRvIHJlYmFzZS9yZXRyeSB0aGlzIFBSLCBjaGVjayB0aGlzIGJveAoKLS0tCgpUaGlzIFBSIHdhcyBnZW5lcmF0ZWQgYnkgW01lbmQgUmVub3ZhdGVdKGh0dHBzOi8vbWVuZC5pby9yZW5vdmF0ZS8pLiBWaWV3IHRoZSBbcmVwb3NpdG9yeSBqb2IgbG9nXShodHRwczovL2RldmVsb3Blci5tZW5kLmlvL2dpdGh1Yi9vc2lzbS9jb250YWluZXItaW1hZ2UtaW52ZW50b3J5LXJlY29uY2lsZXIpLgo8IS0tcmVub3ZhdGUtZGVidWc6ZXlKamNtVmhkR1ZrU1c1V1pYSWlPaUkwTVM0MU1TNHhJaXdpZFhCa1lYUmxaRWx1Vm1WeUlqb2lOREV1TnpFdU1TSXNJblJoY21kbGRFSnlZVzVqYUNJNkltMWhhVzRpTENKc1lXSmxiSE1pT2xzaWNtVnViM1poZEdVaVhYMD0tLT4K
      patchset: ef652d5e93119657f17f3db0da24c7ec8c17b549
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: caa0df55ed55158f32903d317317ac95db4da6ce
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 9b966b7c4a2bfb253652691d791f76f825145a9c
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: caa0df55ed55158f32903d317317ac95db4da6ce
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/ansible-lint/run.yaml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_0/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_0/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/container-image-inventory-reconciler
        name: osism/container-image-inventory-reconciler
        short_name: container-image-inventory-reconciler
        src_dir: src/github.com/osism/container-image-inventory-reconciler
      projects:
        github.com/osism/container-image-inventory-reconciler:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-inventory-reconciler
          checkout: main
          checkout_description: zuul branch
          commit: e61ace55c9d131dfe17ad454d1a0a48558aea646
          name: osism/container-image-inventory-reconciler
          required: false
          short_name: container-image-inventory-reconciler
          src_dir: src/github.com/osism/container-image-inventory-reconciler
      ref: refs/pull/414/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
