all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fef2:6468
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 071b4ba3-2331-4e54-9f01-d82ba7542725
        host_id: 5afd8fc909abddfe2ce3a956a91bbe56629648b7209fd0acfa541862
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fef2:6468
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.0.107
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.193.147
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fef2:6468
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job ansible-lint explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#7>'
      - '<Job ansible-lint explicit: None implied: None source: osism/container-image-osism-ansible/.zuul.yaml@main#106>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: 52f8b802c9df4d0baf72722002917f67
      build_refs:
      - branch: main
        change: '713'
        change_message: "chore(deps): update dependency kubernetes to v35\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [kubernetes](https://redirect.github.com/kubernetes-client/python) | `==33.1.0`
          \u2192 `==35.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/kubernetes/35.0.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/kubernetes/33.1.0/35.0.0?slim=true)
          |\n\n---\n\n> [!WARNING]\n> Some dependencies could not be looked up. Check
          the [Dependency Dashboard](../issues/218) for more information.\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>kubernetes-client/python (kubernetes)</summary>\n\n###
          [`v35.0.0`](https://redirect.github.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v3500snapshot)\n\n[Compare
          Source](https://redirect.github.com/kubernetes-client/python/compare/v34.1.0...v35.0.0)\n\nKubernetes
          API Version: v1.35.0\n\n##### API Change\n\n- Added `ObservedGeneration`
          to CustomResourceDefinition conditions. ([kubernetes/kubernetes#134984](https://redirect.github.com/kubernetes/kubernetes/pull/134984),
          [@&#8203;michaelasp](https://redirect.github.com/michaelasp))\n- Added `WithOrigin`
          within `apis/core/validation` with adjusted tests. ([kubernetes/kubernetes#132825](https://redirect.github.com/kubernetes/kubernetes/pull/132825),
          [@&#8203;PatrickLaabs](https://redirect.github.com/PatrickLaabs))\n- Added
          scoring for the prioritized list feature so nodes that best satisfy the
          highest-ranked subrequests were chosen. ([kubernetes/kubernetes#134711](https://redirect.github.com/kubernetes/kubernetes/pull/134711),
          [@&#8203;mortent](https://redirect.github.com/mortent)) \\[SIG Node, Scheduling
          and Testing]\n- Added the `--min-compatibility-version` flag to `kube-apiserver`,
          `kube-controller-manager`, and `kube-scheduler`. ([kubernetes/kubernetes#133980](https://redirect.github.com/kubernetes/kubernetes/pull/133980),
          [@&#8203;siyuanfoundation](https://redirect.github.com/siyuanfoundation))
          \\[SIG API Machinery, Architecture, Cluster Lifecycle, Etcd, Scheduling
          and Testing]\n- Added the `StorageVersionMigration` `v1beta1` API and removed
          the `v1alpha1` API.\n\n  ACTION REQUIRED: The `v1alpha1` API is no longer
          supported. Users must remove any `v1alpha1` resources before upgrading.
          ([kubernetes/kubernetes#134784](https://redirect.github.com/kubernetes/kubernetes/pull/134784),
          [@&#8203;michaelasp](https://redirect.github.com/michaelasp)) \\[SIG API
          Machinery, Apps, Auth, Etcd and Testing]\n- Added validation to ensure `log-flush-frequency`
          is a positive value, returning an error instead of causing a panic. ([kubernetes/kubernetes#133540](https://redirect.github.com/kubernetes/kubernetes/pull/133540),
          [@&#8203;BenTheElder](https://redirect.github.com/BenTheElder)) \\[SIG Architecture,
          Instrumentation, Network and Node]\n- All containers are restarted when
          a source container in a restart policy rule exits. This alpha feature is
          gated behind `RestartAllContainersOnContainerExit`. ([kubernetes/kubernetes#134345](https://redirect.github.com/kubernetes/kubernetes/pull/134345),
          [@&#8203;yuanwang04](https://redirect.github.com/yuanwang04)) \\[SIG Apps,
          Node and Testing]\n- CSI drivers can now opt in to receive service account
          tokens via the secrets field instead of volume context by setting `spec.serviceAccountTokenInSecrets:
          true` in the CSIDriver object. This prevents tokens from being exposed in
          logs and other outputs. The feature is gated by the `CSIServiceAccountTokenSecrets`
          feature gate (beta in `v1.35`). ([kubernetes/kubernetes#134826](https://redirect.github.com/kubernetes/kubernetes/pull/134826),
          [@&#8203;aramase](https://redirect.github.com/aramase)) \\[SIG API Machinery,
          Auth, Storage and Testing]\n- Changed kuberc configuration schema. Two new
          optional fields added to kuberc configuration, `credPluginPolicy` and `credPluginAllowlist`.
          This is documented in [KEP-3104](https://redirect.github.com/kubernetes/enhancements/blob/master/keps/sig-cli/3104-introduce-kuberc/README.md#allowlist-design-details)
          and documentation is added to the website by [kubernetes/website#52877](https://redirect.github.com/kubernetes/website/pull/52877)
          ([kubernetes/kubernetes#134870](https://redirect.github.com/kubernetes/kubernetes/pull/134870),
          [@&#8203;pmengelbert](https://redirect.github.com/pmengelbert)) \\[SIG API
          Machinery, Architecture, Auth, CLI, Instrumentation and Testing]\n- DRA
          device taints: `DeviceTaintRule` status provides information about the rule,
          including whether Pods still need to be evicted (`EvictionInProgress` condition).
          The newly added `None` effect can be used to preview what a `DeviceTaintRule`
          would do if it used the `NoExecute` effect and to taint devices (`device
          health`) without immediately affecting scheduling or running Pods. ([kubernetes/kubernetes#134152](https://redirect.github.com/kubernetes/kubernetes/pull/134152),
          [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG API Machinery,
          Apps, Auth, Node, Release, Scheduling and Testing]\n- DRA: The `DynamicResourceAllocation`
          feature gate for the core functionality (GA in `v1.34`) has now been locked
          to enabled-by-default and cannot be disabled anymore. ([kubernetes/kubernetes#134452](https://redirect.github.com/kubernetes/kubernetes/pull/134452),
          [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG Auth, Node, Scheduling
          and Testing]\n- Enabled `kubectl get -o kyaml` by default. To disable it,
          set `KUBECTL_KYAML=false`. ([kubernetes/kubernetes#133327](https://redirect.github.com/kubernetes/kubernetes/pull/133327),
          [@&#8203;thockin](https://redirect.github.com/thockin))\n- Enabled in-place
          resizing of pod-level resources.\n  - Added `Resources` in `PodStatus` to
          capture resources set in the pod-level cgroup.\n  - Added `AllocatedResources`
          in `PodStatus` to capture resources requested in the `PodSpec`. ([kubernetes/kubernetes#132919](https://redirect.github.com/kubernetes/kubernetes/pull/132919),
          [@&#8203;ndixita](https://redirect.github.com/ndixita)) \\[SIG API Machinery,
          Apps, Architecture, Auth, CLI, Instrumentation, Node, Scheduling and Testing]\n-
          Enabled the `NominatedNodeNameForExpectation` feature in kube-scheduler
          by default.\n  - Enabled the `ClearingNominatedNodeNameAfterBinding` feature
          in kube-apiserver by default. ([kubernetes/kubernetes#135103](https://redirect.github.com/kubernetes/kubernetes/pull/135103),
          [@&#8203;ania-borowiec](https://redirect.github.com/ania-borowiec)) \\[SIG
          API Machinery, Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider,
          Cluster Lifecycle, Etcd, Instrumentation, Network, Node, Scheduling, Storage
          and Testing]\n- Enhanced discovery responses to merge API groups and resources
          from all peer apiservers when the `UnknownVersionInteroperabilityProxy`
          feature is enabled. ([kubernetes/kubernetes#133648](https://redirect.github.com/kubernetes/kubernetes/pull/133648),
          [@&#8203;richabanker](https://redirect.github.com/richabanker)) \\[SIG API
          Machinery, Auth, Cloud Provider, Node, Scheduling and Testing]\n- Extended
          `core/v1` `Toleration` to support numeric comparison operators (`Gt`,`Lt`).
          ([kubernetes/kubernetes#134665](https://redirect.github.com/kubernetes/kubernetes/pull/134665),
          [@&#8203;helayoty](https://redirect.github.com/helayoty)) \\[SIG API Machinery,
          Apps, Node, Scheduling, Testing and Windows]\n- Feature gate dependencies
          are now explicit, and validated at startup. A feature can no longer be enabled
          if it depends on a disabled feature. In particular, this means that `AllAlpha=true`
          will no longer work without enabling disabled-by-default beta features that
          are depended on (either with `AllBeta=true` or explicitly enumerating the
          disabled dependencies). ([kubernetes/kubernetes#133697](https://redirect.github.com/kubernetes/kubernetes/pull/133697),
          [@&#8203;tallclair](https://redirect.github.com/tallclair)) \\[SIG API Machinery,
          Architecture, Cluster Lifecycle and Node]\n- Generated OpenAPI model packages
          for API types into `zz_generated.model_name.go` files, accessible via the
          `OpenAPIModelName()` function. This allows API authors to declare desired
          OpenAPI model packages instead of relying on the Go package path of API
          types. ([kubernetes/kubernetes#131755](https://redirect.github.com/kubernetes/kubernetes/pull/131755),
          [@&#8203;jpbetz](https://redirect.github.com/jpbetz)) \\[SIG API Machinery,
          Apps, Architecture, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation,
          Network, Node, Scheduling, Storage and Testing]\n- Implemented constrained
          impersonation as described in [KEP-5284](https://kep.k8s.io/5284). ([kubernetes/kubernetes#134803](https://redirect.github.com/kubernetes/kubernetes/pull/134803),
          [@&#8203;enj](https://redirect.github.com/enj)) \\[SIG API Machinery, Auth
          and Testing]\n- Introduced a new declarative validation tag `+k8s:customUnique`
          to control listmap uniqueness. ([kubernetes/kubernetes#134279](https://redirect.github.com/kubernetes/kubernetes/pull/134279),
          [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API
          Machinery and Auth]\n- Introduced a structured and versioned `v1alpha1`
          response for the `statusz` endpoint. ([kubernetes/kubernetes#134313](https://redirect.github.com/kubernetes/kubernetes/pull/134313),
          [@&#8203;richabanker](https://redirect.github.com/richabanker)) \\[SIG API
          Machinery, Architecture, Instrumentation, Network, Node, Scheduling and
          Testing]\n- Introduced a structured and versioned `v1alpha1` response format
          for the `flagz` endpoint. ([kubernetes/kubernetes#134995](https://redirect.github.com/kubernetes/kubernetes/pull/134995),
          [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API
          Machinery, Architecture, Instrumentation, Network, Node, Scheduling and
          Testing]\n- Introduced the GangScheduling kube-scheduler plugin to support
          \"all-or-nothing\" scheduling using the `scheduling.k8s.io/v1alpha1` Workload
          API. ([kubernetes/kubernetes#134722](https://redirect.github.com/kubernetes/kubernetes/pull/134722),
          [@&#8203;macsko](https://redirect.github.com/macsko)) \\[SIG API Machinery,
          Apps, Auth, CLI, Etcd, Scheduling and Testing]\n- Introduced the Node Declared
          Features capability (alpha), which includes:\n  - A new `Node.Status.DeclaredFeatures`
          field for publishing node-specific features.\n  - A `component-helpers`
          library for feature registration and inference.\n  - A `NodeDeclaredFeatures`
          scheduler plugin to match pods with nodes that provide required features.\n
          \ - A `NodeDeclaredFeatureValidator` admission plugin to validate pod updates
          against a node's declared features. ([kubernetes/kubernetes#133389](https://redirect.github.com/kubernetes/kubernetes/pull/133389),
          [@&#8203;pravk03](https://redirect.github.com/pravk03)) \\[SIG API Machinery,
          Apps, Node, Release, Scheduling and Testing]\n- Introduced the `scheduling.k8s.io/v1alpha1`
          Workload API to express workload-level scheduling requirements and allow
          the kube-scheduler to act on them. ([kubernetes/kubernetes#134564](https://redirect.github.com/kubernetes/kubernetes/pull/134564),
          [@&#8203;macsko](https://redirect.github.com/macsko)) \\[SIG API Machinery,
          Apps, CLI, Etcd, Scheduling and Testing]\n- Introduced the alpha `MutableSchedulingDirectivesForSuspendedJobs`
          feature gate (disabled by default), which allows mutating a Job's scheduling
          directives while the Job is suspended.\n  It also updates the Job controller
          to clears the `status.startTime` field for suspended Jobs. ([kubernetes/kubernetes#135104](https://redirect.github.com/kubernetes/kubernetes/pull/135104),
          [@&#8203;mimowo](https://redirect.github.com/mimowo)) \\[SIG Apps and Testing]\n-
          Kube-apiserver: Fixed a `v1.34` regression in `CustomResourceDefinition`
          handling that incorrectly warned about unrecognized formats on number and
          integer properties. ([kubernetes/kubernetes#133896](https://redirect.github.com/kubernetes/kubernetes/pull/133896),
          [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API
          Machinery, Apps, Architecture, Auth, CLI, Cloud Provider, Contributor Experience,
          Network, Node and Scheduling]\n- Kube-apiserver: Fixed a possible panic
          validating a custom resource whose `CustomResourceDefinition` indicates
          a status subresource exists, but which does not define a `status` property
          in the `openAPIV3Schema`. ([kubernetes/kubernetes#133721](https://redirect.github.com/kubernetes/kubernetes/pull/133721),
          [@&#8203;fusida](https://redirect.github.com/fusida)) \\[SIG API Machinery,
          Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle,
          Etcd, Instrumentation, Network, Node, Release, Scheduling, Storage and Testing]\n-
          Kubernetes API Go types removed runtime use of the `github.com/gogo/protobuf`
          library, and are no longer registered into the global gogo type registry.
          Kubernetes API Go types were not suitable for use with the `google.golang.org/protobuf`
          library, and no longer implement `ProtoMessage()` by default to avoid accidental
          incompatible use. If removal of these marker methods impacts your use, it
          can be re-enabled for one more release with a `kubernetes_protomessage_one_more_release`
          build tag, but will be removed in `v1.36`. ([kubernetes/kubernetes#134256](https://redirect.github.com/kubernetes/kubernetes/pull/134256),
          [@&#8203;liggitt](https://redirect.github.com/liggitt)) \\[SIG API Machinery,
          Apps, Architecture, Auth, CLI, Cluster Lifecycle, Instrumentation, Network,
          Node, Scheduling and Storage]\n- Made node affinity in Persistent Volume
          mutable. ([kubernetes/kubernetes#134339](https://redirect.github.com/kubernetes/kubernetes/pull/134339),
          [@&#8203;huww98](https://redirect.github.com/huww98)) \\[SIG API Machinery,
          Apps and Node]\n- Moved the `ImagePullIntent` and `ImagePulledRecord` objects
          used by the kubelet to track image pulls to the `v1beta1` API version. ([kubernetes/kubernetes#132579](https://redirect.github.com/kubernetes/kubernetes/pull/132579),
          [@&#8203;stlaz](https://redirect.github.com/stlaz)) \\[SIG Auth and Node]\n-
          Pod resize now only allows CPU and memory resources; other resource types
          are forbidden. ([kubernetes/kubernetes#135084](https://redirect.github.com/kubernetes/kubernetes/pull/135084),
          [@&#8203;tallclair](https://redirect.github.com/tallclair)) \\[SIG Apps,
          Node and Testing]\n- Prevented Pods from being scheduled onto nodes that
          lack the required CSI driver. ([kubernetes/kubernetes#135012](https://redirect.github.com/kubernetes/kubernetes/pull/135012),
          [@&#8203;gnufied](https://redirect.github.com/gnufied)) \\[SIG API Machinery,
          Scheduling, Storage and Testing]\n- Promoted HPA configurable tolerance
          to beta. The `HPAConfigurableTolerance` feature gate has now been enabled
          by default. ([kubernetes/kubernetes#133128](https://redirect.github.com/kubernetes/kubernetes/pull/133128),
          [@&#8203;jm-franc](https://redirect.github.com/jm-franc)) \\[SIG API Machinery
          and Autoscaling]\n- Promoted ReplicaSet and Deployment `.status.terminatingReplicas`
          tracking to beta. The `DeploymentReplicaSetTerminatingReplicas` feature
          gate is now enabled by default. ([kubernetes/kubernetes#133087](https://redirect.github.com/kubernetes/kubernetes/pull/133087),
          [@&#8203;atiratree](https://redirect.github.com/atiratree)) \\[SIG API Machinery,
          Apps and Testing]\n- Promoted `PodObservedGenerationTracking` to GA. ([kubernetes/kubernetes#134948](https://redirect.github.com/kubernetes/kubernetes/pull/134948),
          [@&#8203;natasha41575](https://redirect.github.com/natasha41575)) \\[SIG
          API Machinery, Apps, Node, Scheduling and Testing]\n- Promoted the `JobManagedBy`
          feature to general availability. The `JobManagedBy` feature gate was locked
          to `true` and will be removed in a future Kubernetes release. ([kubernetes/kubernetes#135080](https://redirect.github.com/kubernetes/kubernetes/pull/135080),
          [@&#8203;dejanzele](https://redirect.github.com/dejanzele)) \\[SIG API Machinery,
          Apps and Testing]\n- Promoted the `MaxUnavailableStatefulSet` feature to
          beta and enabling it by default. ([kubernetes/kubernetes#133153](https://redirect.github.com/kubernetes/kubernetes/pull/133153),
          [@&#8203;helayoty](https://redirect.github.com/helayoty)) \\[SIG API Machinery
          and Apps]\n- Removed the `StrictCostEnforcementForVAP` and `StrictCostEnforcementForWebhooks`
          feature gates, which were locked since `v1.32`. ([kubernetes/kubernetes#134994](https://redirect.github.com/kubernetes/kubernetes/pull/134994),
          [@&#8203;liggitt](https://redirect.github.com/liggitt)) \\[SIG API Machinery,
          Auth, Node and Testing]\n- Scheduler: Added the `bindingTimeout` argument
          to the DynamicResources plugin configuration, allowing customization of
          the wait duration in `PreBind` for device binding conditions.\n  Defaults
          to 10 minutes when `DRADeviceBindingConditions` and `DRAResourceClaimDeviceStatus`
          are both enabled. ([kubernetes/kubernetes#134905](https://redirect.github.com/kubernetes/kubernetes/pull/134905),
          [@&#8203;fj-naji](https://redirect.github.com/fj-naji)) \\[SIG Node and
          Scheduling]\n- The DRA device taints and toleration feature received a separate
          feature gate, `DRADeviceTaintRules`, which controlled support for `DeviceTaintRules`.
          This allowed disabling it while keeping `DRADeviceTaints` enabled so that
          tainting via `ResourceSlices` continued to work. ([kubernetes/kubernetes#135068](https://redirect.github.com/kubernetes/kubernetes/pull/135068),
          [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG API Machinery,
          Apps, Auth, Node, Scheduling and Testing]\n- The Pod Certificates feature
          moved to beta. The `PodCertificateRequest` feature gate is set disabled
          by default. To use the feature, users must enable the certificates API groups
          in `v1beta1` and enable the `PodCertificateRequest` feature gate. The `UserAnnotations`
          field was added to the `PodCertificateProjection` API and the corresponding
          `UnverifiedUserAnnotations` field was added to the `PodCertificateRequest`
          API. ([kubernetes/kubernetes#134624](https://redirect.github.com/kubernetes/kubernetes/pull/134624),
          [@&#8203;yt2985](https://redirect.github.com/yt2985)) \\[SIG API Machinery,
          Apps, Auth, Etcd, Instrumentation, Node and Testing]\n- The `KubeletEnsureSecretPulledImages`
          feature was promoted to Beta and enabled by default. ([kubernetes/kubernetes#135228](https://redirect.github.com/kubernetes/kubernetes/pull/135228),
          [@&#8203;aramase](https://redirect.github.com/aramase)) \\[SIG Auth, Node
          and Testing]\n- The `PreferSameZone` and `PreferSameNode` values for the
          Service\n  `trafficDistribution` field graduated to general availability.
          The\n  `PreferClose` value is now deprecated in favor of the more explicit\n
          \ `PreferSameZone`. ([kubernetes/kubernetes#134457](https://redirect.github.com/kubernetes/kubernetes/pull/134457),
          [@&#8203;danwinship](https://redirect.github.com/danwinship)) \\[SIG API
          Machinery, Apps, Network and Testing]\n- Updated `ResourceQuota` to count
          device class requests within a `ResourceClaim` as two additional quotas
          when the `DRAExtendedResource` feature is enabled:\n  - `requests.deviceclass.resource.k8s.io/<deviceclass>`
          is charged based on the worst-case number of devices requested.\n  - Device
          classes mapping to an extended resource now consume `requests.<extended
          resource name>`. ([kubernetes/kubernetes#134210](https://redirect.github.com/kubernetes/kubernetes/pull/134210),
          [@&#8203;yliaog](https://redirect.github.com/yliaog)) \\[SIG API Machinery,
          Apps, Node, Scheduling and Testing]\n- Updated storage version for `MutatingAdmissionPolicy`
          to `v1beta1`. ([kubernetes/kubernetes#133715](https://redirect.github.com/kubernetes/kubernetes/pull/133715),
          [@&#8203;cici37](https://redirect.github.com/cici37)) \\[SIG API Machinery,
          Etcd and Testing]\n- Updated the Partitionable Devices feature to support
          referencing counter sets across ResourceSlices within the same resource
          pool. Devices from incomplete pools were no longer considered for allocation.
          This change introduced backwards-incompatible updates to the alpha feature,
          requiring any ResourceSlices using it to be removed before upgrading or
          downgrading between v1.34 and v1.35. ([kubernetes/kubernetes#134189](https://redirect.github.com/kubernetes/kubernetes/pull/134189),
          [@&#8203;mortent](https://redirect.github.com/mortent)) \\[SIG API Machinery,
          Node, Scheduling and Testing]\n- Upgraded the `PodObservedGenerationTracking`
          feature to beta in `v1.34` and removed the alpha version description from
          the OpenAPI specification. ([kubernetes/kubernetes#133883](https://redirect.github.com/kubernetes/kubernetes/pull/133883),
          [@&#8203;yangjunmyfm192085](https://redirect.github.com/yangjunmyfm192085))\n-
          Add scoring for the prioritized list feature so that the node that can satisfy
          the best ranked subrequests are chosen. ([kubernetes/kubernetes#134711](https://redirect.github.com/kubernetes/kubernetes/pull/134711),
          [@&#8203;mortent](https://redirect.github.com/mortent)) \\[SIG Node, Scheduling
          and Testing]\n- Allows restart all containers when the source container
          exits with a matching restart policy rule. This is an alpha feature behind
          feature gate RestartAllContainersOnContainerExit. ([kubernetes/kubernetes#134345](https://redirect.github.com/kubernetes/kubernetes/pull/134345),
          [@&#8203;yuanwang04](https://redirect.github.com/yuanwang04)) \\[SIG Apps,
          Node and Testing]\n- Changed kuberc configuration schema. Two new optional
          fields added to kuberc configuration, `credPluginPolicy` and `credPluginAllowlist`.
          This is documented in [KEP-3104](https://redirect.github.com/kubernetes/enhancements/blob/master/keps/sig-cli/3104-introduce-kuberc/README.md#allowlist-design-details)
          and documentation is added to the website by [kubernetes/website#52877](https://redirect.github.com/kubernetes/website/pull/52877)
          ([kubernetes/kubernetes#134870](https://redirect.github.com/kubernetes/kubernetes/pull/134870),
          [@&#8203;pmengelbert](https://redirect.github.com/pmengelbert)) \\[SIG API
          Machinery, Architecture, Auth, CLI, Instrumentation and Testing]\n- Enhanced
          discovery response to support merged API groups/resources from all peer
          apiservers when UnknownVersionInteroperabilityProxy feature is enabled ([kubernetes/kubernetes#133648](https://redirect.github.com/kubernetes/kubernetes/pull/133648),
          [@&#8203;richabanker](https://redirect.github.com/richabanker)) \\[SIG API
          Machinery, Auth, Cloud Provider, Node, Scheduling and Testing]\n- Extend
          `core/v1 Toleration` to support numeric comparison operators (`Gt`, `Lt`).
          ([kubernetes/kubernetes#134665](https://redirect.github.com/kubernetes/kubernetes/pull/134665),
          [@&#8203;helayoty](https://redirect.github.com/helayoty)) \\[SIG API Machinery,
          Apps, Node, Scheduling, Testing and Windows]\n- Features: NominatedNodeNameForExpectation
          in kube-scheduler and CleaeringNominatedNodeNameAfterBinding in kube-apiserver
          are now enabled by default. ([kubernetes/kubernetes#135103](https://redirect.github.com/kubernetes/kubernetes/pull/135103),
          [@&#8203;ania-borowiec](https://redirect.github.com/ania-borowiec)) \\[SIG
          API Machinery, Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider,
          Cluster Lifecycle, Etcd, Instrumentation, Network, Node, Scheduling, Storage
          and Testing]\n- Implement changes to prevent pod scheduling to a node without
          CSI driver ([kubernetes/kubernetes#135012](https://redirect.github.com/kubernetes/kubernetes/pull/135012),
          [@&#8203;gnufied](https://redirect.github.com/gnufied)) \\[SIG API Machinery,
          Scheduling, Storage and Testing]\n- Introduce scheduling.k8s.io/v1alpha1
          Workload API to allow for expressing workload-level scheduling requirements
          and let kube-scheduler act on those. ([kubernetes/kubernetes#134564](https://redirect.github.com/kubernetes/kubernetes/pull/134564),
          [@&#8203;macsko](https://redirect.github.com/macsko)) \\[SIG API Machinery,
          Apps, CLI, Etcd, Scheduling and Testing]\n- Introduce the alpha MutableSchedulingDirectivesForSuspendedJobs
          feature gate (disabled by default) which:\n  1. allows to mutate Job's scheduling
          directives for suspended Jobs\n  2. makes the Job controller to clear the
          status.startTime field for suspended Jobs ([kubernetes/kubernetes#135104](https://redirect.github.com/kubernetes/kubernetes/pull/135104),
          [@&#8203;mimowo](https://redirect.github.com/mimowo)) \\[SIG Apps and Testing]\n-
          Introduced GangScheduling kube-scheduler plugin to enable \"all-or-nothing\"
          scheduling. Workload API in scheduling.k8s.io/v1alpha1 is used to express
          the desired policy. ([kubernetes/kubernetes#134722](https://redirect.github.com/kubernetes/kubernetes/pull/134722),
          [@&#8203;macsko](https://redirect.github.com/macsko)) \\[SIG API Machinery,
          Apps, Auth, CLI, Etcd, Scheduling and Testing]\n- PV node affinity is now
          mutable. ([kubernetes/kubernetes#134339](https://redirect.github.com/kubernetes/kubernetes/pull/134339),
          [@&#8203;huww98](https://redirect.github.com/huww98)) \\[SIG API Machinery,
          Apps and Node]\n- ResourceQuota now counts device class requests within
          a ResourceClaim object as consuming two additional quotas when the DRAExtendedResource
          feature is enabled:\n  - `requests.deviceclass.resource.k8s.io/<deviceclass>`
          with a quantity equal to the worst case count of devices requested\n  -
          requests for device classes that map to an extended resource consume `requests.<extended
          resource name>` ([kubernetes/kubernetes#134210](https://redirect.github.com/kubernetes/kubernetes/pull/134210),
          [@&#8203;yliaog](https://redirect.github.com/yliaog)) \\[SIG API Machinery,
          Apps, Node, Scheduling and Testing]\n- The DRA device taints and toleration
          feature now has a separate feature gate, DRADeviceTaintRules, which controls
          whether support for DeviceTaintRules is enabled. It is possible to disable
          that and keep DRADeviceTaints enabled, in which case tainting by DRA drivers
          through ResourceSlices continues to work. ([kubernetes/kubernetes#135068](https://redirect.github.com/kubernetes/kubernetes/pull/135068),
          [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG API Machinery,
          Apps, Auth, Node, Scheduling and Testing]\n- The ImagePullIntent and ImagePulledRecord
          objects used by kubelet to store information about image pulls have been
          moved to the v1beta1 API version. ([kubernetes/kubernetes#132579](https://redirect.github.com/kubernetes/kubernetes/pull/132579),
          [@&#8203;stlaz](https://redirect.github.com/stlaz)) \\[SIG Auth and Node]\n-
          The KubeletEnsureSecretPulledImages feature is now beta and enabled by default.
          ([kubernetes/kubernetes#135228](https://redirect.github.com/kubernetes/kubernetes/pull/135228),
          [@&#8203;aramase](https://redirect.github.com/aramase)) \\[SIG Auth, Node
          and Testing]\n- This change adds a new alpha feature Node Declared Features,
          which includes:\n  - A new `Node.Status.DeclaredFeatures` field for Kubelet
          to publish node-specific features.\n  - A library in `component-helpers`
          for feature registration and inference.\n  - A scheduler plugin (`NodeDeclaredFeatures`)
          scheduler plugin to match pods with nodes that provide their required features.\n
          \ - An admission plugin (`NodeDeclaredFeatureValidator`) to validate pod
          updates against a node's declared features. ([kubernetes/kubernetes#133389](https://redirect.github.com/kubernetes/kubernetes/pull/133389),
          [@&#8203;pravk03](https://redirect.github.com/pravk03)) \\[SIG API Machinery,
          Apps, Node, Release, Scheduling and Testing]\n- This change allows In Place
          Resize of Pod Level Resources\n  - Add Resources in PodStatus to capture
          resources set at pod-level cgroup\n  - Add AllocatedResources in PodStatus
          to capture resources requested in the PodSpec ([kubernetes/kubernetes#132919](https://redirect.github.com/kubernetes/kubernetes/pull/132919),
          [@&#8203;ndixita](https://redirect.github.com/ndixita)) \\[SIG API Machinery,
          Apps, Architecture, Auth, CLI, Instrumentation, Node, Scheduling and Testing]\n-
          Updates to the Partitionable Devices feature which allows for referencing
          counter sets across different ResourceSlices within the same resource pool.\n\n
          \ Devices from incomplete pools are no longer considered for allocation.\n\n
          \ This contains backwards incompatible changes to the Partitionable Devices
          alpha feature, so any ResourceSlices that uses the feature should be removed
          prior to upgrading or downgrading between 1.34 and 1.35. ([kubernetes/kubernetes#134189](https://redirect.github.com/kubernetes/kubernetes/pull/134189),
          [@&#8203;mortent](https://redirect.github.com/mortent)) \\[SIG API Machinery,
          Node, Scheduling and Testing]\n- Add ObservedGeneration to CustomResourceDefinition
          Conditions. ([kubernetes/kubernetes#134984](https://redirect.github.com/kubernetes/kubernetes/pull/134984),
          [@&#8203;michaelasp](https://redirect.github.com/michaelasp)) \\[SIG API
          Machinery]\n- Add StorageVersionMigration v1beta1 api and remove the v1alpha
          API.\n\n  Any use of the v1alpha1 api is no longer supported and\n  users
          must remove any v1alpha1 resources prior to upgrade. ([kubernetes/kubernetes#134784](https://redirect.github.com/kubernetes/kubernetes/pull/134784),
          [@&#8203;michaelasp](https://redirect.github.com/michaelasp)) \\[SIG API
          Machinery, Apps, Auth, Etcd and Testing]\n- CSI drivers can now opt-in to
          receive service account tokens via the secrets field instead of volume context
          by setting `spec.serviceAccountTokenInSecrets: true` in the CSIDriver object.
          This prevents tokens from being exposed in logs and other outputs. The feature
          is gated by the `CSIServiceAccountTokenSecrets` feature gate (Beta in v1.35).
          ([kubernetes/kubernetes#134826](https://redirect.github.com/kubernetes/kubernetes/pull/134826),
          [@&#8203;aramase](https://redirect.github.com/aramase)) \\[SIG API Machinery,
          Auth, Storage and Testing]\n- DRA device taints: DeviceTaintRule status
          provided information about the rule, in particular whether pods still need
          to be evicted (\"EvictionInProgress\" condition). The new \"None\" effect
          can be used to preview what a DeviceTaintRule would do if it used the \"NoExecute\"
          effect and to taint devices (\"device health\") without immediately affecting
          scheduling or running pods. ([kubernetes/kubernetes#134152](https://redirect.github.com/kubernetes/kubernetes/pull/134152),
          [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG API Machinery,
          Apps, Auth, Node, Release, Scheduling and Testing]\n- DRA: the DynamicResourceAllocation
          feature gate for the core functionality (GA in 1.34) is now locked to enabled-by-default
          and thus cannot be disabled anymore. ([kubernetes/kubernetes#134452](https://redirect.github.com/kubernetes/kubernetes/pull/134452),
          [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG Auth, Node, Scheduling
          and Testing]\n- Forbid adding resources other than CPU & memory on pod resize.
          ([kubernetes/kubernetes#135084](https://redirect.github.com/kubernetes/kubernetes/pull/135084),
          [@&#8203;tallclair](https://redirect.github.com/tallclair)) \\[SIG Apps,
          Node and Testing]\n- Implement constrained impersonation as described in
          <https://kep.k8s.io/5284> ([kubernetes/kubernetes#134803](https://redirect.github.com/kubernetes/kubernetes/pull/134803),
          [@&#8203;enj](https://redirect.github.com/enj)) \\[SIG API Machinery, Auth
          and Testing]\n- Introduces a structured and versioned v1alpha1 response
          for flagz ([kubernetes/kubernetes#134995](https://redirect.github.com/kubernetes/kubernetes/pull/134995),
          [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API
          Machinery, Architecture, Instrumentation, Network, Node, Scheduling and
          Testing]\n- Introduces a structured and versioned v1alpha1 response for
          statusz ([kubernetes/kubernetes#134313](https://redirect.github.com/kubernetes/kubernetes/pull/134313),
          [@&#8203;richabanker](https://redirect.github.com/richabanker)) \\[SIG API
          Machinery, Architecture, Instrumentation, Network, Node, Scheduling and
          Testing]\n- New `--min-compatibility-version` flag for apiserver, kcm and
          kube scheduler ([kubernetes/kubernetes#133980](https://redirect.github.com/kubernetes/kubernetes/pull/133980),
          [@&#8203;siyuanfoundation](https://redirect.github.com/siyuanfoundation))
          \\[SIG API Machinery, Architecture, Cluster Lifecycle, Etcd, Scheduling
          and Testing]\n- Promote PodObservedGenerationTracking to GA. ([kubernetes/kubernetes#134948](https://redirect.github.com/kubernetes/kubernetes/pull/134948),
          [@&#8203;natasha41575](https://redirect.github.com/natasha41575)) \\[SIG
          API Machinery, Apps, Node, Scheduling and Testing]\n- Promoted Job Managed
          By to general availability. The `JobManagedBy` feature gate is now locked
          to true, and will be removed in a future release of Kubernetes. ([kubernetes/kubernetes#135080](https://redirect.github.com/kubernetes/kubernetes/pull/135080),
          [@&#8203;dejanzele](https://redirect.github.com/dejanzele)) \\[SIG API Machinery,
          Apps and Testing]\n- Promoted ReplicaSet and Deployment `.status.terminatingReplicas`
          tracking to beta. The `DeploymentReplicaSetTerminatingReplicas` feature
          gate is now enabled by default. ([kubernetes/kubernetes#133087](https://redirect.github.com/kubernetes/kubernetes/pull/133087),
          [@&#8203;atiratree](https://redirect.github.com/atiratree)) \\[SIG API Machinery,
          Apps and Testing]\n- Scheduler: added a new `bindingTimeout` argument to
          the DynamicResources plugin configuration.\n  This allows customizing the
          wait duration in PreBind for device binding conditions.\n  Defaults to 10
          minutes when DRADeviceBindingConditions and DRAResourceClaimDeviceStatus
          are both enabled. ([kubernetes/kubernetes#134905](https://redirect.github.com/kubernetes/kubernetes/pull/134905),
          [@&#8203;fj-naji](https://redirect.github.com/fj-naji)) \\[SIG Node and
          Scheduling]\n- The Pod Certificates feature is moving to beta. The PodCertificateRequest
          feature gate is still set false by default. To use the feature, users will
          need to enable the certificates API groups in v1beta1 and enable the feature
          gate PodCertificateRequest. A new field UserAnnotations is added to the
          PodCertificateProjection API and the corresponding UnverifiedUserAnnotations
          is added to the PodCertificateRequest API. ([kubernetes/kubernetes#134624](https://redirect.github.com/kubernetes/kubernetes/pull/134624),
          [@&#8203;yt2985](https://redirect.github.com/yt2985)) \\[SIG API Machinery,
          Apps, Auth, Etcd, Instrumentation, Node and Testing]\n- The StrictCostEnforcementForVAP
          and StrictCostEnforcementForWebhooks feature gates, locked on since 1.32,
          have been removed ([kubernetes/kubernetes#134994](https://redirect.github.com/kubernetes/kubernetes/pull/134994),
          [@&#8203;liggitt](https://redirect.github.com/liggitt)) \\[SIG API Machinery,
          Auth, Node and Testing]\n- The `PreferSameZone` and `PreferSameNode` values
          for Service's\n  `trafficDistribution` field are now GA. The old value `PreferClose`
          is now\n  deprecated in favor of the more-explicit `PreferSameZone`. ([kubernetes/kubernetes#134457](https://redirect.github.com/kubernetes/kubernetes/pull/134457),
          [@&#8203;danwinship](https://redirect.github.com/danwinship)) \\[SIG API
          Machinery, Apps, Network and Testing]\n- Kube-apiserver: fix a possible
          panic validating a custom resource whose CustomResourceDefinition indicates
          a status subresource exists, but which does not define a `status` property
          in the `openAPIV3Schema` ([kubernetes/kubernetes#133721](https://redirect.github.com/kubernetes/kubernetes/pull/133721),
          [@&#8203;fusida](https://redirect.github.com/fusida)) \\[SIG API Machinery,
          Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle,
          Etcd, Instrumentation, Network, Node, Release, Scheduling, Storage and Testing]\n-
          Kubernetes API Go types removed runtime use of the github.com/gogo/protobuf
          library, and are no longer registered into the global gogo type registry.
          Kubernetes API Go types were not suitable for use with the google.golang.org/protobuf
          library, and no longer implement `ProtoMessage()` by default to avoid accidental
          incompatible use. If removal of these marker methods impacts your use, it
          can be re-enabled for one more release with a `kubernetes_protomessage_one_more_release`
          build tag, but will be removed in 1.36. ([kubernetes/kubernetes#134256](https://redirect.github.com/kubernetes/kubernetes/pull/134256),
          [@&#8203;liggitt](https://redirect.github.com/liggitt)) \\[SIG API Machinery,
          Apps, Architecture, Auth, CLI, Cluster Lifecycle, Instrumentation, Network,
          Node, Scheduling and Storage]\n- Promoted HPA configurable tolerance to
          beta. The `HPAConfigurableTolerance` feature gate is now enabled by default.
          ([kubernetes/kubernetes#133128](https://redirect.github.com/kubernetes/kubernetes/pull/133128),
          [@&#8203;jm-franc](https://redirect.github.com/jm-franc)) \\[SIG API Machinery
          and Autoscaling]\n- The MaxUnavailableStatefulSet feature is now beta and
          enabled by default. ([kubernetes/kubernetes#133153](https://redirect.github.com/kubernetes/kubernetes/pull/133153),
          [@&#8203;helayoty](https://redirect.github.com/helayoty)) \\[SIG API Machinery
          and Apps]\n- Added WithOrigin within apis/core/validation with adjusted
          tests ([kubernetes/kubernetes#132825](https://redirect.github.com/kubernetes/kubernetes/pull/132825),
          [@&#8203;PatrickLaabs](https://redirect.github.com/PatrickLaabs)) \\[SIG
          Apps]\n- Component-base: validate that log-flush-frequency is positive and
          return an error instead of panic-ing ([kubernetes/kubernetes#133540](https://redirect.github.com/kubernetes/kubernetes/pull/133540),
          [@&#8203;BenTheElder](https://redirect.github.com/BenTheElder)) \\[SIG Architecture,
          Instrumentation, Network and Node]\n- Feature gate dependencies are now
          explicit, and validated at startup. A feature can no longer be enabled if
          it depends on a disabled feature. In particular, this means that `AllAlpha=true`
          will no longer work without enabling disabled-by-default beta features that
          are depended on (either with `AllBeta=true` or explicitly enumerating the
          disabled dependencies). ([kubernetes/kubernetes#133697](https://redirect.github.com/kubernetes/kubernetes/pull/133697),
          [@&#8203;tallclair](https://redirect.github.com/tallclair)) \\[SIG API Machinery,
          Architecture, Cluster Lifecycle and Node]\n- In version 1.34, the PodObservedGenerationTracking
          feature has been upgraded to beta, and the description of the alpha version
          in the openapi has been removed. ([kubernetes/kubernetes#133883](https://redirect.github.com/kubernetes/kubernetes/pull/133883),
          [@&#8203;yangjunmyfm192085](https://redirect.github.com/yangjunmyfm192085))
          \\[SIG Apps]\n- Introduce a new declarative validation tag +k8s:customUnique
          to control listmap uniqueness ([kubernetes/kubernetes#134279](https://redirect.github.com/kubernetes/kubernetes/pull/134279),
          [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API
          Machinery and Auth]\n- Kube-apiserver: Fixed a 1.34 regression in CustomResourceDefinition
          handling that incorrectly warned about unrecognized formats on number and
          integer properties ([kubernetes/kubernetes#133896](https://redirect.github.com/kubernetes/kubernetes/pull/133896),
          [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API
          Machinery, Apps, Architecture, Auth, CLI, Cloud Provider, Contributor Experience,
          Network, Node and Scheduling]\n- OpenAPI model packages of API types are
          generated into `zz_generated.model_name.go` files and are accessible using
          the `OpenAPIModelName()` function.  This allows API authors to declare the
          desired OpenAPI model packages instead of using the go package path of API
          types. ([kubernetes/kubernetes#131755](https://redirect.github.com/kubernetes/kubernetes/pull/131755),
          [@&#8203;jpbetz](https://redirect.github.com/jpbetz)) \\[SIG API Machinery,
          Apps, Architecture, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation,
          Network, Node, Scheduling, Storage and Testing]\n- Support for `kubectl
          get -o kyaml` is now on by default.  To disable it, set `KUBECTL_KYAML=false`.
          ([kubernetes/kubernetes#133327](https://redirect.github.com/kubernetes/kubernetes/pull/133327),
          [@&#8203;thockin](https://redirect.github.com/thockin)) \\[SIG CLI]\n- The
          storage version for MutatingAdmissionPolicy is updated to v1beta1. ([kubernetes/kubernetes#133715](https://redirect.github.com/kubernetes/kubernetes/pull/133715),
          [@&#8203;cici37](https://redirect.github.com/cici37)) \\[SIG API Machinery,
          Etcd and Testing]\n\n### [`v34.1.0`](https://redirect.github.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v3410b1)\n\n[Compare
          Source](https://redirect.github.com/kubernetes-client/python/compare/v33.1.0...v34.1.0)\n\nKubernetes
          API Version: v1.34.1\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: (UTC)\n\n- Branch creation\n  - At any time (no schedule defined)\n-
          Automerge\n  - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**:
          Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B
          **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
          checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
          about this update again.\n\n---\n\n - [ ] <!-- rebase-check -->If you want
          to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated
          by [Mend Renovate](https://mend.io/renovate/). View the [repository job
          log](https://developer.mend.io/github/osism/container-image-osism-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi43NC41IiwidXBkYXRlZEluVmVyIjoiNDMuMTgyLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/container-image-osism-ansible/pull/713
        commit_id: 6e48d1dc1035117b15ee5b14d185ab7b33ab1fed
        patchset: 6e48d1dc1035117b15ee5b14d185ab7b33ab1fed
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-osism-ansible
          name: osism/container-image-osism-ansible
          short_name: container-image-osism-ansible
        src_dir: src/github.com/osism/container-image-osism-ansible
        topic: null
      buildset: 435ee368836d4eb48e3adcea232eda9d
      buildset_refs:
      - branch: main
        change: '713'
        change_message: "chore(deps): update dependency kubernetes to v35\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [kubernetes](https://redirect.github.com/kubernetes-client/python) | `==33.1.0`
          \u2192 `==35.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/kubernetes/35.0.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/kubernetes/33.1.0/35.0.0?slim=true)
          |\n\n---\n\n> [!WARNING]\n> Some dependencies could not be looked up. Check
          the [Dependency Dashboard](../issues/218) for more information.\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>kubernetes-client/python (kubernetes)</summary>\n\n###
          [`v35.0.0`](https://redirect.github.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v3500snapshot)\n\n[Compare
          Source](https://redirect.github.com/kubernetes-client/python/compare/v34.1.0...v35.0.0)\n\nKubernetes
          API Version: v1.35.0\n\n##### API Change\n\n- Added `ObservedGeneration`
          to CustomResourceDefinition conditions. ([kubernetes/kubernetes#134984](https://redirect.github.com/kubernetes/kubernetes/pull/134984),
          [@&#8203;michaelasp](https://redirect.github.com/michaelasp))\n- Added `WithOrigin`
          within `apis/core/validation` with adjusted tests. ([kubernetes/kubernetes#132825](https://redirect.github.com/kubernetes/kubernetes/pull/132825),
          [@&#8203;PatrickLaabs](https://redirect.github.com/PatrickLaabs))\n- Added
          scoring for the prioritized list feature so nodes that best satisfy the
          highest-ranked subrequests were chosen. ([kubernetes/kubernetes#134711](https://redirect.github.com/kubernetes/kubernetes/pull/134711),
          [@&#8203;mortent](https://redirect.github.com/mortent)) \\[SIG Node, Scheduling
          and Testing]\n- Added the `--min-compatibility-version` flag to `kube-apiserver`,
          `kube-controller-manager`, and `kube-scheduler`. ([kubernetes/kubernetes#133980](https://redirect.github.com/kubernetes/kubernetes/pull/133980),
          [@&#8203;siyuanfoundation](https://redirect.github.com/siyuanfoundation))
          \\[SIG API Machinery, Architecture, Cluster Lifecycle, Etcd, Scheduling
          and Testing]\n- Added the `StorageVersionMigration` `v1beta1` API and removed
          the `v1alpha1` API.\n\n  ACTION REQUIRED: The `v1alpha1` API is no longer
          supported. Users must remove any `v1alpha1` resources before upgrading.
          ([kubernetes/kubernetes#134784](https://redirect.github.com/kubernetes/kubernetes/pull/134784),
          [@&#8203;michaelasp](https://redirect.github.com/michaelasp)) \\[SIG API
          Machinery, Apps, Auth, Etcd and Testing]\n- Added validation to ensure `log-flush-frequency`
          is a positive value, returning an error instead of causing a panic. ([kubernetes/kubernetes#133540](https://redirect.github.com/kubernetes/kubernetes/pull/133540),
          [@&#8203;BenTheElder](https://redirect.github.com/BenTheElder)) \\[SIG Architecture,
          Instrumentation, Network and Node]\n- All containers are restarted when
          a source container in a restart policy rule exits. This alpha feature is
          gated behind `RestartAllContainersOnContainerExit`. ([kubernetes/kubernetes#134345](https://redirect.github.com/kubernetes/kubernetes/pull/134345),
          [@&#8203;yuanwang04](https://redirect.github.com/yuanwang04)) \\[SIG Apps,
          Node and Testing]\n- CSI drivers can now opt in to receive service account
          tokens via the secrets field instead of volume context by setting `spec.serviceAccountTokenInSecrets:
          true` in the CSIDriver object. This prevents tokens from being exposed in
          logs and other outputs. The feature is gated by the `CSIServiceAccountTokenSecrets`
          feature gate (beta in `v1.35`). ([kubernetes/kubernetes#134826](https://redirect.github.com/kubernetes/kubernetes/pull/134826),
          [@&#8203;aramase](https://redirect.github.com/aramase)) \\[SIG API Machinery,
          Auth, Storage and Testing]\n- Changed kuberc configuration schema. Two new
          optional fields added to kuberc configuration, `credPluginPolicy` and `credPluginAllowlist`.
          This is documented in [KEP-3104](https://redirect.github.com/kubernetes/enhancements/blob/master/keps/sig-cli/3104-introduce-kuberc/README.md#allowlist-design-details)
          and documentation is added to the website by [kubernetes/website#52877](https://redirect.github.com/kubernetes/website/pull/52877)
          ([kubernetes/kubernetes#134870](https://redirect.github.com/kubernetes/kubernetes/pull/134870),
          [@&#8203;pmengelbert](https://redirect.github.com/pmengelbert)) \\[SIG API
          Machinery, Architecture, Auth, CLI, Instrumentation and Testing]\n- DRA
          device taints: `DeviceTaintRule` status provides information about the rule,
          including whether Pods still need to be evicted (`EvictionInProgress` condition).
          The newly added `None` effect can be used to preview what a `DeviceTaintRule`
          would do if it used the `NoExecute` effect and to taint devices (`device
          health`) without immediately affecting scheduling or running Pods. ([kubernetes/kubernetes#134152](https://redirect.github.com/kubernetes/kubernetes/pull/134152),
          [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG API Machinery,
          Apps, Auth, Node, Release, Scheduling and Testing]\n- DRA: The `DynamicResourceAllocation`
          feature gate for the core functionality (GA in `v1.34`) has now been locked
          to enabled-by-default and cannot be disabled anymore. ([kubernetes/kubernetes#134452](https://redirect.github.com/kubernetes/kubernetes/pull/134452),
          [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG Auth, Node, Scheduling
          and Testing]\n- Enabled `kubectl get -o kyaml` by default. To disable it,
          set `KUBECTL_KYAML=false`. ([kubernetes/kubernetes#133327](https://redirect.github.com/kubernetes/kubernetes/pull/133327),
          [@&#8203;thockin](https://redirect.github.com/thockin))\n- Enabled in-place
          resizing of pod-level resources.\n  - Added `Resources` in `PodStatus` to
          capture resources set in the pod-level cgroup.\n  - Added `AllocatedResources`
          in `PodStatus` to capture resources requested in the `PodSpec`. ([kubernetes/kubernetes#132919](https://redirect.github.com/kubernetes/kubernetes/pull/132919),
          [@&#8203;ndixita](https://redirect.github.com/ndixita)) \\[SIG API Machinery,
          Apps, Architecture, Auth, CLI, Instrumentation, Node, Scheduling and Testing]\n-
          Enabled the `NominatedNodeNameForExpectation` feature in kube-scheduler
          by default.\n  - Enabled the `ClearingNominatedNodeNameAfterBinding` feature
          in kube-apiserver by default. ([kubernetes/kubernetes#135103](https://redirect.github.com/kubernetes/kubernetes/pull/135103),
          [@&#8203;ania-borowiec](https://redirect.github.com/ania-borowiec)) \\[SIG
          API Machinery, Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider,
          Cluster Lifecycle, Etcd, Instrumentation, Network, Node, Scheduling, Storage
          and Testing]\n- Enhanced discovery responses to merge API groups and resources
          from all peer apiservers when the `UnknownVersionInteroperabilityProxy`
          feature is enabled. ([kubernetes/kubernetes#133648](https://redirect.github.com/kubernetes/kubernetes/pull/133648),
          [@&#8203;richabanker](https://redirect.github.com/richabanker)) \\[SIG API
          Machinery, Auth, Cloud Provider, Node, Scheduling and Testing]\n- Extended
          `core/v1` `Toleration` to support numeric comparison operators (`Gt`,`Lt`).
          ([kubernetes/kubernetes#134665](https://redirect.github.com/kubernetes/kubernetes/pull/134665),
          [@&#8203;helayoty](https://redirect.github.com/helayoty)) \\[SIG API Machinery,
          Apps, Node, Scheduling, Testing and Windows]\n- Feature gate dependencies
          are now explicit, and validated at startup. A feature can no longer be enabled
          if it depends on a disabled feature. In particular, this means that `AllAlpha=true`
          will no longer work without enabling disabled-by-default beta features that
          are depended on (either with `AllBeta=true` or explicitly enumerating the
          disabled dependencies). ([kubernetes/kubernetes#133697](https://redirect.github.com/kubernetes/kubernetes/pull/133697),
          [@&#8203;tallclair](https://redirect.github.com/tallclair)) \\[SIG API Machinery,
          Architecture, Cluster Lifecycle and Node]\n- Generated OpenAPI model packages
          for API types into `zz_generated.model_name.go` files, accessible via the
          `OpenAPIModelName()` function. This allows API authors to declare desired
          OpenAPI model packages instead of relying on the Go package path of API
          types. ([kubernetes/kubernetes#131755](https://redirect.github.com/kubernetes/kubernetes/pull/131755),
          [@&#8203;jpbetz](https://redirect.github.com/jpbetz)) \\[SIG API Machinery,
          Apps, Architecture, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation,
          Network, Node, Scheduling, Storage and Testing]\n- Implemented constrained
          impersonation as described in [KEP-5284](https://kep.k8s.io/5284). ([kubernetes/kubernetes#134803](https://redirect.github.com/kubernetes/kubernetes/pull/134803),
          [@&#8203;enj](https://redirect.github.com/enj)) \\[SIG API Machinery, Auth
          and Testing]\n- Introduced a new declarative validation tag `+k8s:customUnique`
          to control listmap uniqueness. ([kubernetes/kubernetes#134279](https://redirect.github.com/kubernetes/kubernetes/pull/134279),
          [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API
          Machinery and Auth]\n- Introduced a structured and versioned `v1alpha1`
          response for the `statusz` endpoint. ([kubernetes/kubernetes#134313](https://redirect.github.com/kubernetes/kubernetes/pull/134313),
          [@&#8203;richabanker](https://redirect.github.com/richabanker)) \\[SIG API
          Machinery, Architecture, Instrumentation, Network, Node, Scheduling and
          Testing]\n- Introduced a structured and versioned `v1alpha1` response format
          for the `flagz` endpoint. ([kubernetes/kubernetes#134995](https://redirect.github.com/kubernetes/kubernetes/pull/134995),
          [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API
          Machinery, Architecture, Instrumentation, Network, Node, Scheduling and
          Testing]\n- Introduced the GangScheduling kube-scheduler plugin to support
          \"all-or-nothing\" scheduling using the `scheduling.k8s.io/v1alpha1` Workload
          API. ([kubernetes/kubernetes#134722](https://redirect.github.com/kubernetes/kubernetes/pull/134722),
          [@&#8203;macsko](https://redirect.github.com/macsko)) \\[SIG API Machinery,
          Apps, Auth, CLI, Etcd, Scheduling and Testing]\n- Introduced the Node Declared
          Features capability (alpha), which includes:\n  - A new `Node.Status.DeclaredFeatures`
          field for publishing node-specific features.\n  - A `component-helpers`
          library for feature registration and inference.\n  - A `NodeDeclaredFeatures`
          scheduler plugin to match pods with nodes that provide required features.\n
          \ - A `NodeDeclaredFeatureValidator` admission plugin to validate pod updates
          against a node's declared features. ([kubernetes/kubernetes#133389](https://redirect.github.com/kubernetes/kubernetes/pull/133389),
          [@&#8203;pravk03](https://redirect.github.com/pravk03)) \\[SIG API Machinery,
          Apps, Node, Release, Scheduling and Testing]\n- Introduced the `scheduling.k8s.io/v1alpha1`
          Workload API to express workload-level scheduling requirements and allow
          the kube-scheduler to act on them. ([kubernetes/kubernetes#134564](https://redirect.github.com/kubernetes/kubernetes/pull/134564),
          [@&#8203;macsko](https://redirect.github.com/macsko)) \\[SIG API Machinery,
          Apps, CLI, Etcd, Scheduling and Testing]\n- Introduced the alpha `MutableSchedulingDirectivesForSuspendedJobs`
          feature gate (disabled by default), which allows mutating a Job's scheduling
          directives while the Job is suspended.\n  It also updates the Job controller
          to clears the `status.startTime` field for suspended Jobs. ([kubernetes/kubernetes#135104](https://redirect.github.com/kubernetes/kubernetes/pull/135104),
          [@&#8203;mimowo](https://redirect.github.com/mimowo)) \\[SIG Apps and Testing]\n-
          Kube-apiserver: Fixed a `v1.34` regression in `CustomResourceDefinition`
          handling that incorrectly warned about unrecognized formats on number and
          integer properties. ([kubernetes/kubernetes#133896](https://redirect.github.com/kubernetes/kubernetes/pull/133896),
          [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API
          Machinery, Apps, Architecture, Auth, CLI, Cloud Provider, Contributor Experience,
          Network, Node and Scheduling]\n- Kube-apiserver: Fixed a possible panic
          validating a custom resource whose `CustomResourceDefinition` indicates
          a status subresource exists, but which does not define a `status` property
          in the `openAPIV3Schema`. ([kubernetes/kubernetes#133721](https://redirect.github.com/kubernetes/kubernetes/pull/133721),
          [@&#8203;fusida](https://redirect.github.com/fusida)) \\[SIG API Machinery,
          Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle,
          Etcd, Instrumentation, Network, Node, Release, Scheduling, Storage and Testing]\n-
          Kubernetes API Go types removed runtime use of the `github.com/gogo/protobuf`
          library, and are no longer registered into the global gogo type registry.
          Kubernetes API Go types were not suitable for use with the `google.golang.org/protobuf`
          library, and no longer implement `ProtoMessage()` by default to avoid accidental
          incompatible use. If removal of these marker methods impacts your use, it
          can be re-enabled for one more release with a `kubernetes_protomessage_one_more_release`
          build tag, but will be removed in `v1.36`. ([kubernetes/kubernetes#134256](https://redirect.github.com/kubernetes/kubernetes/pull/134256),
          [@&#8203;liggitt](https://redirect.github.com/liggitt)) \\[SIG API Machinery,
          Apps, Architecture, Auth, CLI, Cluster Lifecycle, Instrumentation, Network,
          Node, Scheduling and Storage]\n- Made node affinity in Persistent Volume
          mutable. ([kubernetes/kubernetes#134339](https://redirect.github.com/kubernetes/kubernetes/pull/134339),
          [@&#8203;huww98](https://redirect.github.com/huww98)) \\[SIG API Machinery,
          Apps and Node]\n- Moved the `ImagePullIntent` and `ImagePulledRecord` objects
          used by the kubelet to track image pulls to the `v1beta1` API version. ([kubernetes/kubernetes#132579](https://redirect.github.com/kubernetes/kubernetes/pull/132579),
          [@&#8203;stlaz](https://redirect.github.com/stlaz)) \\[SIG Auth and Node]\n-
          Pod resize now only allows CPU and memory resources; other resource types
          are forbidden. ([kubernetes/kubernetes#135084](https://redirect.github.com/kubernetes/kubernetes/pull/135084),
          [@&#8203;tallclair](https://redirect.github.com/tallclair)) \\[SIG Apps,
          Node and Testing]\n- Prevented Pods from being scheduled onto nodes that
          lack the required CSI driver. ([kubernetes/kubernetes#135012](https://redirect.github.com/kubernetes/kubernetes/pull/135012),
          [@&#8203;gnufied](https://redirect.github.com/gnufied)) \\[SIG API Machinery,
          Scheduling, Storage and Testing]\n- Promoted HPA configurable tolerance
          to beta. The `HPAConfigurableTolerance` feature gate has now been enabled
          by default. ([kubernetes/kubernetes#133128](https://redirect.github.com/kubernetes/kubernetes/pull/133128),
          [@&#8203;jm-franc](https://redirect.github.com/jm-franc)) \\[SIG API Machinery
          and Autoscaling]\n- Promoted ReplicaSet and Deployment `.status.terminatingReplicas`
          tracking to beta. The `DeploymentReplicaSetTerminatingReplicas` feature
          gate is now enabled by default. ([kubernetes/kubernetes#133087](https://redirect.github.com/kubernetes/kubernetes/pull/133087),
          [@&#8203;atiratree](https://redirect.github.com/atiratree)) \\[SIG API Machinery,
          Apps and Testing]\n- Promoted `PodObservedGenerationTracking` to GA. ([kubernetes/kubernetes#134948](https://redirect.github.com/kubernetes/kubernetes/pull/134948),
          [@&#8203;natasha41575](https://redirect.github.com/natasha41575)) \\[SIG
          API Machinery, Apps, Node, Scheduling and Testing]\n- Promoted the `JobManagedBy`
          feature to general availability. The `JobManagedBy` feature gate was locked
          to `true` and will be removed in a future Kubernetes release. ([kubernetes/kubernetes#135080](https://redirect.github.com/kubernetes/kubernetes/pull/135080),
          [@&#8203;dejanzele](https://redirect.github.com/dejanzele)) \\[SIG API Machinery,
          Apps and Testing]\n- Promoted the `MaxUnavailableStatefulSet` feature to
          beta and enabling it by default. ([kubernetes/kubernetes#133153](https://redirect.github.com/kubernetes/kubernetes/pull/133153),
          [@&#8203;helayoty](https://redirect.github.com/helayoty)) \\[SIG API Machinery
          and Apps]\n- Removed the `StrictCostEnforcementForVAP` and `StrictCostEnforcementForWebhooks`
          feature gates, which were locked since `v1.32`. ([kubernetes/kubernetes#134994](https://redirect.github.com/kubernetes/kubernetes/pull/134994),
          [@&#8203;liggitt](https://redirect.github.com/liggitt)) \\[SIG API Machinery,
          Auth, Node and Testing]\n- Scheduler: Added the `bindingTimeout` argument
          to the DynamicResources plugin configuration, allowing customization of
          the wait duration in `PreBind` for device binding conditions.\n  Defaults
          to 10 minutes when `DRADeviceBindingConditions` and `DRAResourceClaimDeviceStatus`
          are both enabled. ([kubernetes/kubernetes#134905](https://redirect.github.com/kubernetes/kubernetes/pull/134905),
          [@&#8203;fj-naji](https://redirect.github.com/fj-naji)) \\[SIG Node and
          Scheduling]\n- The DRA device taints and toleration feature received a separate
          feature gate, `DRADeviceTaintRules`, which controlled support for `DeviceTaintRules`.
          This allowed disabling it while keeping `DRADeviceTaints` enabled so that
          tainting via `ResourceSlices` continued to work. ([kubernetes/kubernetes#135068](https://redirect.github.com/kubernetes/kubernetes/pull/135068),
          [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG API Machinery,
          Apps, Auth, Node, Scheduling and Testing]\n- The Pod Certificates feature
          moved to beta. The `PodCertificateRequest` feature gate is set disabled
          by default. To use the feature, users must enable the certificates API groups
          in `v1beta1` and enable the `PodCertificateRequest` feature gate. The `UserAnnotations`
          field was added to the `PodCertificateProjection` API and the corresponding
          `UnverifiedUserAnnotations` field was added to the `PodCertificateRequest`
          API. ([kubernetes/kubernetes#134624](https://redirect.github.com/kubernetes/kubernetes/pull/134624),
          [@&#8203;yt2985](https://redirect.github.com/yt2985)) \\[SIG API Machinery,
          Apps, Auth, Etcd, Instrumentation, Node and Testing]\n- The `KubeletEnsureSecretPulledImages`
          feature was promoted to Beta and enabled by default. ([kubernetes/kubernetes#135228](https://redirect.github.com/kubernetes/kubernetes/pull/135228),
          [@&#8203;aramase](https://redirect.github.com/aramase)) \\[SIG Auth, Node
          and Testing]\n- The `PreferSameZone` and `PreferSameNode` values for the
          Service\n  `trafficDistribution` field graduated to general availability.
          The\n  `PreferClose` value is now deprecated in favor of the more explicit\n
          \ `PreferSameZone`. ([kubernetes/kubernetes#134457](https://redirect.github.com/kubernetes/kubernetes/pull/134457),
          [@&#8203;danwinship](https://redirect.github.com/danwinship)) \\[SIG API
          Machinery, Apps, Network and Testing]\n- Updated `ResourceQuota` to count
          device class requests within a `ResourceClaim` as two additional quotas
          when the `DRAExtendedResource` feature is enabled:\n  - `requests.deviceclass.resource.k8s.io/<deviceclass>`
          is charged based on the worst-case number of devices requested.\n  - Device
          classes mapping to an extended resource now consume `requests.<extended
          resource name>`. ([kubernetes/kubernetes#134210](https://redirect.github.com/kubernetes/kubernetes/pull/134210),
          [@&#8203;yliaog](https://redirect.github.com/yliaog)) \\[SIG API Machinery,
          Apps, Node, Scheduling and Testing]\n- Updated storage version for `MutatingAdmissionPolicy`
          to `v1beta1`. ([kubernetes/kubernetes#133715](https://redirect.github.com/kubernetes/kubernetes/pull/133715),
          [@&#8203;cici37](https://redirect.github.com/cici37)) \\[SIG API Machinery,
          Etcd and Testing]\n- Updated the Partitionable Devices feature to support
          referencing counter sets across ResourceSlices within the same resource
          pool. Devices from incomplete pools were no longer considered for allocation.
          This change introduced backwards-incompatible updates to the alpha feature,
          requiring any ResourceSlices using it to be removed before upgrading or
          downgrading between v1.34 and v1.35. ([kubernetes/kubernetes#134189](https://redirect.github.com/kubernetes/kubernetes/pull/134189),
          [@&#8203;mortent](https://redirect.github.com/mortent)) \\[SIG API Machinery,
          Node, Scheduling and Testing]\n- Upgraded the `PodObservedGenerationTracking`
          feature to beta in `v1.34` and removed the alpha version description from
          the OpenAPI specification. ([kubernetes/kubernetes#133883](https://redirect.github.com/kubernetes/kubernetes/pull/133883),
          [@&#8203;yangjunmyfm192085](https://redirect.github.com/yangjunmyfm192085))\n-
          Add scoring for the prioritized list feature so that the node that can satisfy
          the best ranked subrequests are chosen. ([kubernetes/kubernetes#134711](https://redirect.github.com/kubernetes/kubernetes/pull/134711),
          [@&#8203;mortent](https://redirect.github.com/mortent)) \\[SIG Node, Scheduling
          and Testing]\n- Allows restart all containers when the source container
          exits with a matching restart policy rule. This is an alpha feature behind
          feature gate RestartAllContainersOnContainerExit. ([kubernetes/kubernetes#134345](https://redirect.github.com/kubernetes/kubernetes/pull/134345),
          [@&#8203;yuanwang04](https://redirect.github.com/yuanwang04)) \\[SIG Apps,
          Node and Testing]\n- Changed kuberc configuration schema. Two new optional
          fields added to kuberc configuration, `credPluginPolicy` and `credPluginAllowlist`.
          This is documented in [KEP-3104](https://redirect.github.com/kubernetes/enhancements/blob/master/keps/sig-cli/3104-introduce-kuberc/README.md#allowlist-design-details)
          and documentation is added to the website by [kubernetes/website#52877](https://redirect.github.com/kubernetes/website/pull/52877)
          ([kubernetes/kubernetes#134870](https://redirect.github.com/kubernetes/kubernetes/pull/134870),
          [@&#8203;pmengelbert](https://redirect.github.com/pmengelbert)) \\[SIG API
          Machinery, Architecture, Auth, CLI, Instrumentation and Testing]\n- Enhanced
          discovery response to support merged API groups/resources from all peer
          apiservers when UnknownVersionInteroperabilityProxy feature is enabled ([kubernetes/kubernetes#133648](https://redirect.github.com/kubernetes/kubernetes/pull/133648),
          [@&#8203;richabanker](https://redirect.github.com/richabanker)) \\[SIG API
          Machinery, Auth, Cloud Provider, Node, Scheduling and Testing]\n- Extend
          `core/v1 Toleration` to support numeric comparison operators (`Gt`, `Lt`).
          ([kubernetes/kubernetes#134665](https://redirect.github.com/kubernetes/kubernetes/pull/134665),
          [@&#8203;helayoty](https://redirect.github.com/helayoty)) \\[SIG API Machinery,
          Apps, Node, Scheduling, Testing and Windows]\n- Features: NominatedNodeNameForExpectation
          in kube-scheduler and CleaeringNominatedNodeNameAfterBinding in kube-apiserver
          are now enabled by default. ([kubernetes/kubernetes#135103](https://redirect.github.com/kubernetes/kubernetes/pull/135103),
          [@&#8203;ania-borowiec](https://redirect.github.com/ania-borowiec)) \\[SIG
          API Machinery, Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider,
          Cluster Lifecycle, Etcd, Instrumentation, Network, Node, Scheduling, Storage
          and Testing]\n- Implement changes to prevent pod scheduling to a node without
          CSI driver ([kubernetes/kubernetes#135012](https://redirect.github.com/kubernetes/kubernetes/pull/135012),
          [@&#8203;gnufied](https://redirect.github.com/gnufied)) \\[SIG API Machinery,
          Scheduling, Storage and Testing]\n- Introduce scheduling.k8s.io/v1alpha1
          Workload API to allow for expressing workload-level scheduling requirements
          and let kube-scheduler act on those. ([kubernetes/kubernetes#134564](https://redirect.github.com/kubernetes/kubernetes/pull/134564),
          [@&#8203;macsko](https://redirect.github.com/macsko)) \\[SIG API Machinery,
          Apps, CLI, Etcd, Scheduling and Testing]\n- Introduce the alpha MutableSchedulingDirectivesForSuspendedJobs
          feature gate (disabled by default) which:\n  1. allows to mutate Job's scheduling
          directives for suspended Jobs\n  2. makes the Job controller to clear the
          status.startTime field for suspended Jobs ([kubernetes/kubernetes#135104](https://redirect.github.com/kubernetes/kubernetes/pull/135104),
          [@&#8203;mimowo](https://redirect.github.com/mimowo)) \\[SIG Apps and Testing]\n-
          Introduced GangScheduling kube-scheduler plugin to enable \"all-or-nothing\"
          scheduling. Workload API in scheduling.k8s.io/v1alpha1 is used to express
          the desired policy. ([kubernetes/kubernetes#134722](https://redirect.github.com/kubernetes/kubernetes/pull/134722),
          [@&#8203;macsko](https://redirect.github.com/macsko)) \\[SIG API Machinery,
          Apps, Auth, CLI, Etcd, Scheduling and Testing]\n- PV node affinity is now
          mutable. ([kubernetes/kubernetes#134339](https://redirect.github.com/kubernetes/kubernetes/pull/134339),
          [@&#8203;huww98](https://redirect.github.com/huww98)) \\[SIG API Machinery,
          Apps and Node]\n- ResourceQuota now counts device class requests within
          a ResourceClaim object as consuming two additional quotas when the DRAExtendedResource
          feature is enabled:\n  - `requests.deviceclass.resource.k8s.io/<deviceclass>`
          with a quantity equal to the worst case count of devices requested\n  -
          requests for device classes that map to an extended resource consume `requests.<extended
          resource name>` ([kubernetes/kubernetes#134210](https://redirect.github.com/kubernetes/kubernetes/pull/134210),
          [@&#8203;yliaog](https://redirect.github.com/yliaog)) \\[SIG API Machinery,
          Apps, Node, Scheduling and Testing]\n- The DRA device taints and toleration
          feature now has a separate feature gate, DRADeviceTaintRules, which controls
          whether support for DeviceTaintRules is enabled. It is possible to disable
          that and keep DRADeviceTaints enabled, in which case tainting by DRA drivers
          through ResourceSlices continues to work. ([kubernetes/kubernetes#135068](https://redirect.github.com/kubernetes/kubernetes/pull/135068),
          [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG API Machinery,
          Apps, Auth, Node, Scheduling and Testing]\n- The ImagePullIntent and ImagePulledRecord
          objects used by kubelet to store information about image pulls have been
          moved to the v1beta1 API version. ([kubernetes/kubernetes#132579](https://redirect.github.com/kubernetes/kubernetes/pull/132579),
          [@&#8203;stlaz](https://redirect.github.com/stlaz)) \\[SIG Auth and Node]\n-
          The KubeletEnsureSecretPulledImages feature is now beta and enabled by default.
          ([kubernetes/kubernetes#135228](https://redirect.github.com/kubernetes/kubernetes/pull/135228),
          [@&#8203;aramase](https://redirect.github.com/aramase)) \\[SIG Auth, Node
          and Testing]\n- This change adds a new alpha feature Node Declared Features,
          which includes:\n  - A new `Node.Status.DeclaredFeatures` field for Kubelet
          to publish node-specific features.\n  - A library in `component-helpers`
          for feature registration and inference.\n  - A scheduler plugin (`NodeDeclaredFeatures`)
          scheduler plugin to match pods with nodes that provide their required features.\n
          \ - An admission plugin (`NodeDeclaredFeatureValidator`) to validate pod
          updates against a node's declared features. ([kubernetes/kubernetes#133389](https://redirect.github.com/kubernetes/kubernetes/pull/133389),
          [@&#8203;pravk03](https://redirect.github.com/pravk03)) \\[SIG API Machinery,
          Apps, Node, Release, Scheduling and Testing]\n- This change allows In Place
          Resize of Pod Level Resources\n  - Add Resources in PodStatus to capture
          resources set at pod-level cgroup\n  - Add AllocatedResources in PodStatus
          to capture resources requested in the PodSpec ([kubernetes/kubernetes#132919](https://redirect.github.com/kubernetes/kubernetes/pull/132919),
          [@&#8203;ndixita](https://redirect.github.com/ndixita)) \\[SIG API Machinery,
          Apps, Architecture, Auth, CLI, Instrumentation, Node, Scheduling and Testing]\n-
          Updates to the Partitionable Devices feature which allows for referencing
          counter sets across different ResourceSlices within the same resource pool.\n\n
          \ Devices from incomplete pools are no longer considered for allocation.\n\n
          \ This contains backwards incompatible changes to the Partitionable Devices
          alpha feature, so any ResourceSlices that uses the feature should be removed
          prior to upgrading or downgrading between 1.34 and 1.35. ([kubernetes/kubernetes#134189](https://redirect.github.com/kubernetes/kubernetes/pull/134189),
          [@&#8203;mortent](https://redirect.github.com/mortent)) \\[SIG API Machinery,
          Node, Scheduling and Testing]\n- Add ObservedGeneration to CustomResourceDefinition
          Conditions. ([kubernetes/kubernetes#134984](https://redirect.github.com/kubernetes/kubernetes/pull/134984),
          [@&#8203;michaelasp](https://redirect.github.com/michaelasp)) \\[SIG API
          Machinery]\n- Add StorageVersionMigration v1beta1 api and remove the v1alpha
          API.\n\n  Any use of the v1alpha1 api is no longer supported and\n  users
          must remove any v1alpha1 resources prior to upgrade. ([kubernetes/kubernetes#134784](https://redirect.github.com/kubernetes/kubernetes/pull/134784),
          [@&#8203;michaelasp](https://redirect.github.com/michaelasp)) \\[SIG API
          Machinery, Apps, Auth, Etcd and Testing]\n- CSI drivers can now opt-in to
          receive service account tokens via the secrets field instead of volume context
          by setting `spec.serviceAccountTokenInSecrets: true` in the CSIDriver object.
          This prevents tokens from being exposed in logs and other outputs. The feature
          is gated by the `CSIServiceAccountTokenSecrets` feature gate (Beta in v1.35).
          ([kubernetes/kubernetes#134826](https://redirect.github.com/kubernetes/kubernetes/pull/134826),
          [@&#8203;aramase](https://redirect.github.com/aramase)) \\[SIG API Machinery,
          Auth, Storage and Testing]\n- DRA device taints: DeviceTaintRule status
          provided information about the rule, in particular whether pods still need
          to be evicted (\"EvictionInProgress\" condition). The new \"None\" effect
          can be used to preview what a DeviceTaintRule would do if it used the \"NoExecute\"
          effect and to taint devices (\"device health\") without immediately affecting
          scheduling or running pods. ([kubernetes/kubernetes#134152](https://redirect.github.com/kubernetes/kubernetes/pull/134152),
          [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG API Machinery,
          Apps, Auth, Node, Release, Scheduling and Testing]\n- DRA: the DynamicResourceAllocation
          feature gate for the core functionality (GA in 1.34) is now locked to enabled-by-default
          and thus cannot be disabled anymore. ([kubernetes/kubernetes#134452](https://redirect.github.com/kubernetes/kubernetes/pull/134452),
          [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG Auth, Node, Scheduling
          and Testing]\n- Forbid adding resources other than CPU & memory on pod resize.
          ([kubernetes/kubernetes#135084](https://redirect.github.com/kubernetes/kubernetes/pull/135084),
          [@&#8203;tallclair](https://redirect.github.com/tallclair)) \\[SIG Apps,
          Node and Testing]\n- Implement constrained impersonation as described in
          <https://kep.k8s.io/5284> ([kubernetes/kubernetes#134803](https://redirect.github.com/kubernetes/kubernetes/pull/134803),
          [@&#8203;enj](https://redirect.github.com/enj)) \\[SIG API Machinery, Auth
          and Testing]\n- Introduces a structured and versioned v1alpha1 response
          for flagz ([kubernetes/kubernetes#134995](https://redirect.github.com/kubernetes/kubernetes/pull/134995),
          [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API
          Machinery, Architecture, Instrumentation, Network, Node, Scheduling and
          Testing]\n- Introduces a structured and versioned v1alpha1 response for
          statusz ([kubernetes/kubernetes#134313](https://redirect.github.com/kubernetes/kubernetes/pull/134313),
          [@&#8203;richabanker](https://redirect.github.com/richabanker)) \\[SIG API
          Machinery, Architecture, Instrumentation, Network, Node, Scheduling and
          Testing]\n- New `--min-compatibility-version` flag for apiserver, kcm and
          kube scheduler ([kubernetes/kubernetes#133980](https://redirect.github.com/kubernetes/kubernetes/pull/133980),
          [@&#8203;siyuanfoundation](https://redirect.github.com/siyuanfoundation))
          \\[SIG API Machinery, Architecture, Cluster Lifecycle, Etcd, Scheduling
          and Testing]\n- Promote PodObservedGenerationTracking to GA. ([kubernetes/kubernetes#134948](https://redirect.github.com/kubernetes/kubernetes/pull/134948),
          [@&#8203;natasha41575](https://redirect.github.com/natasha41575)) \\[SIG
          API Machinery, Apps, Node, Scheduling and Testing]\n- Promoted Job Managed
          By to general availability. The `JobManagedBy` feature gate is now locked
          to true, and will be removed in a future release of Kubernetes. ([kubernetes/kubernetes#135080](https://redirect.github.com/kubernetes/kubernetes/pull/135080),
          [@&#8203;dejanzele](https://redirect.github.com/dejanzele)) \\[SIG API Machinery,
          Apps and Testing]\n- Promoted ReplicaSet and Deployment `.status.terminatingReplicas`
          tracking to beta. The `DeploymentReplicaSetTerminatingReplicas` feature
          gate is now enabled by default. ([kubernetes/kubernetes#133087](https://redirect.github.com/kubernetes/kubernetes/pull/133087),
          [@&#8203;atiratree](https://redirect.github.com/atiratree)) \\[SIG API Machinery,
          Apps and Testing]\n- Scheduler: added a new `bindingTimeout` argument to
          the DynamicResources plugin configuration.\n  This allows customizing the
          wait duration in PreBind for device binding conditions.\n  Defaults to 10
          minutes when DRADeviceBindingConditions and DRAResourceClaimDeviceStatus
          are both enabled. ([kubernetes/kubernetes#134905](https://redirect.github.com/kubernetes/kubernetes/pull/134905),
          [@&#8203;fj-naji](https://redirect.github.com/fj-naji)) \\[SIG Node and
          Scheduling]\n- The Pod Certificates feature is moving to beta. The PodCertificateRequest
          feature gate is still set false by default. To use the feature, users will
          need to enable the certificates API groups in v1beta1 and enable the feature
          gate PodCertificateRequest. A new field UserAnnotations is added to the
          PodCertificateProjection API and the corresponding UnverifiedUserAnnotations
          is added to the PodCertificateRequest API. ([kubernetes/kubernetes#134624](https://redirect.github.com/kubernetes/kubernetes/pull/134624),
          [@&#8203;yt2985](https://redirect.github.com/yt2985)) \\[SIG API Machinery,
          Apps, Auth, Etcd, Instrumentation, Node and Testing]\n- The StrictCostEnforcementForVAP
          and StrictCostEnforcementForWebhooks feature gates, locked on since 1.32,
          have been removed ([kubernetes/kubernetes#134994](https://redirect.github.com/kubernetes/kubernetes/pull/134994),
          [@&#8203;liggitt](https://redirect.github.com/liggitt)) \\[SIG API Machinery,
          Auth, Node and Testing]\n- The `PreferSameZone` and `PreferSameNode` values
          for Service's\n  `trafficDistribution` field are now GA. The old value `PreferClose`
          is now\n  deprecated in favor of the more-explicit `PreferSameZone`. ([kubernetes/kubernetes#134457](https://redirect.github.com/kubernetes/kubernetes/pull/134457),
          [@&#8203;danwinship](https://redirect.github.com/danwinship)) \\[SIG API
          Machinery, Apps, Network and Testing]\n- Kube-apiserver: fix a possible
          panic validating a custom resource whose CustomResourceDefinition indicates
          a status subresource exists, but which does not define a `status` property
          in the `openAPIV3Schema` ([kubernetes/kubernetes#133721](https://redirect.github.com/kubernetes/kubernetes/pull/133721),
          [@&#8203;fusida](https://redirect.github.com/fusida)) \\[SIG API Machinery,
          Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle,
          Etcd, Instrumentation, Network, Node, Release, Scheduling, Storage and Testing]\n-
          Kubernetes API Go types removed runtime use of the github.com/gogo/protobuf
          library, and are no longer registered into the global gogo type registry.
          Kubernetes API Go types were not suitable for use with the google.golang.org/protobuf
          library, and no longer implement `ProtoMessage()` by default to avoid accidental
          incompatible use. If removal of these marker methods impacts your use, it
          can be re-enabled for one more release with a `kubernetes_protomessage_one_more_release`
          build tag, but will be removed in 1.36. ([kubernetes/kubernetes#134256](https://redirect.github.com/kubernetes/kubernetes/pull/134256),
          [@&#8203;liggitt](https://redirect.github.com/liggitt)) \\[SIG API Machinery,
          Apps, Architecture, Auth, CLI, Cluster Lifecycle, Instrumentation, Network,
          Node, Scheduling and Storage]\n- Promoted HPA configurable tolerance to
          beta. The `HPAConfigurableTolerance` feature gate is now enabled by default.
          ([kubernetes/kubernetes#133128](https://redirect.github.com/kubernetes/kubernetes/pull/133128),
          [@&#8203;jm-franc](https://redirect.github.com/jm-franc)) \\[SIG API Machinery
          and Autoscaling]\n- The MaxUnavailableStatefulSet feature is now beta and
          enabled by default. ([kubernetes/kubernetes#133153](https://redirect.github.com/kubernetes/kubernetes/pull/133153),
          [@&#8203;helayoty](https://redirect.github.com/helayoty)) \\[SIG API Machinery
          and Apps]\n- Added WithOrigin within apis/core/validation with adjusted
          tests ([kubernetes/kubernetes#132825](https://redirect.github.com/kubernetes/kubernetes/pull/132825),
          [@&#8203;PatrickLaabs](https://redirect.github.com/PatrickLaabs)) \\[SIG
          Apps]\n- Component-base: validate that log-flush-frequency is positive and
          return an error instead of panic-ing ([kubernetes/kubernetes#133540](https://redirect.github.com/kubernetes/kubernetes/pull/133540),
          [@&#8203;BenTheElder](https://redirect.github.com/BenTheElder)) \\[SIG Architecture,
          Instrumentation, Network and Node]\n- Feature gate dependencies are now
          explicit, and validated at startup. A feature can no longer be enabled if
          it depends on a disabled feature. In particular, this means that `AllAlpha=true`
          will no longer work without enabling disabled-by-default beta features that
          are depended on (either with `AllBeta=true` or explicitly enumerating the
          disabled dependencies). ([kubernetes/kubernetes#133697](https://redirect.github.com/kubernetes/kubernetes/pull/133697),
          [@&#8203;tallclair](https://redirect.github.com/tallclair)) \\[SIG API Machinery,
          Architecture, Cluster Lifecycle and Node]\n- In version 1.34, the PodObservedGenerationTracking
          feature has been upgraded to beta, and the description of the alpha version
          in the openapi has been removed. ([kubernetes/kubernetes#133883](https://redirect.github.com/kubernetes/kubernetes/pull/133883),
          [@&#8203;yangjunmyfm192085](https://redirect.github.com/yangjunmyfm192085))
          \\[SIG Apps]\n- Introduce a new declarative validation tag +k8s:customUnique
          to control listmap uniqueness ([kubernetes/kubernetes#134279](https://redirect.github.com/kubernetes/kubernetes/pull/134279),
          [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API
          Machinery and Auth]\n- Kube-apiserver: Fixed a 1.34 regression in CustomResourceDefinition
          handling that incorrectly warned about unrecognized formats on number and
          integer properties ([kubernetes/kubernetes#133896](https://redirect.github.com/kubernetes/kubernetes/pull/133896),
          [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API
          Machinery, Apps, Architecture, Auth, CLI, Cloud Provider, Contributor Experience,
          Network, Node and Scheduling]\n- OpenAPI model packages of API types are
          generated into `zz_generated.model_name.go` files and are accessible using
          the `OpenAPIModelName()` function.  This allows API authors to declare the
          desired OpenAPI model packages instead of using the go package path of API
          types. ([kubernetes/kubernetes#131755](https://redirect.github.com/kubernetes/kubernetes/pull/131755),
          [@&#8203;jpbetz](https://redirect.github.com/jpbetz)) \\[SIG API Machinery,
          Apps, Architecture, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation,
          Network, Node, Scheduling, Storage and Testing]\n- Support for `kubectl
          get -o kyaml` is now on by default.  To disable it, set `KUBECTL_KYAML=false`.
          ([kubernetes/kubernetes#133327](https://redirect.github.com/kubernetes/kubernetes/pull/133327),
          [@&#8203;thockin](https://redirect.github.com/thockin)) \\[SIG CLI]\n- The
          storage version for MutatingAdmissionPolicy is updated to v1beta1. ([kubernetes/kubernetes#133715](https://redirect.github.com/kubernetes/kubernetes/pull/133715),
          [@&#8203;cici37](https://redirect.github.com/cici37)) \\[SIG API Machinery,
          Etcd and Testing]\n\n### [`v34.1.0`](https://redirect.github.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v3410b1)\n\n[Compare
          Source](https://redirect.github.com/kubernetes-client/python/compare/v33.1.0...v34.1.0)\n\nKubernetes
          API Version: v1.34.1\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: (UTC)\n\n- Branch creation\n  - At any time (no schedule defined)\n-
          Automerge\n  - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**:
          Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B
          **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
          checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
          about this update again.\n\n---\n\n - [ ] <!-- rebase-check -->If you want
          to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated
          by [Mend Renovate](https://mend.io/renovate/). View the [repository job
          log](https://developer.mend.io/github/osism/container-image-osism-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi43NC41IiwidXBkYXRlZEluVmVyIjoiNDMuMTgyLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/container-image-osism-ansible/pull/713
        commit_id: 6e48d1dc1035117b15ee5b14d185ab7b33ab1fed
        patchset: 6e48d1dc1035117b15ee5b14d185ab7b33ab1fed
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-osism-ansible
          name: osism/container-image-osism-ansible
          short_name: container-image-osism-ansible
        src_dir: src/github.com/osism/container-image-osism-ansible
        topic: null
      change: '713'
      change_message: "chore(deps): update dependency kubernetes to v35\n\nThis PR
        contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
        | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
        [kubernetes](https://redirect.github.com/kubernetes-client/python) | `==33.1.0`
        \u2192 `==35.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/kubernetes/35.0.0?slim=true)
        | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/kubernetes/33.1.0/35.0.0?slim=true)
        |\n\n---\n\n> [!WARNING]\n> Some dependencies could not be looked up. Check
        the [Dependency Dashboard](../issues/218) for more information.\n\n---\n\n###
        Release Notes\n\n<details>\n<summary>kubernetes-client/python (kubernetes)</summary>\n\n###
        [`v35.0.0`](https://redirect.github.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v3500snapshot)\n\n[Compare
        Source](https://redirect.github.com/kubernetes-client/python/compare/v34.1.0...v35.0.0)\n\nKubernetes
        API Version: v1.35.0\n\n##### API Change\n\n- Added `ObservedGeneration` to
        CustomResourceDefinition conditions. ([kubernetes/kubernetes#134984](https://redirect.github.com/kubernetes/kubernetes/pull/134984),
        [@&#8203;michaelasp](https://redirect.github.com/michaelasp))\n- Added `WithOrigin`
        within `apis/core/validation` with adjusted tests. ([kubernetes/kubernetes#132825](https://redirect.github.com/kubernetes/kubernetes/pull/132825),
        [@&#8203;PatrickLaabs](https://redirect.github.com/PatrickLaabs))\n- Added
        scoring for the prioritized list feature so nodes that best satisfy the highest-ranked
        subrequests were chosen. ([kubernetes/kubernetes#134711](https://redirect.github.com/kubernetes/kubernetes/pull/134711),
        [@&#8203;mortent](https://redirect.github.com/mortent)) \\[SIG Node, Scheduling
        and Testing]\n- Added the `--min-compatibility-version` flag to `kube-apiserver`,
        `kube-controller-manager`, and `kube-scheduler`. ([kubernetes/kubernetes#133980](https://redirect.github.com/kubernetes/kubernetes/pull/133980),
        [@&#8203;siyuanfoundation](https://redirect.github.com/siyuanfoundation))
        \\[SIG API Machinery, Architecture, Cluster Lifecycle, Etcd, Scheduling and
        Testing]\n- Added the `StorageVersionMigration` `v1beta1` API and removed
        the `v1alpha1` API.\n\n  ACTION REQUIRED: The `v1alpha1` API is no longer
        supported. Users must remove any `v1alpha1` resources before upgrading. ([kubernetes/kubernetes#134784](https://redirect.github.com/kubernetes/kubernetes/pull/134784),
        [@&#8203;michaelasp](https://redirect.github.com/michaelasp)) \\[SIG API Machinery,
        Apps, Auth, Etcd and Testing]\n- Added validation to ensure `log-flush-frequency`
        is a positive value, returning an error instead of causing a panic. ([kubernetes/kubernetes#133540](https://redirect.github.com/kubernetes/kubernetes/pull/133540),
        [@&#8203;BenTheElder](https://redirect.github.com/BenTheElder)) \\[SIG Architecture,
        Instrumentation, Network and Node]\n- All containers are restarted when a
        source container in a restart policy rule exits. This alpha feature is gated
        behind `RestartAllContainersOnContainerExit`. ([kubernetes/kubernetes#134345](https://redirect.github.com/kubernetes/kubernetes/pull/134345),
        [@&#8203;yuanwang04](https://redirect.github.com/yuanwang04)) \\[SIG Apps,
        Node and Testing]\n- CSI drivers can now opt in to receive service account
        tokens via the secrets field instead of volume context by setting `spec.serviceAccountTokenInSecrets:
        true` in the CSIDriver object. This prevents tokens from being exposed in
        logs and other outputs. The feature is gated by the `CSIServiceAccountTokenSecrets`
        feature gate (beta in `v1.35`). ([kubernetes/kubernetes#134826](https://redirect.github.com/kubernetes/kubernetes/pull/134826),
        [@&#8203;aramase](https://redirect.github.com/aramase)) \\[SIG API Machinery,
        Auth, Storage and Testing]\n- Changed kuberc configuration schema. Two new
        optional fields added to kuberc configuration, `credPluginPolicy` and `credPluginAllowlist`.
        This is documented in [KEP-3104](https://redirect.github.com/kubernetes/enhancements/blob/master/keps/sig-cli/3104-introduce-kuberc/README.md#allowlist-design-details)
        and documentation is added to the website by [kubernetes/website#52877](https://redirect.github.com/kubernetes/website/pull/52877)
        ([kubernetes/kubernetes#134870](https://redirect.github.com/kubernetes/kubernetes/pull/134870),
        [@&#8203;pmengelbert](https://redirect.github.com/pmengelbert)) \\[SIG API
        Machinery, Architecture, Auth, CLI, Instrumentation and Testing]\n- DRA device
        taints: `DeviceTaintRule` status provides information about the rule, including
        whether Pods still need to be evicted (`EvictionInProgress` condition). The
        newly added `None` effect can be used to preview what a `DeviceTaintRule`
        would do if it used the `NoExecute` effect and to taint devices (`device health`)
        without immediately affecting scheduling or running Pods. ([kubernetes/kubernetes#134152](https://redirect.github.com/kubernetes/kubernetes/pull/134152),
        [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG API Machinery,
        Apps, Auth, Node, Release, Scheduling and Testing]\n- DRA: The `DynamicResourceAllocation`
        feature gate for the core functionality (GA in `v1.34`) has now been locked
        to enabled-by-default and cannot be disabled anymore. ([kubernetes/kubernetes#134452](https://redirect.github.com/kubernetes/kubernetes/pull/134452),
        [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG Auth, Node, Scheduling
        and Testing]\n- Enabled `kubectl get -o kyaml` by default. To disable it,
        set `KUBECTL_KYAML=false`. ([kubernetes/kubernetes#133327](https://redirect.github.com/kubernetes/kubernetes/pull/133327),
        [@&#8203;thockin](https://redirect.github.com/thockin))\n- Enabled in-place
        resizing of pod-level resources.\n  - Added `Resources` in `PodStatus` to
        capture resources set in the pod-level cgroup.\n  - Added `AllocatedResources`
        in `PodStatus` to capture resources requested in the `PodSpec`. ([kubernetes/kubernetes#132919](https://redirect.github.com/kubernetes/kubernetes/pull/132919),
        [@&#8203;ndixita](https://redirect.github.com/ndixita)) \\[SIG API Machinery,
        Apps, Architecture, Auth, CLI, Instrumentation, Node, Scheduling and Testing]\n-
        Enabled the `NominatedNodeNameForExpectation` feature in kube-scheduler by
        default.\n  - Enabled the `ClearingNominatedNodeNameAfterBinding` feature
        in kube-apiserver by default. ([kubernetes/kubernetes#135103](https://redirect.github.com/kubernetes/kubernetes/pull/135103),
        [@&#8203;ania-borowiec](https://redirect.github.com/ania-borowiec)) \\[SIG
        API Machinery, Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider,
        Cluster Lifecycle, Etcd, Instrumentation, Network, Node, Scheduling, Storage
        and Testing]\n- Enhanced discovery responses to merge API groups and resources
        from all peer apiservers when the `UnknownVersionInteroperabilityProxy` feature
        is enabled. ([kubernetes/kubernetes#133648](https://redirect.github.com/kubernetes/kubernetes/pull/133648),
        [@&#8203;richabanker](https://redirect.github.com/richabanker)) \\[SIG API
        Machinery, Auth, Cloud Provider, Node, Scheduling and Testing]\n- Extended
        `core/v1` `Toleration` to support numeric comparison operators (`Gt`,`Lt`).
        ([kubernetes/kubernetes#134665](https://redirect.github.com/kubernetes/kubernetes/pull/134665),
        [@&#8203;helayoty](https://redirect.github.com/helayoty)) \\[SIG API Machinery,
        Apps, Node, Scheduling, Testing and Windows]\n- Feature gate dependencies
        are now explicit, and validated at startup. A feature can no longer be enabled
        if it depends on a disabled feature. In particular, this means that `AllAlpha=true`
        will no longer work without enabling disabled-by-default beta features that
        are depended on (either with `AllBeta=true` or explicitly enumerating the
        disabled dependencies). ([kubernetes/kubernetes#133697](https://redirect.github.com/kubernetes/kubernetes/pull/133697),
        [@&#8203;tallclair](https://redirect.github.com/tallclair)) \\[SIG API Machinery,
        Architecture, Cluster Lifecycle and Node]\n- Generated OpenAPI model packages
        for API types into `zz_generated.model_name.go` files, accessible via the
        `OpenAPIModelName()` function. This allows API authors to declare desired
        OpenAPI model packages instead of relying on the Go package path of API types.
        ([kubernetes/kubernetes#131755](https://redirect.github.com/kubernetes/kubernetes/pull/131755),
        [@&#8203;jpbetz](https://redirect.github.com/jpbetz)) \\[SIG API Machinery,
        Apps, Architecture, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation,
        Network, Node, Scheduling, Storage and Testing]\n- Implemented constrained
        impersonation as described in [KEP-5284](https://kep.k8s.io/5284). ([kubernetes/kubernetes#134803](https://redirect.github.com/kubernetes/kubernetes/pull/134803),
        [@&#8203;enj](https://redirect.github.com/enj)) \\[SIG API Machinery, Auth
        and Testing]\n- Introduced a new declarative validation tag `+k8s:customUnique`
        to control listmap uniqueness. ([kubernetes/kubernetes#134279](https://redirect.github.com/kubernetes/kubernetes/pull/134279),
        [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API Machinery
        and Auth]\n- Introduced a structured and versioned `v1alpha1` response for
        the `statusz` endpoint. ([kubernetes/kubernetes#134313](https://redirect.github.com/kubernetes/kubernetes/pull/134313),
        [@&#8203;richabanker](https://redirect.github.com/richabanker)) \\[SIG API
        Machinery, Architecture, Instrumentation, Network, Node, Scheduling and Testing]\n-
        Introduced a structured and versioned `v1alpha1` response format for the `flagz`
        endpoint. ([kubernetes/kubernetes#134995](https://redirect.github.com/kubernetes/kubernetes/pull/134995),
        [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API Machinery,
        Architecture, Instrumentation, Network, Node, Scheduling and Testing]\n- Introduced
        the GangScheduling kube-scheduler plugin to support \"all-or-nothing\" scheduling
        using the `scheduling.k8s.io/v1alpha1` Workload API. ([kubernetes/kubernetes#134722](https://redirect.github.com/kubernetes/kubernetes/pull/134722),
        [@&#8203;macsko](https://redirect.github.com/macsko)) \\[SIG API Machinery,
        Apps, Auth, CLI, Etcd, Scheduling and Testing]\n- Introduced the Node Declared
        Features capability (alpha), which includes:\n  - A new `Node.Status.DeclaredFeatures`
        field for publishing node-specific features.\n  - A `component-helpers` library
        for feature registration and inference.\n  - A `NodeDeclaredFeatures` scheduler
        plugin to match pods with nodes that provide required features.\n  - A `NodeDeclaredFeatureValidator`
        admission plugin to validate pod updates against a node's declared features.
        ([kubernetes/kubernetes#133389](https://redirect.github.com/kubernetes/kubernetes/pull/133389),
        [@&#8203;pravk03](https://redirect.github.com/pravk03)) \\[SIG API Machinery,
        Apps, Node, Release, Scheduling and Testing]\n- Introduced the `scheduling.k8s.io/v1alpha1`
        Workload API to express workload-level scheduling requirements and allow the
        kube-scheduler to act on them. ([kubernetes/kubernetes#134564](https://redirect.github.com/kubernetes/kubernetes/pull/134564),
        [@&#8203;macsko](https://redirect.github.com/macsko)) \\[SIG API Machinery,
        Apps, CLI, Etcd, Scheduling and Testing]\n- Introduced the alpha `MutableSchedulingDirectivesForSuspendedJobs`
        feature gate (disabled by default), which allows mutating a Job's scheduling
        directives while the Job is suspended.\n  It also updates the Job controller
        to clears the `status.startTime` field for suspended Jobs. ([kubernetes/kubernetes#135104](https://redirect.github.com/kubernetes/kubernetes/pull/135104),
        [@&#8203;mimowo](https://redirect.github.com/mimowo)) \\[SIG Apps and Testing]\n-
        Kube-apiserver: Fixed a `v1.34` regression in `CustomResourceDefinition` handling
        that incorrectly warned about unrecognized formats on number and integer properties.
        ([kubernetes/kubernetes#133896](https://redirect.github.com/kubernetes/kubernetes/pull/133896),
        [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API Machinery,
        Apps, Architecture, Auth, CLI, Cloud Provider, Contributor Experience, Network,
        Node and Scheduling]\n- Kube-apiserver: Fixed a possible panic validating
        a custom resource whose `CustomResourceDefinition` indicates a status subresource
        exists, but which does not define a `status` property in the `openAPIV3Schema`.
        ([kubernetes/kubernetes#133721](https://redirect.github.com/kubernetes/kubernetes/pull/133721),
        [@&#8203;fusida](https://redirect.github.com/fusida)) \\[SIG API Machinery,
        Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle,
        Etcd, Instrumentation, Network, Node, Release, Scheduling, Storage and Testing]\n-
        Kubernetes API Go types removed runtime use of the `github.com/gogo/protobuf`
        library, and are no longer registered into the global gogo type registry.
        Kubernetes API Go types were not suitable for use with the `google.golang.org/protobuf`
        library, and no longer implement `ProtoMessage()` by default to avoid accidental
        incompatible use. If removal of these marker methods impacts your use, it
        can be re-enabled for one more release with a `kubernetes_protomessage_one_more_release`
        build tag, but will be removed in `v1.36`. ([kubernetes/kubernetes#134256](https://redirect.github.com/kubernetes/kubernetes/pull/134256),
        [@&#8203;liggitt](https://redirect.github.com/liggitt)) \\[SIG API Machinery,
        Apps, Architecture, Auth, CLI, Cluster Lifecycle, Instrumentation, Network,
        Node, Scheduling and Storage]\n- Made node affinity in Persistent Volume mutable.
        ([kubernetes/kubernetes#134339](https://redirect.github.com/kubernetes/kubernetes/pull/134339),
        [@&#8203;huww98](https://redirect.github.com/huww98)) \\[SIG API Machinery,
        Apps and Node]\n- Moved the `ImagePullIntent` and `ImagePulledRecord` objects
        used by the kubelet to track image pulls to the `v1beta1` API version. ([kubernetes/kubernetes#132579](https://redirect.github.com/kubernetes/kubernetes/pull/132579),
        [@&#8203;stlaz](https://redirect.github.com/stlaz)) \\[SIG Auth and Node]\n-
        Pod resize now only allows CPU and memory resources; other resource types
        are forbidden. ([kubernetes/kubernetes#135084](https://redirect.github.com/kubernetes/kubernetes/pull/135084),
        [@&#8203;tallclair](https://redirect.github.com/tallclair)) \\[SIG Apps, Node
        and Testing]\n- Prevented Pods from being scheduled onto nodes that lack the
        required CSI driver. ([kubernetes/kubernetes#135012](https://redirect.github.com/kubernetes/kubernetes/pull/135012),
        [@&#8203;gnufied](https://redirect.github.com/gnufied)) \\[SIG API Machinery,
        Scheduling, Storage and Testing]\n- Promoted HPA configurable tolerance to
        beta. The `HPAConfigurableTolerance` feature gate has now been enabled by
        default. ([kubernetes/kubernetes#133128](https://redirect.github.com/kubernetes/kubernetes/pull/133128),
        [@&#8203;jm-franc](https://redirect.github.com/jm-franc)) \\[SIG API Machinery
        and Autoscaling]\n- Promoted ReplicaSet and Deployment `.status.terminatingReplicas`
        tracking to beta. The `DeploymentReplicaSetTerminatingReplicas` feature gate
        is now enabled by default. ([kubernetes/kubernetes#133087](https://redirect.github.com/kubernetes/kubernetes/pull/133087),
        [@&#8203;atiratree](https://redirect.github.com/atiratree)) \\[SIG API Machinery,
        Apps and Testing]\n- Promoted `PodObservedGenerationTracking` to GA. ([kubernetes/kubernetes#134948](https://redirect.github.com/kubernetes/kubernetes/pull/134948),
        [@&#8203;natasha41575](https://redirect.github.com/natasha41575)) \\[SIG API
        Machinery, Apps, Node, Scheduling and Testing]\n- Promoted the `JobManagedBy`
        feature to general availability. The `JobManagedBy` feature gate was locked
        to `true` and will be removed in a future Kubernetes release. ([kubernetes/kubernetes#135080](https://redirect.github.com/kubernetes/kubernetes/pull/135080),
        [@&#8203;dejanzele](https://redirect.github.com/dejanzele)) \\[SIG API Machinery,
        Apps and Testing]\n- Promoted the `MaxUnavailableStatefulSet` feature to beta
        and enabling it by default. ([kubernetes/kubernetes#133153](https://redirect.github.com/kubernetes/kubernetes/pull/133153),
        [@&#8203;helayoty](https://redirect.github.com/helayoty)) \\[SIG API Machinery
        and Apps]\n- Removed the `StrictCostEnforcementForVAP` and `StrictCostEnforcementForWebhooks`
        feature gates, which were locked since `v1.32`. ([kubernetes/kubernetes#134994](https://redirect.github.com/kubernetes/kubernetes/pull/134994),
        [@&#8203;liggitt](https://redirect.github.com/liggitt)) \\[SIG API Machinery,
        Auth, Node and Testing]\n- Scheduler: Added the `bindingTimeout` argument
        to the DynamicResources plugin configuration, allowing customization of the
        wait duration in `PreBind` for device binding conditions.\n  Defaults to 10
        minutes when `DRADeviceBindingConditions` and `DRAResourceClaimDeviceStatus`
        are both enabled. ([kubernetes/kubernetes#134905](https://redirect.github.com/kubernetes/kubernetes/pull/134905),
        [@&#8203;fj-naji](https://redirect.github.com/fj-naji)) \\[SIG Node and Scheduling]\n-
        The DRA device taints and toleration feature received a separate feature gate,
        `DRADeviceTaintRules`, which controlled support for `DeviceTaintRules`. This
        allowed disabling it while keeping `DRADeviceTaints` enabled so that tainting
        via `ResourceSlices` continued to work. ([kubernetes/kubernetes#135068](https://redirect.github.com/kubernetes/kubernetes/pull/135068),
        [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG API Machinery,
        Apps, Auth, Node, Scheduling and Testing]\n- The Pod Certificates feature
        moved to beta. The `PodCertificateRequest` feature gate is set disabled by
        default. To use the feature, users must enable the certificates API groups
        in `v1beta1` and enable the `PodCertificateRequest` feature gate. The `UserAnnotations`
        field was added to the `PodCertificateProjection` API and the corresponding
        `UnverifiedUserAnnotations` field was added to the `PodCertificateRequest`
        API. ([kubernetes/kubernetes#134624](https://redirect.github.com/kubernetes/kubernetes/pull/134624),
        [@&#8203;yt2985](https://redirect.github.com/yt2985)) \\[SIG API Machinery,
        Apps, Auth, Etcd, Instrumentation, Node and Testing]\n- The `KubeletEnsureSecretPulledImages`
        feature was promoted to Beta and enabled by default. ([kubernetes/kubernetes#135228](https://redirect.github.com/kubernetes/kubernetes/pull/135228),
        [@&#8203;aramase](https://redirect.github.com/aramase)) \\[SIG Auth, Node
        and Testing]\n- The `PreferSameZone` and `PreferSameNode` values for the Service\n
        \ `trafficDistribution` field graduated to general availability. The\n  `PreferClose`
        value is now deprecated in favor of the more explicit\n  `PreferSameZone`.
        ([kubernetes/kubernetes#134457](https://redirect.github.com/kubernetes/kubernetes/pull/134457),
        [@&#8203;danwinship](https://redirect.github.com/danwinship)) \\[SIG API Machinery,
        Apps, Network and Testing]\n- Updated `ResourceQuota` to count device class
        requests within a `ResourceClaim` as two additional quotas when the `DRAExtendedResource`
        feature is enabled:\n  - `requests.deviceclass.resource.k8s.io/<deviceclass>`
        is charged based on the worst-case number of devices requested.\n  - Device
        classes mapping to an extended resource now consume `requests.<extended resource
        name>`. ([kubernetes/kubernetes#134210](https://redirect.github.com/kubernetes/kubernetes/pull/134210),
        [@&#8203;yliaog](https://redirect.github.com/yliaog)) \\[SIG API Machinery,
        Apps, Node, Scheduling and Testing]\n- Updated storage version for `MutatingAdmissionPolicy`
        to `v1beta1`. ([kubernetes/kubernetes#133715](https://redirect.github.com/kubernetes/kubernetes/pull/133715),
        [@&#8203;cici37](https://redirect.github.com/cici37)) \\[SIG API Machinery,
        Etcd and Testing]\n- Updated the Partitionable Devices feature to support
        referencing counter sets across ResourceSlices within the same resource pool.
        Devices from incomplete pools were no longer considered for allocation. This
        change introduced backwards-incompatible updates to the alpha feature, requiring
        any ResourceSlices using it to be removed before upgrading or downgrading
        between v1.34 and v1.35. ([kubernetes/kubernetes#134189](https://redirect.github.com/kubernetes/kubernetes/pull/134189),
        [@&#8203;mortent](https://redirect.github.com/mortent)) \\[SIG API Machinery,
        Node, Scheduling and Testing]\n- Upgraded the `PodObservedGenerationTracking`
        feature to beta in `v1.34` and removed the alpha version description from
        the OpenAPI specification. ([kubernetes/kubernetes#133883](https://redirect.github.com/kubernetes/kubernetes/pull/133883),
        [@&#8203;yangjunmyfm192085](https://redirect.github.com/yangjunmyfm192085))\n-
        Add scoring for the prioritized list feature so that the node that can satisfy
        the best ranked subrequests are chosen. ([kubernetes/kubernetes#134711](https://redirect.github.com/kubernetes/kubernetes/pull/134711),
        [@&#8203;mortent](https://redirect.github.com/mortent)) \\[SIG Node, Scheduling
        and Testing]\n- Allows restart all containers when the source container exits
        with a matching restart policy rule. This is an alpha feature behind feature
        gate RestartAllContainersOnContainerExit. ([kubernetes/kubernetes#134345](https://redirect.github.com/kubernetes/kubernetes/pull/134345),
        [@&#8203;yuanwang04](https://redirect.github.com/yuanwang04)) \\[SIG Apps,
        Node and Testing]\n- Changed kuberc configuration schema. Two new optional
        fields added to kuberc configuration, `credPluginPolicy` and `credPluginAllowlist`.
        This is documented in [KEP-3104](https://redirect.github.com/kubernetes/enhancements/blob/master/keps/sig-cli/3104-introduce-kuberc/README.md#allowlist-design-details)
        and documentation is added to the website by [kubernetes/website#52877](https://redirect.github.com/kubernetes/website/pull/52877)
        ([kubernetes/kubernetes#134870](https://redirect.github.com/kubernetes/kubernetes/pull/134870),
        [@&#8203;pmengelbert](https://redirect.github.com/pmengelbert)) \\[SIG API
        Machinery, Architecture, Auth, CLI, Instrumentation and Testing]\n- Enhanced
        discovery response to support merged API groups/resources from all peer apiservers
        when UnknownVersionInteroperabilityProxy feature is enabled ([kubernetes/kubernetes#133648](https://redirect.github.com/kubernetes/kubernetes/pull/133648),
        [@&#8203;richabanker](https://redirect.github.com/richabanker)) \\[SIG API
        Machinery, Auth, Cloud Provider, Node, Scheduling and Testing]\n- Extend `core/v1
        Toleration` to support numeric comparison operators (`Gt`, `Lt`). ([kubernetes/kubernetes#134665](https://redirect.github.com/kubernetes/kubernetes/pull/134665),
        [@&#8203;helayoty](https://redirect.github.com/helayoty)) \\[SIG API Machinery,
        Apps, Node, Scheduling, Testing and Windows]\n- Features: NominatedNodeNameForExpectation
        in kube-scheduler and CleaeringNominatedNodeNameAfterBinding in kube-apiserver
        are now enabled by default. ([kubernetes/kubernetes#135103](https://redirect.github.com/kubernetes/kubernetes/pull/135103),
        [@&#8203;ania-borowiec](https://redirect.github.com/ania-borowiec)) \\[SIG
        API Machinery, Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider,
        Cluster Lifecycle, Etcd, Instrumentation, Network, Node, Scheduling, Storage
        and Testing]\n- Implement changes to prevent pod scheduling to a node without
        CSI driver ([kubernetes/kubernetes#135012](https://redirect.github.com/kubernetes/kubernetes/pull/135012),
        [@&#8203;gnufied](https://redirect.github.com/gnufied)) \\[SIG API Machinery,
        Scheduling, Storage and Testing]\n- Introduce scheduling.k8s.io/v1alpha1 Workload
        API to allow for expressing workload-level scheduling requirements and let
        kube-scheduler act on those. ([kubernetes/kubernetes#134564](https://redirect.github.com/kubernetes/kubernetes/pull/134564),
        [@&#8203;macsko](https://redirect.github.com/macsko)) \\[SIG API Machinery,
        Apps, CLI, Etcd, Scheduling and Testing]\n- Introduce the alpha MutableSchedulingDirectivesForSuspendedJobs
        feature gate (disabled by default) which:\n  1. allows to mutate Job's scheduling
        directives for suspended Jobs\n  2. makes the Job controller to clear the
        status.startTime field for suspended Jobs ([kubernetes/kubernetes#135104](https://redirect.github.com/kubernetes/kubernetes/pull/135104),
        [@&#8203;mimowo](https://redirect.github.com/mimowo)) \\[SIG Apps and Testing]\n-
        Introduced GangScheduling kube-scheduler plugin to enable \"all-or-nothing\"
        scheduling. Workload API in scheduling.k8s.io/v1alpha1 is used to express
        the desired policy. ([kubernetes/kubernetes#134722](https://redirect.github.com/kubernetes/kubernetes/pull/134722),
        [@&#8203;macsko](https://redirect.github.com/macsko)) \\[SIG API Machinery,
        Apps, Auth, CLI, Etcd, Scheduling and Testing]\n- PV node affinity is now
        mutable. ([kubernetes/kubernetes#134339](https://redirect.github.com/kubernetes/kubernetes/pull/134339),
        [@&#8203;huww98](https://redirect.github.com/huww98)) \\[SIG API Machinery,
        Apps and Node]\n- ResourceQuota now counts device class requests within a
        ResourceClaim object as consuming two additional quotas when the DRAExtendedResource
        feature is enabled:\n  - `requests.deviceclass.resource.k8s.io/<deviceclass>`
        with a quantity equal to the worst case count of devices requested\n  - requests
        for device classes that map to an extended resource consume `requests.<extended
        resource name>` ([kubernetes/kubernetes#134210](https://redirect.github.com/kubernetes/kubernetes/pull/134210),
        [@&#8203;yliaog](https://redirect.github.com/yliaog)) \\[SIG API Machinery,
        Apps, Node, Scheduling and Testing]\n- The DRA device taints and toleration
        feature now has a separate feature gate, DRADeviceTaintRules, which controls
        whether support for DeviceTaintRules is enabled. It is possible to disable
        that and keep DRADeviceTaints enabled, in which case tainting by DRA drivers
        through ResourceSlices continues to work. ([kubernetes/kubernetes#135068](https://redirect.github.com/kubernetes/kubernetes/pull/135068),
        [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG API Machinery,
        Apps, Auth, Node, Scheduling and Testing]\n- The ImagePullIntent and ImagePulledRecord
        objects used by kubelet to store information about image pulls have been moved
        to the v1beta1 API version. ([kubernetes/kubernetes#132579](https://redirect.github.com/kubernetes/kubernetes/pull/132579),
        [@&#8203;stlaz](https://redirect.github.com/stlaz)) \\[SIG Auth and Node]\n-
        The KubeletEnsureSecretPulledImages feature is now beta and enabled by default.
        ([kubernetes/kubernetes#135228](https://redirect.github.com/kubernetes/kubernetes/pull/135228),
        [@&#8203;aramase](https://redirect.github.com/aramase)) \\[SIG Auth, Node
        and Testing]\n- This change adds a new alpha feature Node Declared Features,
        which includes:\n  - A new `Node.Status.DeclaredFeatures` field for Kubelet
        to publish node-specific features.\n  - A library in `component-helpers` for
        feature registration and inference.\n  - A scheduler plugin (`NodeDeclaredFeatures`)
        scheduler plugin to match pods with nodes that provide their required features.\n
        \ - An admission plugin (`NodeDeclaredFeatureValidator`) to validate pod updates
        against a node's declared features. ([kubernetes/kubernetes#133389](https://redirect.github.com/kubernetes/kubernetes/pull/133389),
        [@&#8203;pravk03](https://redirect.github.com/pravk03)) \\[SIG API Machinery,
        Apps, Node, Release, Scheduling and Testing]\n- This change allows In Place
        Resize of Pod Level Resources\n  - Add Resources in PodStatus to capture resources
        set at pod-level cgroup\n  - Add AllocatedResources in PodStatus to capture
        resources requested in the PodSpec ([kubernetes/kubernetes#132919](https://redirect.github.com/kubernetes/kubernetes/pull/132919),
        [@&#8203;ndixita](https://redirect.github.com/ndixita)) \\[SIG API Machinery,
        Apps, Architecture, Auth, CLI, Instrumentation, Node, Scheduling and Testing]\n-
        Updates to the Partitionable Devices feature which allows for referencing
        counter sets across different ResourceSlices within the same resource pool.\n\n
        \ Devices from incomplete pools are no longer considered for allocation.\n\n
        \ This contains backwards incompatible changes to the Partitionable Devices
        alpha feature, so any ResourceSlices that uses the feature should be removed
        prior to upgrading or downgrading between 1.34 and 1.35. ([kubernetes/kubernetes#134189](https://redirect.github.com/kubernetes/kubernetes/pull/134189),
        [@&#8203;mortent](https://redirect.github.com/mortent)) \\[SIG API Machinery,
        Node, Scheduling and Testing]\n- Add ObservedGeneration to CustomResourceDefinition
        Conditions. ([kubernetes/kubernetes#134984](https://redirect.github.com/kubernetes/kubernetes/pull/134984),
        [@&#8203;michaelasp](https://redirect.github.com/michaelasp)) \\[SIG API Machinery]\n-
        Add StorageVersionMigration v1beta1 api and remove the v1alpha API.\n\n  Any
        use of the v1alpha1 api is no longer supported and\n  users must remove any
        v1alpha1 resources prior to upgrade. ([kubernetes/kubernetes#134784](https://redirect.github.com/kubernetes/kubernetes/pull/134784),
        [@&#8203;michaelasp](https://redirect.github.com/michaelasp)) \\[SIG API Machinery,
        Apps, Auth, Etcd and Testing]\n- CSI drivers can now opt-in to receive service
        account tokens via the secrets field instead of volume context by setting
        `spec.serviceAccountTokenInSecrets: true` in the CSIDriver object. This prevents
        tokens from being exposed in logs and other outputs. The feature is gated
        by the `CSIServiceAccountTokenSecrets` feature gate (Beta in v1.35). ([kubernetes/kubernetes#134826](https://redirect.github.com/kubernetes/kubernetes/pull/134826),
        [@&#8203;aramase](https://redirect.github.com/aramase)) \\[SIG API Machinery,
        Auth, Storage and Testing]\n- DRA device taints: DeviceTaintRule status provided
        information about the rule, in particular whether pods still need to be evicted
        (\"EvictionInProgress\" condition). The new \"None\" effect can be used to
        preview what a DeviceTaintRule would do if it used the \"NoExecute\" effect
        and to taint devices (\"device health\") without immediately affecting scheduling
        or running pods. ([kubernetes/kubernetes#134152](https://redirect.github.com/kubernetes/kubernetes/pull/134152),
        [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG API Machinery,
        Apps, Auth, Node, Release, Scheduling and Testing]\n- DRA: the DynamicResourceAllocation
        feature gate for the core functionality (GA in 1.34) is now locked to enabled-by-default
        and thus cannot be disabled anymore. ([kubernetes/kubernetes#134452](https://redirect.github.com/kubernetes/kubernetes/pull/134452),
        [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG Auth, Node, Scheduling
        and Testing]\n- Forbid adding resources other than CPU & memory on pod resize.
        ([kubernetes/kubernetes#135084](https://redirect.github.com/kubernetes/kubernetes/pull/135084),
        [@&#8203;tallclair](https://redirect.github.com/tallclair)) \\[SIG Apps, Node
        and Testing]\n- Implement constrained impersonation as described in <https://kep.k8s.io/5284>
        ([kubernetes/kubernetes#134803](https://redirect.github.com/kubernetes/kubernetes/pull/134803),
        [@&#8203;enj](https://redirect.github.com/enj)) \\[SIG API Machinery, Auth
        and Testing]\n- Introduces a structured and versioned v1alpha1 response for
        flagz ([kubernetes/kubernetes#134995](https://redirect.github.com/kubernetes/kubernetes/pull/134995),
        [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API Machinery,
        Architecture, Instrumentation, Network, Node, Scheduling and Testing]\n- Introduces
        a structured and versioned v1alpha1 response for statusz ([kubernetes/kubernetes#134313](https://redirect.github.com/kubernetes/kubernetes/pull/134313),
        [@&#8203;richabanker](https://redirect.github.com/richabanker)) \\[SIG API
        Machinery, Architecture, Instrumentation, Network, Node, Scheduling and Testing]\n-
        New `--min-compatibility-version` flag for apiserver, kcm and kube scheduler
        ([kubernetes/kubernetes#133980](https://redirect.github.com/kubernetes/kubernetes/pull/133980),
        [@&#8203;siyuanfoundation](https://redirect.github.com/siyuanfoundation))
        \\[SIG API Machinery, Architecture, Cluster Lifecycle, Etcd, Scheduling and
        Testing]\n- Promote PodObservedGenerationTracking to GA. ([kubernetes/kubernetes#134948](https://redirect.github.com/kubernetes/kubernetes/pull/134948),
        [@&#8203;natasha41575](https://redirect.github.com/natasha41575)) \\[SIG API
        Machinery, Apps, Node, Scheduling and Testing]\n- Promoted Job Managed By
        to general availability. The `JobManagedBy` feature gate is now locked to
        true, and will be removed in a future release of Kubernetes. ([kubernetes/kubernetes#135080](https://redirect.github.com/kubernetes/kubernetes/pull/135080),
        [@&#8203;dejanzele](https://redirect.github.com/dejanzele)) \\[SIG API Machinery,
        Apps and Testing]\n- Promoted ReplicaSet and Deployment `.status.terminatingReplicas`
        tracking to beta. The `DeploymentReplicaSetTerminatingReplicas` feature gate
        is now enabled by default. ([kubernetes/kubernetes#133087](https://redirect.github.com/kubernetes/kubernetes/pull/133087),
        [@&#8203;atiratree](https://redirect.github.com/atiratree)) \\[SIG API Machinery,
        Apps and Testing]\n- Scheduler: added a new `bindingTimeout` argument to the
        DynamicResources plugin configuration.\n  This allows customizing the wait
        duration in PreBind for device binding conditions.\n  Defaults to 10 minutes
        when DRADeviceBindingConditions and DRAResourceClaimDeviceStatus are both
        enabled. ([kubernetes/kubernetes#134905](https://redirect.github.com/kubernetes/kubernetes/pull/134905),
        [@&#8203;fj-naji](https://redirect.github.com/fj-naji)) \\[SIG Node and Scheduling]\n-
        The Pod Certificates feature is moving to beta. The PodCertificateRequest
        feature gate is still set false by default. To use the feature, users will
        need to enable the certificates API groups in v1beta1 and enable the feature
        gate PodCertificateRequest. A new field UserAnnotations is added to the PodCertificateProjection
        API and the corresponding UnverifiedUserAnnotations is added to the PodCertificateRequest
        API. ([kubernetes/kubernetes#134624](https://redirect.github.com/kubernetes/kubernetes/pull/134624),
        [@&#8203;yt2985](https://redirect.github.com/yt2985)) \\[SIG API Machinery,
        Apps, Auth, Etcd, Instrumentation, Node and Testing]\n- The StrictCostEnforcementForVAP
        and StrictCostEnforcementForWebhooks feature gates, locked on since 1.32,
        have been removed ([kubernetes/kubernetes#134994](https://redirect.github.com/kubernetes/kubernetes/pull/134994),
        [@&#8203;liggitt](https://redirect.github.com/liggitt)) \\[SIG API Machinery,
        Auth, Node and Testing]\n- The `PreferSameZone` and `PreferSameNode` values
        for Service's\n  `trafficDistribution` field are now GA. The old value `PreferClose`
        is now\n  deprecated in favor of the more-explicit `PreferSameZone`. ([kubernetes/kubernetes#134457](https://redirect.github.com/kubernetes/kubernetes/pull/134457),
        [@&#8203;danwinship](https://redirect.github.com/danwinship)) \\[SIG API Machinery,
        Apps, Network and Testing]\n- Kube-apiserver: fix a possible panic validating
        a custom resource whose CustomResourceDefinition indicates a status subresource
        exists, but which does not define a `status` property in the `openAPIV3Schema`
        ([kubernetes/kubernetes#133721](https://redirect.github.com/kubernetes/kubernetes/pull/133721),
        [@&#8203;fusida](https://redirect.github.com/fusida)) \\[SIG API Machinery,
        Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle,
        Etcd, Instrumentation, Network, Node, Release, Scheduling, Storage and Testing]\n-
        Kubernetes API Go types removed runtime use of the github.com/gogo/protobuf
        library, and are no longer registered into the global gogo type registry.
        Kubernetes API Go types were not suitable for use with the google.golang.org/protobuf
        library, and no longer implement `ProtoMessage()` by default to avoid accidental
        incompatible use. If removal of these marker methods impacts your use, it
        can be re-enabled for one more release with a `kubernetes_protomessage_one_more_release`
        build tag, but will be removed in 1.36. ([kubernetes/kubernetes#134256](https://redirect.github.com/kubernetes/kubernetes/pull/134256),
        [@&#8203;liggitt](https://redirect.github.com/liggitt)) \\[SIG API Machinery,
        Apps, Architecture, Auth, CLI, Cluster Lifecycle, Instrumentation, Network,
        Node, Scheduling and Storage]\n- Promoted HPA configurable tolerance to beta.
        The `HPAConfigurableTolerance` feature gate is now enabled by default. ([kubernetes/kubernetes#133128](https://redirect.github.com/kubernetes/kubernetes/pull/133128),
        [@&#8203;jm-franc](https://redirect.github.com/jm-franc)) \\[SIG API Machinery
        and Autoscaling]\n- The MaxUnavailableStatefulSet feature is now beta and
        enabled by default. ([kubernetes/kubernetes#133153](https://redirect.github.com/kubernetes/kubernetes/pull/133153),
        [@&#8203;helayoty](https://redirect.github.com/helayoty)) \\[SIG API Machinery
        and Apps]\n- Added WithOrigin within apis/core/validation with adjusted tests
        ([kubernetes/kubernetes#132825](https://redirect.github.com/kubernetes/kubernetes/pull/132825),
        [@&#8203;PatrickLaabs](https://redirect.github.com/PatrickLaabs)) \\[SIG Apps]\n-
        Component-base: validate that log-flush-frequency is positive and return an
        error instead of panic-ing ([kubernetes/kubernetes#133540](https://redirect.github.com/kubernetes/kubernetes/pull/133540),
        [@&#8203;BenTheElder](https://redirect.github.com/BenTheElder)) \\[SIG Architecture,
        Instrumentation, Network and Node]\n- Feature gate dependencies are now explicit,
        and validated at startup. A feature can no longer be enabled if it depends
        on a disabled feature. In particular, this means that `AllAlpha=true` will
        no longer work without enabling disabled-by-default beta features that are
        depended on (either with `AllBeta=true` or explicitly enumerating the disabled
        dependencies). ([kubernetes/kubernetes#133697](https://redirect.github.com/kubernetes/kubernetes/pull/133697),
        [@&#8203;tallclair](https://redirect.github.com/tallclair)) \\[SIG API Machinery,
        Architecture, Cluster Lifecycle and Node]\n- In version 1.34, the PodObservedGenerationTracking
        feature has been upgraded to beta, and the description of the alpha version
        in the openapi has been removed. ([kubernetes/kubernetes#133883](https://redirect.github.com/kubernetes/kubernetes/pull/133883),
        [@&#8203;yangjunmyfm192085](https://redirect.github.com/yangjunmyfm192085))
        \\[SIG Apps]\n- Introduce a new declarative validation tag +k8s:customUnique
        to control listmap uniqueness ([kubernetes/kubernetes#134279](https://redirect.github.com/kubernetes/kubernetes/pull/134279),
        [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API Machinery
        and Auth]\n- Kube-apiserver: Fixed a 1.34 regression in CustomResourceDefinition
        handling that incorrectly warned about unrecognized formats on number and
        integer properties ([kubernetes/kubernetes#133896](https://redirect.github.com/kubernetes/kubernetes/pull/133896),
        [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API Machinery,
        Apps, Architecture, Auth, CLI, Cloud Provider, Contributor Experience, Network,
        Node and Scheduling]\n- OpenAPI model packages of API types are generated
        into `zz_generated.model_name.go` files and are accessible using the `OpenAPIModelName()`
        function.  This allows API authors to declare the desired OpenAPI model packages
        instead of using the go package path of API types. ([kubernetes/kubernetes#131755](https://redirect.github.com/kubernetes/kubernetes/pull/131755),
        [@&#8203;jpbetz](https://redirect.github.com/jpbetz)) \\[SIG API Machinery,
        Apps, Architecture, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation,
        Network, Node, Scheduling, Storage and Testing]\n- Support for `kubectl get
        -o kyaml` is now on by default.  To disable it, set `KUBECTL_KYAML=false`.
        ([kubernetes/kubernetes#133327](https://redirect.github.com/kubernetes/kubernetes/pull/133327),
        [@&#8203;thockin](https://redirect.github.com/thockin)) \\[SIG CLI]\n- The
        storage version for MutatingAdmissionPolicy is updated to v1beta1. ([kubernetes/kubernetes#133715](https://redirect.github.com/kubernetes/kubernetes/pull/133715),
        [@&#8203;cici37](https://redirect.github.com/cici37)) \\[SIG API Machinery,
        Etcd and Testing]\n\n### [`v34.1.0`](https://redirect.github.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v3410b1)\n\n[Compare
        Source](https://redirect.github.com/kubernetes-client/python/compare/v33.1.0...v34.1.0)\n\nKubernetes
        API Version: v1.34.1\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
        **Schedule**: (UTC)\n\n- Branch creation\n  - At any time (no schedule defined)\n-
        Automerge\n  - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**:
        Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B
        **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
        checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
        about this update again.\n\n---\n\n - [ ] <!-- rebase-check -->If you want
        to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by
        [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/osism/container-image-osism-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi43NC41IiwidXBkYXRlZEluVmVyIjoiNDMuMTgyLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
      change_url: https://github.com/osism/container-image-osism-ansible/pull/713
      child_jobs: []
      commit_id: 6e48d1dc1035117b15ee5b14d185ab7b33ab1fed
      event_id: 6680fbb0-52ea-11f1-8246-84f475d88a36
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/52f8b802c9df4d0baf72722002917f67/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/52f8b802c9df4d0baf72722002917f67/work/logs
        result_data_file: /var/lib/zuul/builds/52f8b802c9df4d0baf72722002917f67/work/results.json
        src_root: /var/lib/zuul/builds/52f8b802c9df4d0baf72722002917f67/work/src
        work_root: /var/lib/zuul/builds/52f8b802c9df4d0baf72722002917f67/work
      include_vars: []
      items:
      - branch: main
        change: '713'
        change_message: "chore(deps): update dependency kubernetes to v35\n\nThis
          PR contains the following updates:\n\n| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/)
          | [Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|
          [kubernetes](https://redirect.github.com/kubernetes-client/python) | `==33.1.0`
          \u2192 `==35.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/kubernetes/35.0.0?slim=true)
          | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/kubernetes/33.1.0/35.0.0?slim=true)
          |\n\n---\n\n> [!WARNING]\n> Some dependencies could not be looked up. Check
          the [Dependency Dashboard](../issues/218) for more information.\n\n---\n\n###
          Release Notes\n\n<details>\n<summary>kubernetes-client/python (kubernetes)</summary>\n\n###
          [`v35.0.0`](https://redirect.github.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v3500snapshot)\n\n[Compare
          Source](https://redirect.github.com/kubernetes-client/python/compare/v34.1.0...v35.0.0)\n\nKubernetes
          API Version: v1.35.0\n\n##### API Change\n\n- Added `ObservedGeneration`
          to CustomResourceDefinition conditions. ([kubernetes/kubernetes#134984](https://redirect.github.com/kubernetes/kubernetes/pull/134984),
          [@&#8203;michaelasp](https://redirect.github.com/michaelasp))\n- Added `WithOrigin`
          within `apis/core/validation` with adjusted tests. ([kubernetes/kubernetes#132825](https://redirect.github.com/kubernetes/kubernetes/pull/132825),
          [@&#8203;PatrickLaabs](https://redirect.github.com/PatrickLaabs))\n- Added
          scoring for the prioritized list feature so nodes that best satisfy the
          highest-ranked subrequests were chosen. ([kubernetes/kubernetes#134711](https://redirect.github.com/kubernetes/kubernetes/pull/134711),
          [@&#8203;mortent](https://redirect.github.com/mortent)) \\[SIG Node, Scheduling
          and Testing]\n- Added the `--min-compatibility-version` flag to `kube-apiserver`,
          `kube-controller-manager`, and `kube-scheduler`. ([kubernetes/kubernetes#133980](https://redirect.github.com/kubernetes/kubernetes/pull/133980),
          [@&#8203;siyuanfoundation](https://redirect.github.com/siyuanfoundation))
          \\[SIG API Machinery, Architecture, Cluster Lifecycle, Etcd, Scheduling
          and Testing]\n- Added the `StorageVersionMigration` `v1beta1` API and removed
          the `v1alpha1` API.\n\n  ACTION REQUIRED: The `v1alpha1` API is no longer
          supported. Users must remove any `v1alpha1` resources before upgrading.
          ([kubernetes/kubernetes#134784](https://redirect.github.com/kubernetes/kubernetes/pull/134784),
          [@&#8203;michaelasp](https://redirect.github.com/michaelasp)) \\[SIG API
          Machinery, Apps, Auth, Etcd and Testing]\n- Added validation to ensure `log-flush-frequency`
          is a positive value, returning an error instead of causing a panic. ([kubernetes/kubernetes#133540](https://redirect.github.com/kubernetes/kubernetes/pull/133540),
          [@&#8203;BenTheElder](https://redirect.github.com/BenTheElder)) \\[SIG Architecture,
          Instrumentation, Network and Node]\n- All containers are restarted when
          a source container in a restart policy rule exits. This alpha feature is
          gated behind `RestartAllContainersOnContainerExit`. ([kubernetes/kubernetes#134345](https://redirect.github.com/kubernetes/kubernetes/pull/134345),
          [@&#8203;yuanwang04](https://redirect.github.com/yuanwang04)) \\[SIG Apps,
          Node and Testing]\n- CSI drivers can now opt in to receive service account
          tokens via the secrets field instead of volume context by setting `spec.serviceAccountTokenInSecrets:
          true` in the CSIDriver object. This prevents tokens from being exposed in
          logs and other outputs. The feature is gated by the `CSIServiceAccountTokenSecrets`
          feature gate (beta in `v1.35`). ([kubernetes/kubernetes#134826](https://redirect.github.com/kubernetes/kubernetes/pull/134826),
          [@&#8203;aramase](https://redirect.github.com/aramase)) \\[SIG API Machinery,
          Auth, Storage and Testing]\n- Changed kuberc configuration schema. Two new
          optional fields added to kuberc configuration, `credPluginPolicy` and `credPluginAllowlist`.
          This is documented in [KEP-3104](https://redirect.github.com/kubernetes/enhancements/blob/master/keps/sig-cli/3104-introduce-kuberc/README.md#allowlist-design-details)
          and documentation is added to the website by [kubernetes/website#52877](https://redirect.github.com/kubernetes/website/pull/52877)
          ([kubernetes/kubernetes#134870](https://redirect.github.com/kubernetes/kubernetes/pull/134870),
          [@&#8203;pmengelbert](https://redirect.github.com/pmengelbert)) \\[SIG API
          Machinery, Architecture, Auth, CLI, Instrumentation and Testing]\n- DRA
          device taints: `DeviceTaintRule` status provides information about the rule,
          including whether Pods still need to be evicted (`EvictionInProgress` condition).
          The newly added `None` effect can be used to preview what a `DeviceTaintRule`
          would do if it used the `NoExecute` effect and to taint devices (`device
          health`) without immediately affecting scheduling or running Pods. ([kubernetes/kubernetes#134152](https://redirect.github.com/kubernetes/kubernetes/pull/134152),
          [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG API Machinery,
          Apps, Auth, Node, Release, Scheduling and Testing]\n- DRA: The `DynamicResourceAllocation`
          feature gate for the core functionality (GA in `v1.34`) has now been locked
          to enabled-by-default and cannot be disabled anymore. ([kubernetes/kubernetes#134452](https://redirect.github.com/kubernetes/kubernetes/pull/134452),
          [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG Auth, Node, Scheduling
          and Testing]\n- Enabled `kubectl get -o kyaml` by default. To disable it,
          set `KUBECTL_KYAML=false`. ([kubernetes/kubernetes#133327](https://redirect.github.com/kubernetes/kubernetes/pull/133327),
          [@&#8203;thockin](https://redirect.github.com/thockin))\n- Enabled in-place
          resizing of pod-level resources.\n  - Added `Resources` in `PodStatus` to
          capture resources set in the pod-level cgroup.\n  - Added `AllocatedResources`
          in `PodStatus` to capture resources requested in the `PodSpec`. ([kubernetes/kubernetes#132919](https://redirect.github.com/kubernetes/kubernetes/pull/132919),
          [@&#8203;ndixita](https://redirect.github.com/ndixita)) \\[SIG API Machinery,
          Apps, Architecture, Auth, CLI, Instrumentation, Node, Scheduling and Testing]\n-
          Enabled the `NominatedNodeNameForExpectation` feature in kube-scheduler
          by default.\n  - Enabled the `ClearingNominatedNodeNameAfterBinding` feature
          in kube-apiserver by default. ([kubernetes/kubernetes#135103](https://redirect.github.com/kubernetes/kubernetes/pull/135103),
          [@&#8203;ania-borowiec](https://redirect.github.com/ania-borowiec)) \\[SIG
          API Machinery, Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider,
          Cluster Lifecycle, Etcd, Instrumentation, Network, Node, Scheduling, Storage
          and Testing]\n- Enhanced discovery responses to merge API groups and resources
          from all peer apiservers when the `UnknownVersionInteroperabilityProxy`
          feature is enabled. ([kubernetes/kubernetes#133648](https://redirect.github.com/kubernetes/kubernetes/pull/133648),
          [@&#8203;richabanker](https://redirect.github.com/richabanker)) \\[SIG API
          Machinery, Auth, Cloud Provider, Node, Scheduling and Testing]\n- Extended
          `core/v1` `Toleration` to support numeric comparison operators (`Gt`,`Lt`).
          ([kubernetes/kubernetes#134665](https://redirect.github.com/kubernetes/kubernetes/pull/134665),
          [@&#8203;helayoty](https://redirect.github.com/helayoty)) \\[SIG API Machinery,
          Apps, Node, Scheduling, Testing and Windows]\n- Feature gate dependencies
          are now explicit, and validated at startup. A feature can no longer be enabled
          if it depends on a disabled feature. In particular, this means that `AllAlpha=true`
          will no longer work without enabling disabled-by-default beta features that
          are depended on (either with `AllBeta=true` or explicitly enumerating the
          disabled dependencies). ([kubernetes/kubernetes#133697](https://redirect.github.com/kubernetes/kubernetes/pull/133697),
          [@&#8203;tallclair](https://redirect.github.com/tallclair)) \\[SIG API Machinery,
          Architecture, Cluster Lifecycle and Node]\n- Generated OpenAPI model packages
          for API types into `zz_generated.model_name.go` files, accessible via the
          `OpenAPIModelName()` function. This allows API authors to declare desired
          OpenAPI model packages instead of relying on the Go package path of API
          types. ([kubernetes/kubernetes#131755](https://redirect.github.com/kubernetes/kubernetes/pull/131755),
          [@&#8203;jpbetz](https://redirect.github.com/jpbetz)) \\[SIG API Machinery,
          Apps, Architecture, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation,
          Network, Node, Scheduling, Storage and Testing]\n- Implemented constrained
          impersonation as described in [KEP-5284](https://kep.k8s.io/5284). ([kubernetes/kubernetes#134803](https://redirect.github.com/kubernetes/kubernetes/pull/134803),
          [@&#8203;enj](https://redirect.github.com/enj)) \\[SIG API Machinery, Auth
          and Testing]\n- Introduced a new declarative validation tag `+k8s:customUnique`
          to control listmap uniqueness. ([kubernetes/kubernetes#134279](https://redirect.github.com/kubernetes/kubernetes/pull/134279),
          [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API
          Machinery and Auth]\n- Introduced a structured and versioned `v1alpha1`
          response for the `statusz` endpoint. ([kubernetes/kubernetes#134313](https://redirect.github.com/kubernetes/kubernetes/pull/134313),
          [@&#8203;richabanker](https://redirect.github.com/richabanker)) \\[SIG API
          Machinery, Architecture, Instrumentation, Network, Node, Scheduling and
          Testing]\n- Introduced a structured and versioned `v1alpha1` response format
          for the `flagz` endpoint. ([kubernetes/kubernetes#134995](https://redirect.github.com/kubernetes/kubernetes/pull/134995),
          [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API
          Machinery, Architecture, Instrumentation, Network, Node, Scheduling and
          Testing]\n- Introduced the GangScheduling kube-scheduler plugin to support
          \"all-or-nothing\" scheduling using the `scheduling.k8s.io/v1alpha1` Workload
          API. ([kubernetes/kubernetes#134722](https://redirect.github.com/kubernetes/kubernetes/pull/134722),
          [@&#8203;macsko](https://redirect.github.com/macsko)) \\[SIG API Machinery,
          Apps, Auth, CLI, Etcd, Scheduling and Testing]\n- Introduced the Node Declared
          Features capability (alpha), which includes:\n  - A new `Node.Status.DeclaredFeatures`
          field for publishing node-specific features.\n  - A `component-helpers`
          library for feature registration and inference.\n  - A `NodeDeclaredFeatures`
          scheduler plugin to match pods with nodes that provide required features.\n
          \ - A `NodeDeclaredFeatureValidator` admission plugin to validate pod updates
          against a node's declared features. ([kubernetes/kubernetes#133389](https://redirect.github.com/kubernetes/kubernetes/pull/133389),
          [@&#8203;pravk03](https://redirect.github.com/pravk03)) \\[SIG API Machinery,
          Apps, Node, Release, Scheduling and Testing]\n- Introduced the `scheduling.k8s.io/v1alpha1`
          Workload API to express workload-level scheduling requirements and allow
          the kube-scheduler to act on them. ([kubernetes/kubernetes#134564](https://redirect.github.com/kubernetes/kubernetes/pull/134564),
          [@&#8203;macsko](https://redirect.github.com/macsko)) \\[SIG API Machinery,
          Apps, CLI, Etcd, Scheduling and Testing]\n- Introduced the alpha `MutableSchedulingDirectivesForSuspendedJobs`
          feature gate (disabled by default), which allows mutating a Job's scheduling
          directives while the Job is suspended.\n  It also updates the Job controller
          to clears the `status.startTime` field for suspended Jobs. ([kubernetes/kubernetes#135104](https://redirect.github.com/kubernetes/kubernetes/pull/135104),
          [@&#8203;mimowo](https://redirect.github.com/mimowo)) \\[SIG Apps and Testing]\n-
          Kube-apiserver: Fixed a `v1.34` regression in `CustomResourceDefinition`
          handling that incorrectly warned about unrecognized formats on number and
          integer properties. ([kubernetes/kubernetes#133896](https://redirect.github.com/kubernetes/kubernetes/pull/133896),
          [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API
          Machinery, Apps, Architecture, Auth, CLI, Cloud Provider, Contributor Experience,
          Network, Node and Scheduling]\n- Kube-apiserver: Fixed a possible panic
          validating a custom resource whose `CustomResourceDefinition` indicates
          a status subresource exists, but which does not define a `status` property
          in the `openAPIV3Schema`. ([kubernetes/kubernetes#133721](https://redirect.github.com/kubernetes/kubernetes/pull/133721),
          [@&#8203;fusida](https://redirect.github.com/fusida)) \\[SIG API Machinery,
          Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle,
          Etcd, Instrumentation, Network, Node, Release, Scheduling, Storage and Testing]\n-
          Kubernetes API Go types removed runtime use of the `github.com/gogo/protobuf`
          library, and are no longer registered into the global gogo type registry.
          Kubernetes API Go types were not suitable for use with the `google.golang.org/protobuf`
          library, and no longer implement `ProtoMessage()` by default to avoid accidental
          incompatible use. If removal of these marker methods impacts your use, it
          can be re-enabled for one more release with a `kubernetes_protomessage_one_more_release`
          build tag, but will be removed in `v1.36`. ([kubernetes/kubernetes#134256](https://redirect.github.com/kubernetes/kubernetes/pull/134256),
          [@&#8203;liggitt](https://redirect.github.com/liggitt)) \\[SIG API Machinery,
          Apps, Architecture, Auth, CLI, Cluster Lifecycle, Instrumentation, Network,
          Node, Scheduling and Storage]\n- Made node affinity in Persistent Volume
          mutable. ([kubernetes/kubernetes#134339](https://redirect.github.com/kubernetes/kubernetes/pull/134339),
          [@&#8203;huww98](https://redirect.github.com/huww98)) \\[SIG API Machinery,
          Apps and Node]\n- Moved the `ImagePullIntent` and `ImagePulledRecord` objects
          used by the kubelet to track image pulls to the `v1beta1` API version. ([kubernetes/kubernetes#132579](https://redirect.github.com/kubernetes/kubernetes/pull/132579),
          [@&#8203;stlaz](https://redirect.github.com/stlaz)) \\[SIG Auth and Node]\n-
          Pod resize now only allows CPU and memory resources; other resource types
          are forbidden. ([kubernetes/kubernetes#135084](https://redirect.github.com/kubernetes/kubernetes/pull/135084),
          [@&#8203;tallclair](https://redirect.github.com/tallclair)) \\[SIG Apps,
          Node and Testing]\n- Prevented Pods from being scheduled onto nodes that
          lack the required CSI driver. ([kubernetes/kubernetes#135012](https://redirect.github.com/kubernetes/kubernetes/pull/135012),
          [@&#8203;gnufied](https://redirect.github.com/gnufied)) \\[SIG API Machinery,
          Scheduling, Storage and Testing]\n- Promoted HPA configurable tolerance
          to beta. The `HPAConfigurableTolerance` feature gate has now been enabled
          by default. ([kubernetes/kubernetes#133128](https://redirect.github.com/kubernetes/kubernetes/pull/133128),
          [@&#8203;jm-franc](https://redirect.github.com/jm-franc)) \\[SIG API Machinery
          and Autoscaling]\n- Promoted ReplicaSet and Deployment `.status.terminatingReplicas`
          tracking to beta. The `DeploymentReplicaSetTerminatingReplicas` feature
          gate is now enabled by default. ([kubernetes/kubernetes#133087](https://redirect.github.com/kubernetes/kubernetes/pull/133087),
          [@&#8203;atiratree](https://redirect.github.com/atiratree)) \\[SIG API Machinery,
          Apps and Testing]\n- Promoted `PodObservedGenerationTracking` to GA. ([kubernetes/kubernetes#134948](https://redirect.github.com/kubernetes/kubernetes/pull/134948),
          [@&#8203;natasha41575](https://redirect.github.com/natasha41575)) \\[SIG
          API Machinery, Apps, Node, Scheduling and Testing]\n- Promoted the `JobManagedBy`
          feature to general availability. The `JobManagedBy` feature gate was locked
          to `true` and will be removed in a future Kubernetes release. ([kubernetes/kubernetes#135080](https://redirect.github.com/kubernetes/kubernetes/pull/135080),
          [@&#8203;dejanzele](https://redirect.github.com/dejanzele)) \\[SIG API Machinery,
          Apps and Testing]\n- Promoted the `MaxUnavailableStatefulSet` feature to
          beta and enabling it by default. ([kubernetes/kubernetes#133153](https://redirect.github.com/kubernetes/kubernetes/pull/133153),
          [@&#8203;helayoty](https://redirect.github.com/helayoty)) \\[SIG API Machinery
          and Apps]\n- Removed the `StrictCostEnforcementForVAP` and `StrictCostEnforcementForWebhooks`
          feature gates, which were locked since `v1.32`. ([kubernetes/kubernetes#134994](https://redirect.github.com/kubernetes/kubernetes/pull/134994),
          [@&#8203;liggitt](https://redirect.github.com/liggitt)) \\[SIG API Machinery,
          Auth, Node and Testing]\n- Scheduler: Added the `bindingTimeout` argument
          to the DynamicResources plugin configuration, allowing customization of
          the wait duration in `PreBind` for device binding conditions.\n  Defaults
          to 10 minutes when `DRADeviceBindingConditions` and `DRAResourceClaimDeviceStatus`
          are both enabled. ([kubernetes/kubernetes#134905](https://redirect.github.com/kubernetes/kubernetes/pull/134905),
          [@&#8203;fj-naji](https://redirect.github.com/fj-naji)) \\[SIG Node and
          Scheduling]\n- The DRA device taints and toleration feature received a separate
          feature gate, `DRADeviceTaintRules`, which controlled support for `DeviceTaintRules`.
          This allowed disabling it while keeping `DRADeviceTaints` enabled so that
          tainting via `ResourceSlices` continued to work. ([kubernetes/kubernetes#135068](https://redirect.github.com/kubernetes/kubernetes/pull/135068),
          [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG API Machinery,
          Apps, Auth, Node, Scheduling and Testing]\n- The Pod Certificates feature
          moved to beta. The `PodCertificateRequest` feature gate is set disabled
          by default. To use the feature, users must enable the certificates API groups
          in `v1beta1` and enable the `PodCertificateRequest` feature gate. The `UserAnnotations`
          field was added to the `PodCertificateProjection` API and the corresponding
          `UnverifiedUserAnnotations` field was added to the `PodCertificateRequest`
          API. ([kubernetes/kubernetes#134624](https://redirect.github.com/kubernetes/kubernetes/pull/134624),
          [@&#8203;yt2985](https://redirect.github.com/yt2985)) \\[SIG API Machinery,
          Apps, Auth, Etcd, Instrumentation, Node and Testing]\n- The `KubeletEnsureSecretPulledImages`
          feature was promoted to Beta and enabled by default. ([kubernetes/kubernetes#135228](https://redirect.github.com/kubernetes/kubernetes/pull/135228),
          [@&#8203;aramase](https://redirect.github.com/aramase)) \\[SIG Auth, Node
          and Testing]\n- The `PreferSameZone` and `PreferSameNode` values for the
          Service\n  `trafficDistribution` field graduated to general availability.
          The\n  `PreferClose` value is now deprecated in favor of the more explicit\n
          \ `PreferSameZone`. ([kubernetes/kubernetes#134457](https://redirect.github.com/kubernetes/kubernetes/pull/134457),
          [@&#8203;danwinship](https://redirect.github.com/danwinship)) \\[SIG API
          Machinery, Apps, Network and Testing]\n- Updated `ResourceQuota` to count
          device class requests within a `ResourceClaim` as two additional quotas
          when the `DRAExtendedResource` feature is enabled:\n  - `requests.deviceclass.resource.k8s.io/<deviceclass>`
          is charged based on the worst-case number of devices requested.\n  - Device
          classes mapping to an extended resource now consume `requests.<extended
          resource name>`. ([kubernetes/kubernetes#134210](https://redirect.github.com/kubernetes/kubernetes/pull/134210),
          [@&#8203;yliaog](https://redirect.github.com/yliaog)) \\[SIG API Machinery,
          Apps, Node, Scheduling and Testing]\n- Updated storage version for `MutatingAdmissionPolicy`
          to `v1beta1`. ([kubernetes/kubernetes#133715](https://redirect.github.com/kubernetes/kubernetes/pull/133715),
          [@&#8203;cici37](https://redirect.github.com/cici37)) \\[SIG API Machinery,
          Etcd and Testing]\n- Updated the Partitionable Devices feature to support
          referencing counter sets across ResourceSlices within the same resource
          pool. Devices from incomplete pools were no longer considered for allocation.
          This change introduced backwards-incompatible updates to the alpha feature,
          requiring any ResourceSlices using it to be removed before upgrading or
          downgrading between v1.34 and v1.35. ([kubernetes/kubernetes#134189](https://redirect.github.com/kubernetes/kubernetes/pull/134189),
          [@&#8203;mortent](https://redirect.github.com/mortent)) \\[SIG API Machinery,
          Node, Scheduling and Testing]\n- Upgraded the `PodObservedGenerationTracking`
          feature to beta in `v1.34` and removed the alpha version description from
          the OpenAPI specification. ([kubernetes/kubernetes#133883](https://redirect.github.com/kubernetes/kubernetes/pull/133883),
          [@&#8203;yangjunmyfm192085](https://redirect.github.com/yangjunmyfm192085))\n-
          Add scoring for the prioritized list feature so that the node that can satisfy
          the best ranked subrequests are chosen. ([kubernetes/kubernetes#134711](https://redirect.github.com/kubernetes/kubernetes/pull/134711),
          [@&#8203;mortent](https://redirect.github.com/mortent)) \\[SIG Node, Scheduling
          and Testing]\n- Allows restart all containers when the source container
          exits with a matching restart policy rule. This is an alpha feature behind
          feature gate RestartAllContainersOnContainerExit. ([kubernetes/kubernetes#134345](https://redirect.github.com/kubernetes/kubernetes/pull/134345),
          [@&#8203;yuanwang04](https://redirect.github.com/yuanwang04)) \\[SIG Apps,
          Node and Testing]\n- Changed kuberc configuration schema. Two new optional
          fields added to kuberc configuration, `credPluginPolicy` and `credPluginAllowlist`.
          This is documented in [KEP-3104](https://redirect.github.com/kubernetes/enhancements/blob/master/keps/sig-cli/3104-introduce-kuberc/README.md#allowlist-design-details)
          and documentation is added to the website by [kubernetes/website#52877](https://redirect.github.com/kubernetes/website/pull/52877)
          ([kubernetes/kubernetes#134870](https://redirect.github.com/kubernetes/kubernetes/pull/134870),
          [@&#8203;pmengelbert](https://redirect.github.com/pmengelbert)) \\[SIG API
          Machinery, Architecture, Auth, CLI, Instrumentation and Testing]\n- Enhanced
          discovery response to support merged API groups/resources from all peer
          apiservers when UnknownVersionInteroperabilityProxy feature is enabled ([kubernetes/kubernetes#133648](https://redirect.github.com/kubernetes/kubernetes/pull/133648),
          [@&#8203;richabanker](https://redirect.github.com/richabanker)) \\[SIG API
          Machinery, Auth, Cloud Provider, Node, Scheduling and Testing]\n- Extend
          `core/v1 Toleration` to support numeric comparison operators (`Gt`, `Lt`).
          ([kubernetes/kubernetes#134665](https://redirect.github.com/kubernetes/kubernetes/pull/134665),
          [@&#8203;helayoty](https://redirect.github.com/helayoty)) \\[SIG API Machinery,
          Apps, Node, Scheduling, Testing and Windows]\n- Features: NominatedNodeNameForExpectation
          in kube-scheduler and CleaeringNominatedNodeNameAfterBinding in kube-apiserver
          are now enabled by default. ([kubernetes/kubernetes#135103](https://redirect.github.com/kubernetes/kubernetes/pull/135103),
          [@&#8203;ania-borowiec](https://redirect.github.com/ania-borowiec)) \\[SIG
          API Machinery, Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider,
          Cluster Lifecycle, Etcd, Instrumentation, Network, Node, Scheduling, Storage
          and Testing]\n- Implement changes to prevent pod scheduling to a node without
          CSI driver ([kubernetes/kubernetes#135012](https://redirect.github.com/kubernetes/kubernetes/pull/135012),
          [@&#8203;gnufied](https://redirect.github.com/gnufied)) \\[SIG API Machinery,
          Scheduling, Storage and Testing]\n- Introduce scheduling.k8s.io/v1alpha1
          Workload API to allow for expressing workload-level scheduling requirements
          and let kube-scheduler act on those. ([kubernetes/kubernetes#134564](https://redirect.github.com/kubernetes/kubernetes/pull/134564),
          [@&#8203;macsko](https://redirect.github.com/macsko)) \\[SIG API Machinery,
          Apps, CLI, Etcd, Scheduling and Testing]\n- Introduce the alpha MutableSchedulingDirectivesForSuspendedJobs
          feature gate (disabled by default) which:\n  1. allows to mutate Job's scheduling
          directives for suspended Jobs\n  2. makes the Job controller to clear the
          status.startTime field for suspended Jobs ([kubernetes/kubernetes#135104](https://redirect.github.com/kubernetes/kubernetes/pull/135104),
          [@&#8203;mimowo](https://redirect.github.com/mimowo)) \\[SIG Apps and Testing]\n-
          Introduced GangScheduling kube-scheduler plugin to enable \"all-or-nothing\"
          scheduling. Workload API in scheduling.k8s.io/v1alpha1 is used to express
          the desired policy. ([kubernetes/kubernetes#134722](https://redirect.github.com/kubernetes/kubernetes/pull/134722),
          [@&#8203;macsko](https://redirect.github.com/macsko)) \\[SIG API Machinery,
          Apps, Auth, CLI, Etcd, Scheduling and Testing]\n- PV node affinity is now
          mutable. ([kubernetes/kubernetes#134339](https://redirect.github.com/kubernetes/kubernetes/pull/134339),
          [@&#8203;huww98](https://redirect.github.com/huww98)) \\[SIG API Machinery,
          Apps and Node]\n- ResourceQuota now counts device class requests within
          a ResourceClaim object as consuming two additional quotas when the DRAExtendedResource
          feature is enabled:\n  - `requests.deviceclass.resource.k8s.io/<deviceclass>`
          with a quantity equal to the worst case count of devices requested\n  -
          requests for device classes that map to an extended resource consume `requests.<extended
          resource name>` ([kubernetes/kubernetes#134210](https://redirect.github.com/kubernetes/kubernetes/pull/134210),
          [@&#8203;yliaog](https://redirect.github.com/yliaog)) \\[SIG API Machinery,
          Apps, Node, Scheduling and Testing]\n- The DRA device taints and toleration
          feature now has a separate feature gate, DRADeviceTaintRules, which controls
          whether support for DeviceTaintRules is enabled. It is possible to disable
          that and keep DRADeviceTaints enabled, in which case tainting by DRA drivers
          through ResourceSlices continues to work. ([kubernetes/kubernetes#135068](https://redirect.github.com/kubernetes/kubernetes/pull/135068),
          [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG API Machinery,
          Apps, Auth, Node, Scheduling and Testing]\n- The ImagePullIntent and ImagePulledRecord
          objects used by kubelet to store information about image pulls have been
          moved to the v1beta1 API version. ([kubernetes/kubernetes#132579](https://redirect.github.com/kubernetes/kubernetes/pull/132579),
          [@&#8203;stlaz](https://redirect.github.com/stlaz)) \\[SIG Auth and Node]\n-
          The KubeletEnsureSecretPulledImages feature is now beta and enabled by default.
          ([kubernetes/kubernetes#135228](https://redirect.github.com/kubernetes/kubernetes/pull/135228),
          [@&#8203;aramase](https://redirect.github.com/aramase)) \\[SIG Auth, Node
          and Testing]\n- This change adds a new alpha feature Node Declared Features,
          which includes:\n  - A new `Node.Status.DeclaredFeatures` field for Kubelet
          to publish node-specific features.\n  - A library in `component-helpers`
          for feature registration and inference.\n  - A scheduler plugin (`NodeDeclaredFeatures`)
          scheduler plugin to match pods with nodes that provide their required features.\n
          \ - An admission plugin (`NodeDeclaredFeatureValidator`) to validate pod
          updates against a node's declared features. ([kubernetes/kubernetes#133389](https://redirect.github.com/kubernetes/kubernetes/pull/133389),
          [@&#8203;pravk03](https://redirect.github.com/pravk03)) \\[SIG API Machinery,
          Apps, Node, Release, Scheduling and Testing]\n- This change allows In Place
          Resize of Pod Level Resources\n  - Add Resources in PodStatus to capture
          resources set at pod-level cgroup\n  - Add AllocatedResources in PodStatus
          to capture resources requested in the PodSpec ([kubernetes/kubernetes#132919](https://redirect.github.com/kubernetes/kubernetes/pull/132919),
          [@&#8203;ndixita](https://redirect.github.com/ndixita)) \\[SIG API Machinery,
          Apps, Architecture, Auth, CLI, Instrumentation, Node, Scheduling and Testing]\n-
          Updates to the Partitionable Devices feature which allows for referencing
          counter sets across different ResourceSlices within the same resource pool.\n\n
          \ Devices from incomplete pools are no longer considered for allocation.\n\n
          \ This contains backwards incompatible changes to the Partitionable Devices
          alpha feature, so any ResourceSlices that uses the feature should be removed
          prior to upgrading or downgrading between 1.34 and 1.35. ([kubernetes/kubernetes#134189](https://redirect.github.com/kubernetes/kubernetes/pull/134189),
          [@&#8203;mortent](https://redirect.github.com/mortent)) \\[SIG API Machinery,
          Node, Scheduling and Testing]\n- Add ObservedGeneration to CustomResourceDefinition
          Conditions. ([kubernetes/kubernetes#134984](https://redirect.github.com/kubernetes/kubernetes/pull/134984),
          [@&#8203;michaelasp](https://redirect.github.com/michaelasp)) \\[SIG API
          Machinery]\n- Add StorageVersionMigration v1beta1 api and remove the v1alpha
          API.\n\n  Any use of the v1alpha1 api is no longer supported and\n  users
          must remove any v1alpha1 resources prior to upgrade. ([kubernetes/kubernetes#134784](https://redirect.github.com/kubernetes/kubernetes/pull/134784),
          [@&#8203;michaelasp](https://redirect.github.com/michaelasp)) \\[SIG API
          Machinery, Apps, Auth, Etcd and Testing]\n- CSI drivers can now opt-in to
          receive service account tokens via the secrets field instead of volume context
          by setting `spec.serviceAccountTokenInSecrets: true` in the CSIDriver object.
          This prevents tokens from being exposed in logs and other outputs. The feature
          is gated by the `CSIServiceAccountTokenSecrets` feature gate (Beta in v1.35).
          ([kubernetes/kubernetes#134826](https://redirect.github.com/kubernetes/kubernetes/pull/134826),
          [@&#8203;aramase](https://redirect.github.com/aramase)) \\[SIG API Machinery,
          Auth, Storage and Testing]\n- DRA device taints: DeviceTaintRule status
          provided information about the rule, in particular whether pods still need
          to be evicted (\"EvictionInProgress\" condition). The new \"None\" effect
          can be used to preview what a DeviceTaintRule would do if it used the \"NoExecute\"
          effect and to taint devices (\"device health\") without immediately affecting
          scheduling or running pods. ([kubernetes/kubernetes#134152](https://redirect.github.com/kubernetes/kubernetes/pull/134152),
          [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG API Machinery,
          Apps, Auth, Node, Release, Scheduling and Testing]\n- DRA: the DynamicResourceAllocation
          feature gate for the core functionality (GA in 1.34) is now locked to enabled-by-default
          and thus cannot be disabled anymore. ([kubernetes/kubernetes#134452](https://redirect.github.com/kubernetes/kubernetes/pull/134452),
          [@&#8203;pohly](https://redirect.github.com/pohly)) \\[SIG Auth, Node, Scheduling
          and Testing]\n- Forbid adding resources other than CPU & memory on pod resize.
          ([kubernetes/kubernetes#135084](https://redirect.github.com/kubernetes/kubernetes/pull/135084),
          [@&#8203;tallclair](https://redirect.github.com/tallclair)) \\[SIG Apps,
          Node and Testing]\n- Implement constrained impersonation as described in
          <https://kep.k8s.io/5284> ([kubernetes/kubernetes#134803](https://redirect.github.com/kubernetes/kubernetes/pull/134803),
          [@&#8203;enj](https://redirect.github.com/enj)) \\[SIG API Machinery, Auth
          and Testing]\n- Introduces a structured and versioned v1alpha1 response
          for flagz ([kubernetes/kubernetes#134995](https://redirect.github.com/kubernetes/kubernetes/pull/134995),
          [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API
          Machinery, Architecture, Instrumentation, Network, Node, Scheduling and
          Testing]\n- Introduces a structured and versioned v1alpha1 response for
          statusz ([kubernetes/kubernetes#134313](https://redirect.github.com/kubernetes/kubernetes/pull/134313),
          [@&#8203;richabanker](https://redirect.github.com/richabanker)) \\[SIG API
          Machinery, Architecture, Instrumentation, Network, Node, Scheduling and
          Testing]\n- New `--min-compatibility-version` flag for apiserver, kcm and
          kube scheduler ([kubernetes/kubernetes#133980](https://redirect.github.com/kubernetes/kubernetes/pull/133980),
          [@&#8203;siyuanfoundation](https://redirect.github.com/siyuanfoundation))
          \\[SIG API Machinery, Architecture, Cluster Lifecycle, Etcd, Scheduling
          and Testing]\n- Promote PodObservedGenerationTracking to GA. ([kubernetes/kubernetes#134948](https://redirect.github.com/kubernetes/kubernetes/pull/134948),
          [@&#8203;natasha41575](https://redirect.github.com/natasha41575)) \\[SIG
          API Machinery, Apps, Node, Scheduling and Testing]\n- Promoted Job Managed
          By to general availability. The `JobManagedBy` feature gate is now locked
          to true, and will be removed in a future release of Kubernetes. ([kubernetes/kubernetes#135080](https://redirect.github.com/kubernetes/kubernetes/pull/135080),
          [@&#8203;dejanzele](https://redirect.github.com/dejanzele)) \\[SIG API Machinery,
          Apps and Testing]\n- Promoted ReplicaSet and Deployment `.status.terminatingReplicas`
          tracking to beta. The `DeploymentReplicaSetTerminatingReplicas` feature
          gate is now enabled by default. ([kubernetes/kubernetes#133087](https://redirect.github.com/kubernetes/kubernetes/pull/133087),
          [@&#8203;atiratree](https://redirect.github.com/atiratree)) \\[SIG API Machinery,
          Apps and Testing]\n- Scheduler: added a new `bindingTimeout` argument to
          the DynamicResources plugin configuration.\n  This allows customizing the
          wait duration in PreBind for device binding conditions.\n  Defaults to 10
          minutes when DRADeviceBindingConditions and DRAResourceClaimDeviceStatus
          are both enabled. ([kubernetes/kubernetes#134905](https://redirect.github.com/kubernetes/kubernetes/pull/134905),
          [@&#8203;fj-naji](https://redirect.github.com/fj-naji)) \\[SIG Node and
          Scheduling]\n- The Pod Certificates feature is moving to beta. The PodCertificateRequest
          feature gate is still set false by default. To use the feature, users will
          need to enable the certificates API groups in v1beta1 and enable the feature
          gate PodCertificateRequest. A new field UserAnnotations is added to the
          PodCertificateProjection API and the corresponding UnverifiedUserAnnotations
          is added to the PodCertificateRequest API. ([kubernetes/kubernetes#134624](https://redirect.github.com/kubernetes/kubernetes/pull/134624),
          [@&#8203;yt2985](https://redirect.github.com/yt2985)) \\[SIG API Machinery,
          Apps, Auth, Etcd, Instrumentation, Node and Testing]\n- The StrictCostEnforcementForVAP
          and StrictCostEnforcementForWebhooks feature gates, locked on since 1.32,
          have been removed ([kubernetes/kubernetes#134994](https://redirect.github.com/kubernetes/kubernetes/pull/134994),
          [@&#8203;liggitt](https://redirect.github.com/liggitt)) \\[SIG API Machinery,
          Auth, Node and Testing]\n- The `PreferSameZone` and `PreferSameNode` values
          for Service's\n  `trafficDistribution` field are now GA. The old value `PreferClose`
          is now\n  deprecated in favor of the more-explicit `PreferSameZone`. ([kubernetes/kubernetes#134457](https://redirect.github.com/kubernetes/kubernetes/pull/134457),
          [@&#8203;danwinship](https://redirect.github.com/danwinship)) \\[SIG API
          Machinery, Apps, Network and Testing]\n- Kube-apiserver: fix a possible
          panic validating a custom resource whose CustomResourceDefinition indicates
          a status subresource exists, but which does not define a `status` property
          in the `openAPIV3Schema` ([kubernetes/kubernetes#133721](https://redirect.github.com/kubernetes/kubernetes/pull/133721),
          [@&#8203;fusida](https://redirect.github.com/fusida)) \\[SIG API Machinery,
          Apps, Architecture, Auth, Autoscaling, CLI, Cloud Provider, Cluster Lifecycle,
          Etcd, Instrumentation, Network, Node, Release, Scheduling, Storage and Testing]\n-
          Kubernetes API Go types removed runtime use of the github.com/gogo/protobuf
          library, and are no longer registered into the global gogo type registry.
          Kubernetes API Go types were not suitable for use with the google.golang.org/protobuf
          library, and no longer implement `ProtoMessage()` by default to avoid accidental
          incompatible use. If removal of these marker methods impacts your use, it
          can be re-enabled for one more release with a `kubernetes_protomessage_one_more_release`
          build tag, but will be removed in 1.36. ([kubernetes/kubernetes#134256](https://redirect.github.com/kubernetes/kubernetes/pull/134256),
          [@&#8203;liggitt](https://redirect.github.com/liggitt)) \\[SIG API Machinery,
          Apps, Architecture, Auth, CLI, Cluster Lifecycle, Instrumentation, Network,
          Node, Scheduling and Storage]\n- Promoted HPA configurable tolerance to
          beta. The `HPAConfigurableTolerance` feature gate is now enabled by default.
          ([kubernetes/kubernetes#133128](https://redirect.github.com/kubernetes/kubernetes/pull/133128),
          [@&#8203;jm-franc](https://redirect.github.com/jm-franc)) \\[SIG API Machinery
          and Autoscaling]\n- The MaxUnavailableStatefulSet feature is now beta and
          enabled by default. ([kubernetes/kubernetes#133153](https://redirect.github.com/kubernetes/kubernetes/pull/133153),
          [@&#8203;helayoty](https://redirect.github.com/helayoty)) \\[SIG API Machinery
          and Apps]\n- Added WithOrigin within apis/core/validation with adjusted
          tests ([kubernetes/kubernetes#132825](https://redirect.github.com/kubernetes/kubernetes/pull/132825),
          [@&#8203;PatrickLaabs](https://redirect.github.com/PatrickLaabs)) \\[SIG
          Apps]\n- Component-base: validate that log-flush-frequency is positive and
          return an error instead of panic-ing ([kubernetes/kubernetes#133540](https://redirect.github.com/kubernetes/kubernetes/pull/133540),
          [@&#8203;BenTheElder](https://redirect.github.com/BenTheElder)) \\[SIG Architecture,
          Instrumentation, Network and Node]\n- Feature gate dependencies are now
          explicit, and validated at startup. A feature can no longer be enabled if
          it depends on a disabled feature. In particular, this means that `AllAlpha=true`
          will no longer work without enabling disabled-by-default beta features that
          are depended on (either with `AllBeta=true` or explicitly enumerating the
          disabled dependencies). ([kubernetes/kubernetes#133697](https://redirect.github.com/kubernetes/kubernetes/pull/133697),
          [@&#8203;tallclair](https://redirect.github.com/tallclair)) \\[SIG API Machinery,
          Architecture, Cluster Lifecycle and Node]\n- In version 1.34, the PodObservedGenerationTracking
          feature has been upgraded to beta, and the description of the alpha version
          in the openapi has been removed. ([kubernetes/kubernetes#133883](https://redirect.github.com/kubernetes/kubernetes/pull/133883),
          [@&#8203;yangjunmyfm192085](https://redirect.github.com/yangjunmyfm192085))
          \\[SIG Apps]\n- Introduce a new declarative validation tag +k8s:customUnique
          to control listmap uniqueness ([kubernetes/kubernetes#134279](https://redirect.github.com/kubernetes/kubernetes/pull/134279),
          [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API
          Machinery and Auth]\n- Kube-apiserver: Fixed a 1.34 regression in CustomResourceDefinition
          handling that incorrectly warned about unrecognized formats on number and
          integer properties ([kubernetes/kubernetes#133896](https://redirect.github.com/kubernetes/kubernetes/pull/133896),
          [@&#8203;yongruilin](https://redirect.github.com/yongruilin)) \\[SIG API
          Machinery, Apps, Architecture, Auth, CLI, Cloud Provider, Contributor Experience,
          Network, Node and Scheduling]\n- OpenAPI model packages of API types are
          generated into `zz_generated.model_name.go` files and are accessible using
          the `OpenAPIModelName()` function.  This allows API authors to declare the
          desired OpenAPI model packages instead of using the go package path of API
          types. ([kubernetes/kubernetes#131755](https://redirect.github.com/kubernetes/kubernetes/pull/131755),
          [@&#8203;jpbetz](https://redirect.github.com/jpbetz)) \\[SIG API Machinery,
          Apps, Architecture, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation,
          Network, Node, Scheduling, Storage and Testing]\n- Support for `kubectl
          get -o kyaml` is now on by default.  To disable it, set `KUBECTL_KYAML=false`.
          ([kubernetes/kubernetes#133327](https://redirect.github.com/kubernetes/kubernetes/pull/133327),
          [@&#8203;thockin](https://redirect.github.com/thockin)) \\[SIG CLI]\n- The
          storage version for MutatingAdmissionPolicy is updated to v1beta1. ([kubernetes/kubernetes#133715](https://redirect.github.com/kubernetes/kubernetes/pull/133715),
          [@&#8203;cici37](https://redirect.github.com/cici37)) \\[SIG API Machinery,
          Etcd and Testing]\n\n### [`v34.1.0`](https://redirect.github.com/kubernetes-client/python/blob/HEAD/CHANGELOG.md#v3410b1)\n\n[Compare
          Source](https://redirect.github.com/kubernetes-client/python/compare/v33.1.0...v34.1.0)\n\nKubernetes
          API Version: v1.34.1\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: (UTC)\n\n- Branch creation\n  - At any time (no schedule defined)\n-
          Automerge\n  - At any time (no schedule defined)\n\n\U0001F6A6 **Automerge**:
          Disabled by config. Please merge this manually once you are satisfied.\n\n\u267B
          **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
          checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
          about this update again.\n\n---\n\n - [ ] <!-- rebase-check -->If you want
          to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated
          by [Mend Renovate](https://mend.io/renovate/). View the [repository job
          log](https://developer.mend.io/github/osism/container-image-osism-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi43NC41IiwidXBkYXRlZEluVmVyIjoiNDMuMTgyLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/container-image-osism-ansible/pull/713
        commit_id: 6e48d1dc1035117b15ee5b14d185ab7b33ab1fed
        patchset: 6e48d1dc1035117b15ee5b14d185ab7b33ab1fed
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-osism-ansible
          name: osism/container-image-osism-ansible
          short_name: container-image-osism-ansible
          src_dir: src/github.com/osism/container-image-osism-ansible
        topic: null
      job: ansible-lint
      jobtags: []
      max_attempts: 3
      message: Y2hvcmUoZGVwcyk6IHVwZGF0ZSBkZXBlbmRlbmN5IGt1YmVybmV0ZXMgdG8gdjM1CgpUaGlzIFBSIGNvbnRhaW5zIHRoZSBmb2xsb3dpbmcgdXBkYXRlczoKCnwgUGFja2FnZSB8IENoYW5nZSB8IFtBZ2VdKGh0dHBzOi8vZG9jcy5yZW5vdmF0ZWJvdC5jb20vbWVyZ2UtY29uZmlkZW5jZS8pIHwgW0NvbmZpZGVuY2VdKGh0dHBzOi8vZG9jcy5yZW5vdmF0ZWJvdC5jb20vbWVyZ2UtY29uZmlkZW5jZS8pIHwKfC0tLXwtLS18LS0tfC0tLXwKfCBba3ViZXJuZXRlc10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMtY2xpZW50L3B5dGhvbikgfCBgPT0zMy4xLjBgIOKGkiBgPT0zNS4wLjBgIHwgIVthZ2VdKGh0dHBzOi8vZGV2ZWxvcGVyLm1lbmQuaW8vYXBpL21jL2JhZGdlcy9hZ2UvcHlwaS9rdWJlcm5ldGVzLzM1LjAuMD9zbGltPXRydWUpIHwgIVtjb25maWRlbmNlXShodHRwczovL2RldmVsb3Blci5tZW5kLmlvL2FwaS9tYy9iYWRnZXMvY29uZmlkZW5jZS9weXBpL2t1YmVybmV0ZXMvMzMuMS4wLzM1LjAuMD9zbGltPXRydWUpIHwKCi0tLQoKPiBbIVdBUk5JTkddCj4gU29tZSBkZXBlbmRlbmNpZXMgY291bGQgbm90IGJlIGxvb2tlZCB1cC4gQ2hlY2sgdGhlIFtEZXBlbmRlbmN5IERhc2hib2FyZF0oLi4vaXNzdWVzLzIxOCkgZm9yIG1vcmUgaW5mb3JtYXRpb24uCgotLS0KCiMjIyBSZWxlYXNlIE5vdGVzCgo8ZGV0YWlscz4KPHN1bW1hcnk+a3ViZXJuZXRlcy1jbGllbnQvcHl0aG9uIChrdWJlcm5ldGVzKTwvc3VtbWFyeT4KCiMjIyBbYHYzNS4wLjBgXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy1jbGllbnQvcHl0aG9uL2Jsb2IvSEVBRC9DSEFOR0VMT0cubWQjdjM1MDBzbmFwc2hvdCkKCltDb21wYXJlIFNvdXJjZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMtY2xpZW50L3B5dGhvbi9jb21wYXJlL3YzNC4xLjAuLi52MzUuMC4wKQoKS3ViZXJuZXRlcyBBUEkgVmVyc2lvbjogdjEuMzUuMAoKIyMjIyMgQVBJIENoYW5nZQoKLSBBZGRlZCBgT2JzZXJ2ZWRHZW5lcmF0aW9uYCB0byBDdXN0b21SZXNvdXJjZURlZmluaXRpb24gY29uZGl0aW9ucy4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM0OTg0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM0OTg0KSwgW0AmIzgyMDM7bWljaGFlbGFzcF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL21pY2hhZWxhc3ApKQotIEFkZGVkIGBXaXRoT3JpZ2luYCB3aXRoaW4gYGFwaXMvY29yZS92YWxpZGF0aW9uYCB3aXRoIGFkanVzdGVkIHRlc3RzLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzI4MjVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzI4MjUpLCBbQCYjODIwMztQYXRyaWNrTGFhYnNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9QYXRyaWNrTGFhYnMpKQotIEFkZGVkIHNjb3JpbmcgZm9yIHRoZSBwcmlvcml0aXplZCBsaXN0IGZlYXR1cmUgc28gbm9kZXMgdGhhdCBiZXN0IHNhdGlzZnkgdGhlIGhpZ2hlc3QtcmFua2VkIHN1YnJlcXVlc3RzIHdlcmUgY2hvc2VuLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzQ3MTFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzQ3MTEpLCBbQCYjODIwMzttb3J0ZW50XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vbW9ydGVudCkpIFxbU0lHIE5vZGUsIFNjaGVkdWxpbmcgYW5kIFRlc3RpbmddCi0gQWRkZWQgdGhlIGAtLW1pbi1jb21wYXRpYmlsaXR5LXZlcnNpb25gIGZsYWcgdG8gYGt1YmUtYXBpc2VydmVyYCwgYGt1YmUtY29udHJvbGxlci1tYW5hZ2VyYCwgYW5kIGBrdWJlLXNjaGVkdWxlcmAuIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzMzk4MF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzMzk4MCksIFtAJiM4MjAzO3NpeXVhbmZvdW5kYXRpb25dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9zaXl1YW5mb3VuZGF0aW9uKSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXJjaGl0ZWN0dXJlLCBDbHVzdGVyIExpZmVjeWNsZSwgRXRjZCwgU2NoZWR1bGluZyBhbmQgVGVzdGluZ10KLSBBZGRlZCB0aGUgYFN0b3JhZ2VWZXJzaW9uTWlncmF0aW9uYCBgdjFiZXRhMWAgQVBJIGFuZCByZW1vdmVkIHRoZSBgdjFhbHBoYTFgIEFQSS4KCiAgQUNUSU9OIFJFUVVJUkVEOiBUaGUgYHYxYWxwaGExYCBBUEkgaXMgbm8gbG9uZ2VyIHN1cHBvcnRlZC4gVXNlcnMgbXVzdCByZW1vdmUgYW55IGB2MWFscGhhMWAgcmVzb3VyY2VzIGJlZm9yZSB1cGdyYWRpbmcuIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzNDc4NF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzNDc4NCksIFtAJiM4MjAzO21pY2hhZWxhc3BdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9taWNoYWVsYXNwKSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXBwcywgQXV0aCwgRXRjZCBhbmQgVGVzdGluZ10KLSBBZGRlZCB2YWxpZGF0aW9uIHRvIGVuc3VyZSBgbG9nLWZsdXNoLWZyZXF1ZW5jeWAgaXMgYSBwb3NpdGl2ZSB2YWx1ZSwgcmV0dXJuaW5nIGFuIGVycm9yIGluc3RlYWQgb2YgY2F1c2luZyBhIHBhbmljLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzM1NDBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzM1NDApLCBbQCYjODIwMztCZW5UaGVFbGRlcl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL0JlblRoZUVsZGVyKSkgXFtTSUcgQXJjaGl0ZWN0dXJlLCBJbnN0cnVtZW50YXRpb24sIE5ldHdvcmsgYW5kIE5vZGVdCi0gQWxsIGNvbnRhaW5lcnMgYXJlIHJlc3RhcnRlZCB3aGVuIGEgc291cmNlIGNvbnRhaW5lciBpbiBhIHJlc3RhcnQgcG9saWN5IHJ1bGUgZXhpdHMuIFRoaXMgYWxwaGEgZmVhdHVyZSBpcyBnYXRlZCBiZWhpbmQgYFJlc3RhcnRBbGxDb250YWluZXJzT25Db250YWluZXJFeGl0YC4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM0MzQ1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM0MzQ1KSwgW0AmIzgyMDM7eXVhbndhbmcwNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3l1YW53YW5nMDQpKSBcW1NJRyBBcHBzLCBOb2RlIGFuZCBUZXN0aW5nXQotIENTSSBkcml2ZXJzIGNhbiBub3cgb3B0IGluIHRvIHJlY2VpdmUgc2VydmljZSBhY2NvdW50IHRva2VucyB2aWEgdGhlIHNlY3JldHMgZmllbGQgaW5zdGVhZCBvZiB2b2x1bWUgY29udGV4dCBieSBzZXR0aW5nIGBzcGVjLnNlcnZpY2VBY2NvdW50VG9rZW5JblNlY3JldHM6IHRydWVgIGluIHRoZSBDU0lEcml2ZXIgb2JqZWN0LiBUaGlzIHByZXZlbnRzIHRva2VucyBmcm9tIGJlaW5nIGV4cG9zZWQgaW4gbG9ncyBhbmQgb3RoZXIgb3V0cHV0cy4gVGhlIGZlYXR1cmUgaXMgZ2F0ZWQgYnkgdGhlIGBDU0lTZXJ2aWNlQWNjb3VudFRva2VuU2VjcmV0c2AgZmVhdHVyZSBnYXRlIChiZXRhIGluIGB2MS4zNWApLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzQ4MjZdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzQ4MjYpLCBbQCYjODIwMzthcmFtYXNlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXJhbWFzZSkpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEF1dGgsIFN0b3JhZ2UgYW5kIFRlc3RpbmddCi0gQ2hhbmdlZCBrdWJlcmMgY29uZmlndXJhdGlvbiBzY2hlbWEuIFR3byBuZXcgb3B0aW9uYWwgZmllbGRzIGFkZGVkIHRvIGt1YmVyYyBjb25maWd1cmF0aW9uLCBgY3JlZFBsdWdpblBvbGljeWAgYW5kIGBjcmVkUGx1Z2luQWxsb3dsaXN0YC4gVGhpcyBpcyBkb2N1bWVudGVkIGluIFtLRVAtMzEwNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMvZW5oYW5jZW1lbnRzL2Jsb2IvbWFzdGVyL2tlcHMvc2lnLWNsaS8zMTA0LWludHJvZHVjZS1rdWJlcmMvUkVBRE1FLm1kI2FsbG93bGlzdC1kZXNpZ24tZGV0YWlscykgYW5kIGRvY3VtZW50YXRpb24gaXMgYWRkZWQgdG8gdGhlIHdlYnNpdGUgYnkgW2t1YmVybmV0ZXMvd2Vic2l0ZSM1Mjg3N10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMvd2Vic2l0ZS9wdWxsLzUyODc3KSAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzQ4NzBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzQ4NzApLCBbQCYjODIwMztwbWVuZ2VsYmVydF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3BtZW5nZWxiZXJ0KSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXJjaGl0ZWN0dXJlLCBBdXRoLCBDTEksIEluc3RydW1lbnRhdGlvbiBhbmQgVGVzdGluZ10KLSBEUkEgZGV2aWNlIHRhaW50czogYERldmljZVRhaW50UnVsZWAgc3RhdHVzIHByb3ZpZGVzIGluZm9ybWF0aW9uIGFib3V0IHRoZSBydWxlLCBpbmNsdWRpbmcgd2hldGhlciBQb2RzIHN0aWxsIG5lZWQgdG8gYmUgZXZpY3RlZCAoYEV2aWN0aW9uSW5Qcm9ncmVzc2AgY29uZGl0aW9uKS4gVGhlIG5ld2x5IGFkZGVkIGBOb25lYCBlZmZlY3QgY2FuIGJlIHVzZWQgdG8gcHJldmlldyB3aGF0IGEgYERldmljZVRhaW50UnVsZWAgd291bGQgZG8gaWYgaXQgdXNlZCB0aGUgYE5vRXhlY3V0ZWAgZWZmZWN0IGFuZCB0byB0YWludCBkZXZpY2VzIChgZGV2aWNlIGhlYWx0aGApIHdpdGhvdXQgaW1tZWRpYXRlbHkgYWZmZWN0aW5nIHNjaGVkdWxpbmcgb3IgcnVubmluZyBQb2RzLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzQxNTJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzQxNTIpLCBbQCYjODIwMztwb2hseV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3BvaGx5KSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXBwcywgQXV0aCwgTm9kZSwgUmVsZWFzZSwgU2NoZWR1bGluZyBhbmQgVGVzdGluZ10KLSBEUkE6IFRoZSBgRHluYW1pY1Jlc291cmNlQWxsb2NhdGlvbmAgZmVhdHVyZSBnYXRlIGZvciB0aGUgY29yZSBmdW5jdGlvbmFsaXR5IChHQSBpbiBgdjEuMzRgKSBoYXMgbm93IGJlZW4gbG9ja2VkIHRvIGVuYWJsZWQtYnktZGVmYXVsdCBhbmQgY2Fubm90IGJlIGRpc2FibGVkIGFueW1vcmUuIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzNDQ1Ml0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzNDQ1MiksIFtAJiM4MjAzO3BvaGx5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcG9obHkpKSBcW1NJRyBBdXRoLCBOb2RlLCBTY2hlZHVsaW5nIGFuZCBUZXN0aW5nXQotIEVuYWJsZWQgYGt1YmVjdGwgZ2V0IC1vIGt5YW1sYCBieSBkZWZhdWx0LiBUbyBkaXNhYmxlIGl0LCBzZXQgYEtVQkVDVExfS1lBTUw9ZmFsc2VgLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzMzMjddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzMzMjcpLCBbQCYjODIwMzt0aG9ja2luXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vdGhvY2tpbikpCi0gRW5hYmxlZCBpbi1wbGFjZSByZXNpemluZyBvZiBwb2QtbGV2ZWwgcmVzb3VyY2VzLgogIC0gQWRkZWQgYFJlc291cmNlc2AgaW4gYFBvZFN0YXR1c2AgdG8gY2FwdHVyZSByZXNvdXJjZXMgc2V0IGluIHRoZSBwb2QtbGV2ZWwgY2dyb3VwLgogIC0gQWRkZWQgYEFsbG9jYXRlZFJlc291cmNlc2AgaW4gYFBvZFN0YXR1c2AgdG8gY2FwdHVyZSByZXNvdXJjZXMgcmVxdWVzdGVkIGluIHRoZSBgUG9kU3BlY2AuIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzMjkxOV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzMjkxOSksIFtAJiM4MjAzO25kaXhpdGFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9uZGl4aXRhKSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXBwcywgQXJjaGl0ZWN0dXJlLCBBdXRoLCBDTEksIEluc3RydW1lbnRhdGlvbiwgTm9kZSwgU2NoZWR1bGluZyBhbmQgVGVzdGluZ10KLSBFbmFibGVkIHRoZSBgTm9taW5hdGVkTm9kZU5hbWVGb3JFeHBlY3RhdGlvbmAgZmVhdHVyZSBpbiBrdWJlLXNjaGVkdWxlciBieSBkZWZhdWx0LgogIC0gRW5hYmxlZCB0aGUgYENsZWFyaW5nTm9taW5hdGVkTm9kZU5hbWVBZnRlckJpbmRpbmdgIGZlYXR1cmUgaW4ga3ViZS1hcGlzZXJ2ZXIgYnkgZGVmYXVsdC4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM1MTAzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM1MTAzKSwgW0AmIzgyMDM7YW5pYS1ib3Jvd2llY10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FuaWEtYm9yb3dpZWMpKSBcW1NJRyBBUEkgTWFjaGluZXJ5LCBBcHBzLCBBcmNoaXRlY3R1cmUsIEF1dGgsIEF1dG9zY2FsaW5nLCBDTEksIENsb3VkIFByb3ZpZGVyLCBDbHVzdGVyIExpZmVjeWNsZSwgRXRjZCwgSW5zdHJ1bWVudGF0aW9uLCBOZXR3b3JrLCBOb2RlLCBTY2hlZHVsaW5nLCBTdG9yYWdlIGFuZCBUZXN0aW5nXQotIEVuaGFuY2VkIGRpc2NvdmVyeSByZXNwb25zZXMgdG8gbWVyZ2UgQVBJIGdyb3VwcyBhbmQgcmVzb3VyY2VzIGZyb20gYWxsIHBlZXIgYXBpc2VydmVycyB3aGVuIHRoZSBgVW5rbm93blZlcnNpb25JbnRlcm9wZXJhYmlsaXR5UHJveHlgIGZlYXR1cmUgaXMgZW5hYmxlZC4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTMzNjQ4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTMzNjQ4KSwgW0AmIzgyMDM7cmljaGFiYW5rZXJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yaWNoYWJhbmtlcikpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEF1dGgsIENsb3VkIFByb3ZpZGVyLCBOb2RlLCBTY2hlZHVsaW5nIGFuZCBUZXN0aW5nXQotIEV4dGVuZGVkIGBjb3JlL3YxYCBgVG9sZXJhdGlvbmAgdG8gc3VwcG9ydCBudW1lcmljIGNvbXBhcmlzb24gb3BlcmF0b3JzIChgR3RgLGBMdGApLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzQ2NjVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzQ2NjUpLCBbQCYjODIwMztoZWxheW90eV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2hlbGF5b3R5KSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXBwcywgTm9kZSwgU2NoZWR1bGluZywgVGVzdGluZyBhbmQgV2luZG93c10KLSBGZWF0dXJlIGdhdGUgZGVwZW5kZW5jaWVzIGFyZSBub3cgZXhwbGljaXQsIGFuZCB2YWxpZGF0ZWQgYXQgc3RhcnR1cC4gQSBmZWF0dXJlIGNhbiBubyBsb25nZXIgYmUgZW5hYmxlZCBpZiBpdCBkZXBlbmRzIG9uIGEgZGlzYWJsZWQgZmVhdHVyZS4gSW4gcGFydGljdWxhciwgdGhpcyBtZWFucyB0aGF0IGBBbGxBbHBoYT10cnVlYCB3aWxsIG5vIGxvbmdlciB3b3JrIHdpdGhvdXQgZW5hYmxpbmcgZGlzYWJsZWQtYnktZGVmYXVsdCBiZXRhIGZlYXR1cmVzIHRoYXQgYXJlIGRlcGVuZGVkIG9uIChlaXRoZXIgd2l0aCBgQWxsQmV0YT10cnVlYCBvciBleHBsaWNpdGx5IGVudW1lcmF0aW5nIHRoZSBkaXNhYmxlZCBkZXBlbmRlbmNpZXMpLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzM2OTddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzM2OTcpLCBbQCYjODIwMzt0YWxsY2xhaXJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS90YWxsY2xhaXIpKSBcW1NJRyBBUEkgTWFjaGluZXJ5LCBBcmNoaXRlY3R1cmUsIENsdXN0ZXIgTGlmZWN5Y2xlIGFuZCBOb2RlXQotIEdlbmVyYXRlZCBPcGVuQVBJIG1vZGVsIHBhY2thZ2VzIGZvciBBUEkgdHlwZXMgaW50byBgenpfZ2VuZXJhdGVkLm1vZGVsX25hbWUuZ29gIGZpbGVzLCBhY2Nlc3NpYmxlIHZpYSB0aGUgYE9wZW5BUElNb2RlbE5hbWUoKWAgZnVuY3Rpb24uIFRoaXMgYWxsb3dzIEFQSSBhdXRob3JzIHRvIGRlY2xhcmUgZGVzaXJlZCBPcGVuQVBJIG1vZGVsIHBhY2thZ2VzIGluc3RlYWQgb2YgcmVseWluZyBvbiB0aGUgR28gcGFja2FnZSBwYXRoIG9mIEFQSSB0eXBlcy4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTMxNzU1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTMxNzU1KSwgW0AmIzgyMDM7anBiZXR6XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vanBiZXR6KSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXBwcywgQXJjaGl0ZWN0dXJlLCBBdXRoLCBDTEksIENsb3VkIFByb3ZpZGVyLCBDbHVzdGVyIExpZmVjeWNsZSwgSW5zdHJ1bWVudGF0aW9uLCBOZXR3b3JrLCBOb2RlLCBTY2hlZHVsaW5nLCBTdG9yYWdlIGFuZCBUZXN0aW5nXQotIEltcGxlbWVudGVkIGNvbnN0cmFpbmVkIGltcGVyc29uYXRpb24gYXMgZGVzY3JpYmVkIGluIFtLRVAtNTI4NF0oaHR0cHM6Ly9rZXAuazhzLmlvLzUyODQpLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzQ4MDNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzQ4MDMpLCBbQCYjODIwMztlbmpdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9lbmopKSBcW1NJRyBBUEkgTWFjaGluZXJ5LCBBdXRoIGFuZCBUZXN0aW5nXQotIEludHJvZHVjZWQgYSBuZXcgZGVjbGFyYXRpdmUgdmFsaWRhdGlvbiB0YWcgYCtrOHM6Y3VzdG9tVW5pcXVlYCB0byBjb250cm9sIGxpc3RtYXAgdW5pcXVlbmVzcy4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM0Mjc5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM0Mjc5KSwgW0AmIzgyMDM7eW9uZ3J1aWxpbl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3lvbmdydWlsaW4pKSBcW1NJRyBBUEkgTWFjaGluZXJ5IGFuZCBBdXRoXQotIEludHJvZHVjZWQgYSBzdHJ1Y3R1cmVkIGFuZCB2ZXJzaW9uZWQgYHYxYWxwaGExYCByZXNwb25zZSBmb3IgdGhlIGBzdGF0dXN6YCBlbmRwb2ludC4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM0MzEzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM0MzEzKSwgW0AmIzgyMDM7cmljaGFiYW5rZXJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yaWNoYWJhbmtlcikpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEFyY2hpdGVjdHVyZSwgSW5zdHJ1bWVudGF0aW9uLCBOZXR3b3JrLCBOb2RlLCBTY2hlZHVsaW5nIGFuZCBUZXN0aW5nXQotIEludHJvZHVjZWQgYSBzdHJ1Y3R1cmVkIGFuZCB2ZXJzaW9uZWQgYHYxYWxwaGExYCByZXNwb25zZSBmb3JtYXQgZm9yIHRoZSBgZmxhZ3pgIGVuZHBvaW50LiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzQ5OTVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzQ5OTUpLCBbQCYjODIwMzt5b25ncnVpbGluXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20veW9uZ3J1aWxpbikpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEFyY2hpdGVjdHVyZSwgSW5zdHJ1bWVudGF0aW9uLCBOZXR3b3JrLCBOb2RlLCBTY2hlZHVsaW5nIGFuZCBUZXN0aW5nXQotIEludHJvZHVjZWQgdGhlIEdhbmdTY2hlZHVsaW5nIGt1YmUtc2NoZWR1bGVyIHBsdWdpbiB0byBzdXBwb3J0ICJhbGwtb3Itbm90aGluZyIgc2NoZWR1bGluZyB1c2luZyB0aGUgYHNjaGVkdWxpbmcuazhzLmlvL3YxYWxwaGExYCBXb3JrbG9hZCBBUEkuIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzNDcyMl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzNDcyMiksIFtAJiM4MjAzO21hY3Nrb10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL21hY3NrbykpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEFwcHMsIEF1dGgsIENMSSwgRXRjZCwgU2NoZWR1bGluZyBhbmQgVGVzdGluZ10KLSBJbnRyb2R1Y2VkIHRoZSBOb2RlIERlY2xhcmVkIEZlYXR1cmVzIGNhcGFiaWxpdHkgKGFscGhhKSwgd2hpY2ggaW5jbHVkZXM6CiAgLSBBIG5ldyBgTm9kZS5TdGF0dXMuRGVjbGFyZWRGZWF0dXJlc2AgZmllbGQgZm9yIHB1Ymxpc2hpbmcgbm9kZS1zcGVjaWZpYyBmZWF0dXJlcy4KICAtIEEgYGNvbXBvbmVudC1oZWxwZXJzYCBsaWJyYXJ5IGZvciBmZWF0dXJlIHJlZ2lzdHJhdGlvbiBhbmQgaW5mZXJlbmNlLgogIC0gQSBgTm9kZURlY2xhcmVkRmVhdHVyZXNgIHNjaGVkdWxlciBwbHVnaW4gdG8gbWF0Y2ggcG9kcyB3aXRoIG5vZGVzIHRoYXQgcHJvdmlkZSByZXF1aXJlZCBmZWF0dXJlcy4KICAtIEEgYE5vZGVEZWNsYXJlZEZlYXR1cmVWYWxpZGF0b3JgIGFkbWlzc2lvbiBwbHVnaW4gdG8gdmFsaWRhdGUgcG9kIHVwZGF0ZXMgYWdhaW5zdCBhIG5vZGUncyBkZWNsYXJlZCBmZWF0dXJlcy4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTMzMzg5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTMzMzg5KSwgW0AmIzgyMDM7cHJhdmswM10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3ByYXZrMDMpKSBcW1NJRyBBUEkgTWFjaGluZXJ5LCBBcHBzLCBOb2RlLCBSZWxlYXNlLCBTY2hlZHVsaW5nIGFuZCBUZXN0aW5nXQotIEludHJvZHVjZWQgdGhlIGBzY2hlZHVsaW5nLms4cy5pby92MWFscGhhMWAgV29ya2xvYWQgQVBJIHRvIGV4cHJlc3Mgd29ya2xvYWQtbGV2ZWwgc2NoZWR1bGluZyByZXF1aXJlbWVudHMgYW5kIGFsbG93IHRoZSBrdWJlLXNjaGVkdWxlciB0byBhY3Qgb24gdGhlbS4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM0NTY0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM0NTY0KSwgW0AmIzgyMDM7bWFjc2tvXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vbWFjc2tvKSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXBwcywgQ0xJLCBFdGNkLCBTY2hlZHVsaW5nIGFuZCBUZXN0aW5nXQotIEludHJvZHVjZWQgdGhlIGFscGhhIGBNdXRhYmxlU2NoZWR1bGluZ0RpcmVjdGl2ZXNGb3JTdXNwZW5kZWRKb2JzYCBmZWF0dXJlIGdhdGUgKGRpc2FibGVkIGJ5IGRlZmF1bHQpLCB3aGljaCBhbGxvd3MgbXV0YXRpbmcgYSBKb2IncyBzY2hlZHVsaW5nIGRpcmVjdGl2ZXMgd2hpbGUgdGhlIEpvYiBpcyBzdXNwZW5kZWQuCiAgSXQgYWxzbyB1cGRhdGVzIHRoZSBKb2IgY29udHJvbGxlciB0byBjbGVhcnMgdGhlIGBzdGF0dXMuc3RhcnRUaW1lYCBmaWVsZCBmb3Igc3VzcGVuZGVkIEpvYnMuIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzNTEwNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzNTEwNCksIFtAJiM4MjAzO21pbW93b10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL21pbW93bykpIFxbU0lHIEFwcHMgYW5kIFRlc3RpbmddCi0gS3ViZS1hcGlzZXJ2ZXI6IEZpeGVkIGEgYHYxLjM0YCByZWdyZXNzaW9uIGluIGBDdXN0b21SZXNvdXJjZURlZmluaXRpb25gIGhhbmRsaW5nIHRoYXQgaW5jb3JyZWN0bHkgd2FybmVkIGFib3V0IHVucmVjb2duaXplZCBmb3JtYXRzIG9uIG51bWJlciBhbmQgaW50ZWdlciBwcm9wZXJ0aWVzLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzM4OTZdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzM4OTYpLCBbQCYjODIwMzt5b25ncnVpbGluXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20veW9uZ3J1aWxpbikpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEFwcHMsIEFyY2hpdGVjdHVyZSwgQXV0aCwgQ0xJLCBDbG91ZCBQcm92aWRlciwgQ29udHJpYnV0b3IgRXhwZXJpZW5jZSwgTmV0d29yaywgTm9kZSBhbmQgU2NoZWR1bGluZ10KLSBLdWJlLWFwaXNlcnZlcjogRml4ZWQgYSBwb3NzaWJsZSBwYW5pYyB2YWxpZGF0aW5nIGEgY3VzdG9tIHJlc291cmNlIHdob3NlIGBDdXN0b21SZXNvdXJjZURlZmluaXRpb25gIGluZGljYXRlcyBhIHN0YXR1cyBzdWJyZXNvdXJjZSBleGlzdHMsIGJ1dCB3aGljaCBkb2VzIG5vdCBkZWZpbmUgYSBgc3RhdHVzYCBwcm9wZXJ0eSBpbiB0aGUgYG9wZW5BUElWM1NjaGVtYWAuIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzMzcyMV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzMzcyMSksIFtAJiM4MjAzO2Z1c2lkYV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2Z1c2lkYSkpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEFwcHMsIEFyY2hpdGVjdHVyZSwgQXV0aCwgQXV0b3NjYWxpbmcsIENMSSwgQ2xvdWQgUHJvdmlkZXIsIENsdXN0ZXIgTGlmZWN5Y2xlLCBFdGNkLCBJbnN0cnVtZW50YXRpb24sIE5ldHdvcmssIE5vZGUsIFJlbGVhc2UsIFNjaGVkdWxpbmcsIFN0b3JhZ2UgYW5kIFRlc3RpbmddCi0gS3ViZXJuZXRlcyBBUEkgR28gdHlwZXMgcmVtb3ZlZCBydW50aW1lIHVzZSBvZiB0aGUgYGdpdGh1Yi5jb20vZ29nby9wcm90b2J1ZmAgbGlicmFyeSwgYW5kIGFyZSBubyBsb25nZXIgcmVnaXN0ZXJlZCBpbnRvIHRoZSBnbG9iYWwgZ29nbyB0eXBlIHJlZ2lzdHJ5LiBLdWJlcm5ldGVzIEFQSSBHbyB0eXBlcyB3ZXJlIG5vdCBzdWl0YWJsZSBmb3IgdXNlIHdpdGggdGhlIGBnb29nbGUuZ29sYW5nLm9yZy9wcm90b2J1ZmAgbGlicmFyeSwgYW5kIG5vIGxvbmdlciBpbXBsZW1lbnQgYFByb3RvTWVzc2FnZSgpYCBieSBkZWZhdWx0IHRvIGF2b2lkIGFjY2lkZW50YWwgaW5jb21wYXRpYmxlIHVzZS4gSWYgcmVtb3ZhbCBvZiB0aGVzZSBtYXJrZXIgbWV0aG9kcyBpbXBhY3RzIHlvdXIgdXNlLCBpdCBjYW4gYmUgcmUtZW5hYmxlZCBmb3Igb25lIG1vcmUgcmVsZWFzZSB3aXRoIGEgYGt1YmVybmV0ZXNfcHJvdG9tZXNzYWdlX29uZV9tb3JlX3JlbGVhc2VgIGJ1aWxkIHRhZywgYnV0IHdpbGwgYmUgcmVtb3ZlZCBpbiBgdjEuMzZgLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzQyNTZdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzQyNTYpLCBbQCYjODIwMztsaWdnaXR0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vbGlnZ2l0dCkpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEFwcHMsIEFyY2hpdGVjdHVyZSwgQXV0aCwgQ0xJLCBDbHVzdGVyIExpZmVjeWNsZSwgSW5zdHJ1bWVudGF0aW9uLCBOZXR3b3JrLCBOb2RlLCBTY2hlZHVsaW5nIGFuZCBTdG9yYWdlXQotIE1hZGUgbm9kZSBhZmZpbml0eSBpbiBQZXJzaXN0ZW50IFZvbHVtZSBtdXRhYmxlLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzQzMzldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzQzMzkpLCBbQCYjODIwMztodXd3OThdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9odXd3OTgpKSBcW1NJRyBBUEkgTWFjaGluZXJ5LCBBcHBzIGFuZCBOb2RlXQotIE1vdmVkIHRoZSBgSW1hZ2VQdWxsSW50ZW50YCBhbmQgYEltYWdlUHVsbGVkUmVjb3JkYCBvYmplY3RzIHVzZWQgYnkgdGhlIGt1YmVsZXQgdG8gdHJhY2sgaW1hZ2UgcHVsbHMgdG8gdGhlIGB2MWJldGExYCBBUEkgdmVyc2lvbi4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTMyNTc5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTMyNTc5KSwgW0AmIzgyMDM7c3RsYXpdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9zdGxheikpIFxbU0lHIEF1dGggYW5kIE5vZGVdCi0gUG9kIHJlc2l6ZSBub3cgb25seSBhbGxvd3MgQ1BVIGFuZCBtZW1vcnkgcmVzb3VyY2VzOyBvdGhlciByZXNvdXJjZSB0eXBlcyBhcmUgZm9yYmlkZGVuLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzUwODRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzUwODQpLCBbQCYjODIwMzt0YWxsY2xhaXJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS90YWxsY2xhaXIpKSBcW1NJRyBBcHBzLCBOb2RlIGFuZCBUZXN0aW5nXQotIFByZXZlbnRlZCBQb2RzIGZyb20gYmVpbmcgc2NoZWR1bGVkIG9udG8gbm9kZXMgdGhhdCBsYWNrIHRoZSByZXF1aXJlZCBDU0kgZHJpdmVyLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzUwMTJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzUwMTIpLCBbQCYjODIwMztnbnVmaWVkXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ251ZmllZCkpIFxbU0lHIEFQSSBNYWNoaW5lcnksIFNjaGVkdWxpbmcsIFN0b3JhZ2UgYW5kIFRlc3RpbmddCi0gUHJvbW90ZWQgSFBBIGNvbmZpZ3VyYWJsZSB0b2xlcmFuY2UgdG8gYmV0YS4gVGhlIGBIUEFDb25maWd1cmFibGVUb2xlcmFuY2VgIGZlYXR1cmUgZ2F0ZSBoYXMgbm93IGJlZW4gZW5hYmxlZCBieSBkZWZhdWx0LiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzMxMjhdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzMxMjgpLCBbQCYjODIwMztqbS1mcmFuY10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2ptLWZyYW5jKSkgXFtTSUcgQVBJIE1hY2hpbmVyeSBhbmQgQXV0b3NjYWxpbmddCi0gUHJvbW90ZWQgUmVwbGljYVNldCBhbmQgRGVwbG95bWVudCBgLnN0YXR1cy50ZXJtaW5hdGluZ1JlcGxpY2FzYCB0cmFja2luZyB0byBiZXRhLiBUaGUgYERlcGxveW1lbnRSZXBsaWNhU2V0VGVybWluYXRpbmdSZXBsaWNhc2AgZmVhdHVyZSBnYXRlIGlzIG5vdyBlbmFibGVkIGJ5IGRlZmF1bHQuIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzMzA4N10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzMzA4NyksIFtAJiM4MjAzO2F0aXJhdHJlZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2F0aXJhdHJlZSkpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEFwcHMgYW5kIFRlc3RpbmddCi0gUHJvbW90ZWQgYFBvZE9ic2VydmVkR2VuZXJhdGlvblRyYWNraW5nYCB0byBHQS4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM0OTQ4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM0OTQ4KSwgW0AmIzgyMDM7bmF0YXNoYTQxNTc1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vbmF0YXNoYTQxNTc1KSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXBwcywgTm9kZSwgU2NoZWR1bGluZyBhbmQgVGVzdGluZ10KLSBQcm9tb3RlZCB0aGUgYEpvYk1hbmFnZWRCeWAgZmVhdHVyZSB0byBnZW5lcmFsIGF2YWlsYWJpbGl0eS4gVGhlIGBKb2JNYW5hZ2VkQnlgIGZlYXR1cmUgZ2F0ZSB3YXMgbG9ja2VkIHRvIGB0cnVlYCBhbmQgd2lsbCBiZSByZW1vdmVkIGluIGEgZnV0dXJlIEt1YmVybmV0ZXMgcmVsZWFzZS4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM1MDgwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM1MDgwKSwgW0AmIzgyMDM7ZGVqYW56ZWxlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZGVqYW56ZWxlKSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXBwcyBhbmQgVGVzdGluZ10KLSBQcm9tb3RlZCB0aGUgYE1heFVuYXZhaWxhYmxlU3RhdGVmdWxTZXRgIGZlYXR1cmUgdG8gYmV0YSBhbmQgZW5hYmxpbmcgaXQgYnkgZGVmYXVsdC4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTMzMTUzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTMzMTUzKSwgW0AmIzgyMDM7aGVsYXlvdHldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9oZWxheW90eSkpIFxbU0lHIEFQSSBNYWNoaW5lcnkgYW5kIEFwcHNdCi0gUmVtb3ZlZCB0aGUgYFN0cmljdENvc3RFbmZvcmNlbWVudEZvclZBUGAgYW5kIGBTdHJpY3RDb3N0RW5mb3JjZW1lbnRGb3JXZWJob29rc2AgZmVhdHVyZSBnYXRlcywgd2hpY2ggd2VyZSBsb2NrZWQgc2luY2UgYHYxLjMyYC4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM0OTk0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM0OTk0KSwgW0AmIzgyMDM7bGlnZ2l0dF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2xpZ2dpdHQpKSBcW1NJRyBBUEkgTWFjaGluZXJ5LCBBdXRoLCBOb2RlIGFuZCBUZXN0aW5nXQotIFNjaGVkdWxlcjogQWRkZWQgdGhlIGBiaW5kaW5nVGltZW91dGAgYXJndW1lbnQgdG8gdGhlIER5bmFtaWNSZXNvdXJjZXMgcGx1Z2luIGNvbmZpZ3VyYXRpb24sIGFsbG93aW5nIGN1c3RvbWl6YXRpb24gb2YgdGhlIHdhaXQgZHVyYXRpb24gaW4gYFByZUJpbmRgIGZvciBkZXZpY2UgYmluZGluZyBjb25kaXRpb25zLgogIERlZmF1bHRzIHRvIDEwIG1pbnV0ZXMgd2hlbiBgRFJBRGV2aWNlQmluZGluZ0NvbmRpdGlvbnNgIGFuZCBgRFJBUmVzb3VyY2VDbGFpbURldmljZVN0YXR1c2AgYXJlIGJvdGggZW5hYmxlZC4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM0OTA1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM0OTA1KSwgW0AmIzgyMDM7ZmotbmFqaV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2ZqLW5hamkpKSBcW1NJRyBOb2RlIGFuZCBTY2hlZHVsaW5nXQotIFRoZSBEUkEgZGV2aWNlIHRhaW50cyBhbmQgdG9sZXJhdGlvbiBmZWF0dXJlIHJlY2VpdmVkIGEgc2VwYXJhdGUgZmVhdHVyZSBnYXRlLCBgRFJBRGV2aWNlVGFpbnRSdWxlc2AsIHdoaWNoIGNvbnRyb2xsZWQgc3VwcG9ydCBmb3IgYERldmljZVRhaW50UnVsZXNgLiBUaGlzIGFsbG93ZWQgZGlzYWJsaW5nIGl0IHdoaWxlIGtlZXBpbmcgYERSQURldmljZVRhaW50c2AgZW5hYmxlZCBzbyB0aGF0IHRhaW50aW5nIHZpYSBgUmVzb3VyY2VTbGljZXNgIGNvbnRpbnVlZCB0byB3b3JrLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzUwNjhdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzUwNjgpLCBbQCYjODIwMztwb2hseV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3BvaGx5KSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXBwcywgQXV0aCwgTm9kZSwgU2NoZWR1bGluZyBhbmQgVGVzdGluZ10KLSBUaGUgUG9kIENlcnRpZmljYXRlcyBmZWF0dXJlIG1vdmVkIHRvIGJldGEuIFRoZSBgUG9kQ2VydGlmaWNhdGVSZXF1ZXN0YCBmZWF0dXJlIGdhdGUgaXMgc2V0IGRpc2FibGVkIGJ5IGRlZmF1bHQuIFRvIHVzZSB0aGUgZmVhdHVyZSwgdXNlcnMgbXVzdCBlbmFibGUgdGhlIGNlcnRpZmljYXRlcyBBUEkgZ3JvdXBzIGluIGB2MWJldGExYCBhbmQgZW5hYmxlIHRoZSBgUG9kQ2VydGlmaWNhdGVSZXF1ZXN0YCBmZWF0dXJlIGdhdGUuIFRoZSBgVXNlckFubm90YXRpb25zYCBmaWVsZCB3YXMgYWRkZWQgdG8gdGhlIGBQb2RDZXJ0aWZpY2F0ZVByb2plY3Rpb25gIEFQSSBhbmQgdGhlIGNvcnJlc3BvbmRpbmcgYFVudmVyaWZpZWRVc2VyQW5ub3RhdGlvbnNgIGZpZWxkIHdhcyBhZGRlZCB0byB0aGUgYFBvZENlcnRpZmljYXRlUmVxdWVzdGAgQVBJLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzQ2MjRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzQ2MjQpLCBbQCYjODIwMzt5dDI5ODVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS95dDI5ODUpKSBcW1NJRyBBUEkgTWFjaGluZXJ5LCBBcHBzLCBBdXRoLCBFdGNkLCBJbnN0cnVtZW50YXRpb24sIE5vZGUgYW5kIFRlc3RpbmddCi0gVGhlIGBLdWJlbGV0RW5zdXJlU2VjcmV0UHVsbGVkSW1hZ2VzYCBmZWF0dXJlIHdhcyBwcm9tb3RlZCB0byBCZXRhIGFuZCBlbmFibGVkIGJ5IGRlZmF1bHQuIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzNTIyOF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzNTIyOCksIFtAJiM4MjAzO2FyYW1hc2VdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hcmFtYXNlKSkgXFtTSUcgQXV0aCwgTm9kZSBhbmQgVGVzdGluZ10KLSBUaGUgYFByZWZlclNhbWVab25lYCBhbmQgYFByZWZlclNhbWVOb2RlYCB2YWx1ZXMgZm9yIHRoZSBTZXJ2aWNlCiAgYHRyYWZmaWNEaXN0cmlidXRpb25gIGZpZWxkIGdyYWR1YXRlZCB0byBnZW5lcmFsIGF2YWlsYWJpbGl0eS4gVGhlCiAgYFByZWZlckNsb3NlYCB2YWx1ZSBpcyBub3cgZGVwcmVjYXRlZCBpbiBmYXZvciBvZiB0aGUgbW9yZSBleHBsaWNpdAogIGBQcmVmZXJTYW1lWm9uZWAuIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzNDQ1N10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzNDQ1NyksIFtAJiM4MjAzO2RhbndpbnNoaXBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9kYW53aW5zaGlwKSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXBwcywgTmV0d29yayBhbmQgVGVzdGluZ10KLSBVcGRhdGVkIGBSZXNvdXJjZVF1b3RhYCB0byBjb3VudCBkZXZpY2UgY2xhc3MgcmVxdWVzdHMgd2l0aGluIGEgYFJlc291cmNlQ2xhaW1gIGFzIHR3byBhZGRpdGlvbmFsIHF1b3RhcyB3aGVuIHRoZSBgRFJBRXh0ZW5kZWRSZXNvdXJjZWAgZmVhdHVyZSBpcyBlbmFibGVkOgogIC0gYHJlcXVlc3RzLmRldmljZWNsYXNzLnJlc291cmNlLms4cy5pby88ZGV2aWNlY2xhc3M+YCBpcyBjaGFyZ2VkIGJhc2VkIG9uIHRoZSB3b3JzdC1jYXNlIG51bWJlciBvZiBkZXZpY2VzIHJlcXVlc3RlZC4KICAtIERldmljZSBjbGFzc2VzIG1hcHBpbmcgdG8gYW4gZXh0ZW5kZWQgcmVzb3VyY2Ugbm93IGNvbnN1bWUgYHJlcXVlc3RzLjxleHRlbmRlZCByZXNvdXJjZSBuYW1lPmAuIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzNDIxMF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzNDIxMCksIFtAJiM4MjAzO3lsaWFvZ10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3lsaWFvZykpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEFwcHMsIE5vZGUsIFNjaGVkdWxpbmcgYW5kIFRlc3RpbmddCi0gVXBkYXRlZCBzdG9yYWdlIHZlcnNpb24gZm9yIGBNdXRhdGluZ0FkbWlzc2lvblBvbGljeWAgdG8gYHYxYmV0YTFgLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzM3MTVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzM3MTUpLCBbQCYjODIwMztjaWNpMzddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWNpMzcpKSBcW1NJRyBBUEkgTWFjaGluZXJ5LCBFdGNkIGFuZCBUZXN0aW5nXQotIFVwZGF0ZWQgdGhlIFBhcnRpdGlvbmFibGUgRGV2aWNlcyBmZWF0dXJlIHRvIHN1cHBvcnQgcmVmZXJlbmNpbmcgY291bnRlciBzZXRzIGFjcm9zcyBSZXNvdXJjZVNsaWNlcyB3aXRoaW4gdGhlIHNhbWUgcmVzb3VyY2UgcG9vbC4gRGV2aWNlcyBmcm9tIGluY29tcGxldGUgcG9vbHMgd2VyZSBubyBsb25nZXIgY29uc2lkZXJlZCBmb3IgYWxsb2NhdGlvbi4gVGhpcyBjaGFuZ2UgaW50cm9kdWNlZCBiYWNrd2FyZHMtaW5jb21wYXRpYmxlIHVwZGF0ZXMgdG8gdGhlIGFscGhhIGZlYXR1cmUsIHJlcXVpcmluZyBhbnkgUmVzb3VyY2VTbGljZXMgdXNpbmcgaXQgdG8gYmUgcmVtb3ZlZCBiZWZvcmUgdXBncmFkaW5nIG9yIGRvd25ncmFkaW5nIGJldHdlZW4gdjEuMzQgYW5kIHYxLjM1LiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzQxODldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzQxODkpLCBbQCYjODIwMzttb3J0ZW50XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vbW9ydGVudCkpIFxbU0lHIEFQSSBNYWNoaW5lcnksIE5vZGUsIFNjaGVkdWxpbmcgYW5kIFRlc3RpbmddCi0gVXBncmFkZWQgdGhlIGBQb2RPYnNlcnZlZEdlbmVyYXRpb25UcmFja2luZ2AgZmVhdHVyZSB0byBiZXRhIGluIGB2MS4zNGAgYW5kIHJlbW92ZWQgdGhlIGFscGhhIHZlcnNpb24gZGVzY3JpcHRpb24gZnJvbSB0aGUgT3BlbkFQSSBzcGVjaWZpY2F0aW9uLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzM4ODNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzM4ODMpLCBbQCYjODIwMzt5YW5nanVubXlmbTE5MjA4NV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3lhbmdqdW5teWZtMTkyMDg1KSkKLSBBZGQgc2NvcmluZyBmb3IgdGhlIHByaW9yaXRpemVkIGxpc3QgZmVhdHVyZSBzbyB0aGF0IHRoZSBub2RlIHRoYXQgY2FuIHNhdGlzZnkgdGhlIGJlc3QgcmFua2VkIHN1YnJlcXVlc3RzIGFyZSBjaG9zZW4uIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzNDcxMV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzNDcxMSksIFtAJiM4MjAzO21vcnRlbnRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9tb3J0ZW50KSkgXFtTSUcgTm9kZSwgU2NoZWR1bGluZyBhbmQgVGVzdGluZ10KLSBBbGxvd3MgcmVzdGFydCBhbGwgY29udGFpbmVycyB3aGVuIHRoZSBzb3VyY2UgY29udGFpbmVyIGV4aXRzIHdpdGggYSBtYXRjaGluZyByZXN0YXJ0IHBvbGljeSBydWxlLiBUaGlzIGlzIGFuIGFscGhhIGZlYXR1cmUgYmVoaW5kIGZlYXR1cmUgZ2F0ZSBSZXN0YXJ0QWxsQ29udGFpbmVyc09uQ29udGFpbmVyRXhpdC4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM0MzQ1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM0MzQ1KSwgW0AmIzgyMDM7eXVhbndhbmcwNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3l1YW53YW5nMDQpKSBcW1NJRyBBcHBzLCBOb2RlIGFuZCBUZXN0aW5nXQotIENoYW5nZWQga3ViZXJjIGNvbmZpZ3VyYXRpb24gc2NoZW1hLiBUd28gbmV3IG9wdGlvbmFsIGZpZWxkcyBhZGRlZCB0byBrdWJlcmMgY29uZmlndXJhdGlvbiwgYGNyZWRQbHVnaW5Qb2xpY3lgIGFuZCBgY3JlZFBsdWdpbkFsbG93bGlzdGAuIFRoaXMgaXMgZG9jdW1lbnRlZCBpbiBbS0VQLTMxMDRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2VuaGFuY2VtZW50cy9ibG9iL21hc3Rlci9rZXBzL3NpZy1jbGkvMzEwNC1pbnRyb2R1Y2Uta3ViZXJjL1JFQURNRS5tZCNhbGxvd2xpc3QtZGVzaWduLWRldGFpbHMpIGFuZCBkb2N1bWVudGF0aW9uIGlzIGFkZGVkIHRvIHRoZSB3ZWJzaXRlIGJ5IFtrdWJlcm5ldGVzL3dlYnNpdGUjNTI4NzddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL3dlYnNpdGUvcHVsbC81Mjg3NykgKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM0ODcwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM0ODcwKSwgW0AmIzgyMDM7cG1lbmdlbGJlcnRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9wbWVuZ2VsYmVydCkpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEFyY2hpdGVjdHVyZSwgQXV0aCwgQ0xJLCBJbnN0cnVtZW50YXRpb24gYW5kIFRlc3RpbmddCi0gRW5oYW5jZWQgZGlzY292ZXJ5IHJlc3BvbnNlIHRvIHN1cHBvcnQgbWVyZ2VkIEFQSSBncm91cHMvcmVzb3VyY2VzIGZyb20gYWxsIHBlZXIgYXBpc2VydmVycyB3aGVuIFVua25vd25WZXJzaW9uSW50ZXJvcGVyYWJpbGl0eVByb3h5IGZlYXR1cmUgaXMgZW5hYmxlZCAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzM2NDhdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzM2NDgpLCBbQCYjODIwMztyaWNoYWJhbmtlcl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3JpY2hhYmFua2VyKSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXV0aCwgQ2xvdWQgUHJvdmlkZXIsIE5vZGUsIFNjaGVkdWxpbmcgYW5kIFRlc3RpbmddCi0gRXh0ZW5kIGBjb3JlL3YxIFRvbGVyYXRpb25gIHRvIHN1cHBvcnQgbnVtZXJpYyBjb21wYXJpc29uIG9wZXJhdG9ycyAoYEd0YCwgYEx0YCkuIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzNDY2NV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzNDY2NSksIFtAJiM4MjAzO2hlbGF5b3R5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vaGVsYXlvdHkpKSBcW1NJRyBBUEkgTWFjaGluZXJ5LCBBcHBzLCBOb2RlLCBTY2hlZHVsaW5nLCBUZXN0aW5nIGFuZCBXaW5kb3dzXQotIEZlYXR1cmVzOiBOb21pbmF0ZWROb2RlTmFtZUZvckV4cGVjdGF0aW9uIGluIGt1YmUtc2NoZWR1bGVyIGFuZCBDbGVhZXJpbmdOb21pbmF0ZWROb2RlTmFtZUFmdGVyQmluZGluZyBpbiBrdWJlLWFwaXNlcnZlciBhcmUgbm93IGVuYWJsZWQgYnkgZGVmYXVsdC4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM1MTAzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM1MTAzKSwgW0AmIzgyMDM7YW5pYS1ib3Jvd2llY10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FuaWEtYm9yb3dpZWMpKSBcW1NJRyBBUEkgTWFjaGluZXJ5LCBBcHBzLCBBcmNoaXRlY3R1cmUsIEF1dGgsIEF1dG9zY2FsaW5nLCBDTEksIENsb3VkIFByb3ZpZGVyLCBDbHVzdGVyIExpZmVjeWNsZSwgRXRjZCwgSW5zdHJ1bWVudGF0aW9uLCBOZXR3b3JrLCBOb2RlLCBTY2hlZHVsaW5nLCBTdG9yYWdlIGFuZCBUZXN0aW5nXQotIEltcGxlbWVudCBjaGFuZ2VzIHRvIHByZXZlbnQgcG9kIHNjaGVkdWxpbmcgdG8gYSBub2RlIHdpdGhvdXQgQ1NJIGRyaXZlciAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzUwMTJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzUwMTIpLCBbQCYjODIwMztnbnVmaWVkXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ251ZmllZCkpIFxbU0lHIEFQSSBNYWNoaW5lcnksIFNjaGVkdWxpbmcsIFN0b3JhZ2UgYW5kIFRlc3RpbmddCi0gSW50cm9kdWNlIHNjaGVkdWxpbmcuazhzLmlvL3YxYWxwaGExIFdvcmtsb2FkIEFQSSB0byBhbGxvdyBmb3IgZXhwcmVzc2luZyB3b3JrbG9hZC1sZXZlbCBzY2hlZHVsaW5nIHJlcXVpcmVtZW50cyBhbmQgbGV0IGt1YmUtc2NoZWR1bGVyIGFjdCBvbiB0aG9zZS4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM0NTY0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM0NTY0KSwgW0AmIzgyMDM7bWFjc2tvXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vbWFjc2tvKSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXBwcywgQ0xJLCBFdGNkLCBTY2hlZHVsaW5nIGFuZCBUZXN0aW5nXQotIEludHJvZHVjZSB0aGUgYWxwaGEgTXV0YWJsZVNjaGVkdWxpbmdEaXJlY3RpdmVzRm9yU3VzcGVuZGVkSm9icyBmZWF0dXJlIGdhdGUgKGRpc2FibGVkIGJ5IGRlZmF1bHQpIHdoaWNoOgogIDEuIGFsbG93cyB0byBtdXRhdGUgSm9iJ3Mgc2NoZWR1bGluZyBkaXJlY3RpdmVzIGZvciBzdXNwZW5kZWQgSm9icwogIDIuIG1ha2VzIHRoZSBKb2IgY29udHJvbGxlciB0byBjbGVhciB0aGUgc3RhdHVzLnN0YXJ0VGltZSBmaWVsZCBmb3Igc3VzcGVuZGVkIEpvYnMgKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM1MTA0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM1MTA0KSwgW0AmIzgyMDM7bWltb3dvXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vbWltb3dvKSkgXFtTSUcgQXBwcyBhbmQgVGVzdGluZ10KLSBJbnRyb2R1Y2VkIEdhbmdTY2hlZHVsaW5nIGt1YmUtc2NoZWR1bGVyIHBsdWdpbiB0byBlbmFibGUgImFsbC1vci1ub3RoaW5nIiBzY2hlZHVsaW5nLiBXb3JrbG9hZCBBUEkgaW4gc2NoZWR1bGluZy5rOHMuaW8vdjFhbHBoYTEgaXMgdXNlZCB0byBleHByZXNzIHRoZSBkZXNpcmVkIHBvbGljeS4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM0NzIyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM0NzIyKSwgW0AmIzgyMDM7bWFjc2tvXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vbWFjc2tvKSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXBwcywgQXV0aCwgQ0xJLCBFdGNkLCBTY2hlZHVsaW5nIGFuZCBUZXN0aW5nXQotIFBWIG5vZGUgYWZmaW5pdHkgaXMgbm93IG11dGFibGUuIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzNDMzOV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzNDMzOSksIFtAJiM4MjAzO2h1d3c5OF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2h1d3c5OCkpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEFwcHMgYW5kIE5vZGVdCi0gUmVzb3VyY2VRdW90YSBub3cgY291bnRzIGRldmljZSBjbGFzcyByZXF1ZXN0cyB3aXRoaW4gYSBSZXNvdXJjZUNsYWltIG9iamVjdCBhcyBjb25zdW1pbmcgdHdvIGFkZGl0aW9uYWwgcXVvdGFzIHdoZW4gdGhlIERSQUV4dGVuZGVkUmVzb3VyY2UgZmVhdHVyZSBpcyBlbmFibGVkOgogIC0gYHJlcXVlc3RzLmRldmljZWNsYXNzLnJlc291cmNlLms4cy5pby88ZGV2aWNlY2xhc3M+YCB3aXRoIGEgcXVhbnRpdHkgZXF1YWwgdG8gdGhlIHdvcnN0IGNhc2UgY291bnQgb2YgZGV2aWNlcyByZXF1ZXN0ZWQKICAtIHJlcXVlc3RzIGZvciBkZXZpY2UgY2xhc3NlcyB0aGF0IG1hcCB0byBhbiBleHRlbmRlZCByZXNvdXJjZSBjb25zdW1lIGByZXF1ZXN0cy48ZXh0ZW5kZWQgcmVzb3VyY2UgbmFtZT5gIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzNDIxMF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzNDIxMCksIFtAJiM4MjAzO3lsaWFvZ10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3lsaWFvZykpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEFwcHMsIE5vZGUsIFNjaGVkdWxpbmcgYW5kIFRlc3RpbmddCi0gVGhlIERSQSBkZXZpY2UgdGFpbnRzIGFuZCB0b2xlcmF0aW9uIGZlYXR1cmUgbm93IGhhcyBhIHNlcGFyYXRlIGZlYXR1cmUgZ2F0ZSwgRFJBRGV2aWNlVGFpbnRSdWxlcywgd2hpY2ggY29udHJvbHMgd2hldGhlciBzdXBwb3J0IGZvciBEZXZpY2VUYWludFJ1bGVzIGlzIGVuYWJsZWQuIEl0IGlzIHBvc3NpYmxlIHRvIGRpc2FibGUgdGhhdCBhbmQga2VlcCBEUkFEZXZpY2VUYWludHMgZW5hYmxlZCwgaW4gd2hpY2ggY2FzZSB0YWludGluZyBieSBEUkEgZHJpdmVycyB0aHJvdWdoIFJlc291cmNlU2xpY2VzIGNvbnRpbnVlcyB0byB3b3JrLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzUwNjhdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzUwNjgpLCBbQCYjODIwMztwb2hseV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3BvaGx5KSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXBwcywgQXV0aCwgTm9kZSwgU2NoZWR1bGluZyBhbmQgVGVzdGluZ10KLSBUaGUgSW1hZ2VQdWxsSW50ZW50IGFuZCBJbWFnZVB1bGxlZFJlY29yZCBvYmplY3RzIHVzZWQgYnkga3ViZWxldCB0byBzdG9yZSBpbmZvcm1hdGlvbiBhYm91dCBpbWFnZSBwdWxscyBoYXZlIGJlZW4gbW92ZWQgdG8gdGhlIHYxYmV0YTEgQVBJIHZlcnNpb24uIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzMjU3OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzMjU3OSksIFtAJiM4MjAzO3N0bGF6XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vc3RsYXopKSBcW1NJRyBBdXRoIGFuZCBOb2RlXQotIFRoZSBLdWJlbGV0RW5zdXJlU2VjcmV0UHVsbGVkSW1hZ2VzIGZlYXR1cmUgaXMgbm93IGJldGEgYW5kIGVuYWJsZWQgYnkgZGVmYXVsdC4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM1MjI4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM1MjI4KSwgW0AmIzgyMDM7YXJhbWFzZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FyYW1hc2UpKSBcW1NJRyBBdXRoLCBOb2RlIGFuZCBUZXN0aW5nXQotIFRoaXMgY2hhbmdlIGFkZHMgYSBuZXcgYWxwaGEgZmVhdHVyZSBOb2RlIERlY2xhcmVkIEZlYXR1cmVzLCB3aGljaCBpbmNsdWRlczoKICAtIEEgbmV3IGBOb2RlLlN0YXR1cy5EZWNsYXJlZEZlYXR1cmVzYCBmaWVsZCBmb3IgS3ViZWxldCB0byBwdWJsaXNoIG5vZGUtc3BlY2lmaWMgZmVhdHVyZXMuCiAgLSBBIGxpYnJhcnkgaW4gYGNvbXBvbmVudC1oZWxwZXJzYCBmb3IgZmVhdHVyZSByZWdpc3RyYXRpb24gYW5kIGluZmVyZW5jZS4KICAtIEEgc2NoZWR1bGVyIHBsdWdpbiAoYE5vZGVEZWNsYXJlZEZlYXR1cmVzYCkgc2NoZWR1bGVyIHBsdWdpbiB0byBtYXRjaCBwb2RzIHdpdGggbm9kZXMgdGhhdCBwcm92aWRlIHRoZWlyIHJlcXVpcmVkIGZlYXR1cmVzLgogIC0gQW4gYWRtaXNzaW9uIHBsdWdpbiAoYE5vZGVEZWNsYXJlZEZlYXR1cmVWYWxpZGF0b3JgKSB0byB2YWxpZGF0ZSBwb2QgdXBkYXRlcyBhZ2FpbnN0IGEgbm9kZSdzIGRlY2xhcmVkIGZlYXR1cmVzLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzMzODldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzMzODkpLCBbQCYjODIwMztwcmF2azAzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcHJhdmswMykpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEFwcHMsIE5vZGUsIFJlbGVhc2UsIFNjaGVkdWxpbmcgYW5kIFRlc3RpbmddCi0gVGhpcyBjaGFuZ2UgYWxsb3dzIEluIFBsYWNlIFJlc2l6ZSBvZiBQb2QgTGV2ZWwgUmVzb3VyY2VzCiAgLSBBZGQgUmVzb3VyY2VzIGluIFBvZFN0YXR1cyB0byBjYXB0dXJlIHJlc291cmNlcyBzZXQgYXQgcG9kLWxldmVsIGNncm91cAogIC0gQWRkIEFsbG9jYXRlZFJlc291cmNlcyBpbiBQb2RTdGF0dXMgdG8gY2FwdHVyZSByZXNvdXJjZXMgcmVxdWVzdGVkIGluIHRoZSBQb2RTcGVjIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzMjkxOV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzMjkxOSksIFtAJiM4MjAzO25kaXhpdGFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9uZGl4aXRhKSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXBwcywgQXJjaGl0ZWN0dXJlLCBBdXRoLCBDTEksIEluc3RydW1lbnRhdGlvbiwgTm9kZSwgU2NoZWR1bGluZyBhbmQgVGVzdGluZ10KLSBVcGRhdGVzIHRvIHRoZSBQYXJ0aXRpb25hYmxlIERldmljZXMgZmVhdHVyZSB3aGljaCBhbGxvd3MgZm9yIHJlZmVyZW5jaW5nIGNvdW50ZXIgc2V0cyBhY3Jvc3MgZGlmZmVyZW50IFJlc291cmNlU2xpY2VzIHdpdGhpbiB0aGUgc2FtZSByZXNvdXJjZSBwb29sLgoKICBEZXZpY2VzIGZyb20gaW5jb21wbGV0ZSBwb29scyBhcmUgbm8gbG9uZ2VyIGNvbnNpZGVyZWQgZm9yIGFsbG9jYXRpb24uCgogIFRoaXMgY29udGFpbnMgYmFja3dhcmRzIGluY29tcGF0aWJsZSBjaGFuZ2VzIHRvIHRoZSBQYXJ0aXRpb25hYmxlIERldmljZXMgYWxwaGEgZmVhdHVyZSwgc28gYW55IFJlc291cmNlU2xpY2VzIHRoYXQgdXNlcyB0aGUgZmVhdHVyZSBzaG91bGQgYmUgcmVtb3ZlZCBwcmlvciB0byB1cGdyYWRpbmcgb3IgZG93bmdyYWRpbmcgYmV0d2VlbiAxLjM0IGFuZCAxLjM1LiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzQxODldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzQxODkpLCBbQCYjODIwMzttb3J0ZW50XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vbW9ydGVudCkpIFxbU0lHIEFQSSBNYWNoaW5lcnksIE5vZGUsIFNjaGVkdWxpbmcgYW5kIFRlc3RpbmddCi0gQWRkIE9ic2VydmVkR2VuZXJhdGlvbiB0byBDdXN0b21SZXNvdXJjZURlZmluaXRpb24gQ29uZGl0aW9ucy4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM0OTg0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM0OTg0KSwgW0AmIzgyMDM7bWljaGFlbGFzcF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL21pY2hhZWxhc3ApKSBcW1NJRyBBUEkgTWFjaGluZXJ5XQotIEFkZCBTdG9yYWdlVmVyc2lvbk1pZ3JhdGlvbiB2MWJldGExIGFwaSBhbmQgcmVtb3ZlIHRoZSB2MWFscGhhIEFQSS4KCiAgQW55IHVzZSBvZiB0aGUgdjFhbHBoYTEgYXBpIGlzIG5vIGxvbmdlciBzdXBwb3J0ZWQgYW5kCiAgdXNlcnMgbXVzdCByZW1vdmUgYW55IHYxYWxwaGExIHJlc291cmNlcyBwcmlvciB0byB1cGdyYWRlLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzQ3ODRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzQ3ODQpLCBbQCYjODIwMzttaWNoYWVsYXNwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vbWljaGFlbGFzcCkpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEFwcHMsIEF1dGgsIEV0Y2QgYW5kIFRlc3RpbmddCi0gQ1NJIGRyaXZlcnMgY2FuIG5vdyBvcHQtaW4gdG8gcmVjZWl2ZSBzZXJ2aWNlIGFjY291bnQgdG9rZW5zIHZpYSB0aGUgc2VjcmV0cyBmaWVsZCBpbnN0ZWFkIG9mIHZvbHVtZSBjb250ZXh0IGJ5IHNldHRpbmcgYHNwZWMuc2VydmljZUFjY291bnRUb2tlbkluU2VjcmV0czogdHJ1ZWAgaW4gdGhlIENTSURyaXZlciBvYmplY3QuIFRoaXMgcHJldmVudHMgdG9rZW5zIGZyb20gYmVpbmcgZXhwb3NlZCBpbiBsb2dzIGFuZCBvdGhlciBvdXRwdXRzLiBUaGUgZmVhdHVyZSBpcyBnYXRlZCBieSB0aGUgYENTSVNlcnZpY2VBY2NvdW50VG9rZW5TZWNyZXRzYCBmZWF0dXJlIGdhdGUgKEJldGEgaW4gdjEuMzUpLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzQ4MjZdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzQ4MjYpLCBbQCYjODIwMzthcmFtYXNlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYXJhbWFzZSkpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEF1dGgsIFN0b3JhZ2UgYW5kIFRlc3RpbmddCi0gRFJBIGRldmljZSB0YWludHM6IERldmljZVRhaW50UnVsZSBzdGF0dXMgcHJvdmlkZWQgaW5mb3JtYXRpb24gYWJvdXQgdGhlIHJ1bGUsIGluIHBhcnRpY3VsYXIgd2hldGhlciBwb2RzIHN0aWxsIG5lZWQgdG8gYmUgZXZpY3RlZCAoIkV2aWN0aW9uSW5Qcm9ncmVzcyIgY29uZGl0aW9uKS4gVGhlIG5ldyAiTm9uZSIgZWZmZWN0IGNhbiBiZSB1c2VkIHRvIHByZXZpZXcgd2hhdCBhIERldmljZVRhaW50UnVsZSB3b3VsZCBkbyBpZiBpdCB1c2VkIHRoZSAiTm9FeGVjdXRlIiBlZmZlY3QgYW5kIHRvIHRhaW50IGRldmljZXMgKCJkZXZpY2UgaGVhbHRoIikgd2l0aG91dCBpbW1lZGlhdGVseSBhZmZlY3Rpbmcgc2NoZWR1bGluZyBvciBydW5uaW5nIHBvZHMuIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzNDE1Ml0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzNDE1MiksIFtAJiM4MjAzO3BvaGx5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcG9obHkpKSBcW1NJRyBBUEkgTWFjaGluZXJ5LCBBcHBzLCBBdXRoLCBOb2RlLCBSZWxlYXNlLCBTY2hlZHVsaW5nIGFuZCBUZXN0aW5nXQotIERSQTogdGhlIER5bmFtaWNSZXNvdXJjZUFsbG9jYXRpb24gZmVhdHVyZSBnYXRlIGZvciB0aGUgY29yZSBmdW5jdGlvbmFsaXR5IChHQSBpbiAxLjM0KSBpcyBub3cgbG9ja2VkIHRvIGVuYWJsZWQtYnktZGVmYXVsdCBhbmQgdGh1cyBjYW5ub3QgYmUgZGlzYWJsZWQgYW55bW9yZS4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM0NDUyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM0NDUyKSwgW0AmIzgyMDM7cG9obHldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9wb2hseSkpIFxbU0lHIEF1dGgsIE5vZGUsIFNjaGVkdWxpbmcgYW5kIFRlc3RpbmddCi0gRm9yYmlkIGFkZGluZyByZXNvdXJjZXMgb3RoZXIgdGhhbiBDUFUgJiBtZW1vcnkgb24gcG9kIHJlc2l6ZS4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM1MDg0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM1MDg0KSwgW0AmIzgyMDM7dGFsbGNsYWlyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vdGFsbGNsYWlyKSkgXFtTSUcgQXBwcywgTm9kZSBhbmQgVGVzdGluZ10KLSBJbXBsZW1lbnQgY29uc3RyYWluZWQgaW1wZXJzb25hdGlvbiBhcyBkZXNjcmliZWQgaW4gPGh0dHBzOi8va2VwLms4cy5pby81Mjg0PiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzQ4MDNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzQ4MDMpLCBbQCYjODIwMztlbmpdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9lbmopKSBcW1NJRyBBUEkgTWFjaGluZXJ5LCBBdXRoIGFuZCBUZXN0aW5nXQotIEludHJvZHVjZXMgYSBzdHJ1Y3R1cmVkIGFuZCB2ZXJzaW9uZWQgdjFhbHBoYTEgcmVzcG9uc2UgZm9yIGZsYWd6IChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzNDk5NV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzNDk5NSksIFtAJiM4MjAzO3lvbmdydWlsaW5dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS95b25ncnVpbGluKSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXJjaGl0ZWN0dXJlLCBJbnN0cnVtZW50YXRpb24sIE5ldHdvcmssIE5vZGUsIFNjaGVkdWxpbmcgYW5kIFRlc3RpbmddCi0gSW50cm9kdWNlcyBhIHN0cnVjdHVyZWQgYW5kIHZlcnNpb25lZCB2MWFscGhhMSByZXNwb25zZSBmb3Igc3RhdHVzeiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzQzMTNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzQzMTMpLCBbQCYjODIwMztyaWNoYWJhbmtlcl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3JpY2hhYmFua2VyKSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXJjaGl0ZWN0dXJlLCBJbnN0cnVtZW50YXRpb24sIE5ldHdvcmssIE5vZGUsIFNjaGVkdWxpbmcgYW5kIFRlc3RpbmddCi0gTmV3IGAtLW1pbi1jb21wYXRpYmlsaXR5LXZlcnNpb25gIGZsYWcgZm9yIGFwaXNlcnZlciwga2NtIGFuZCBrdWJlIHNjaGVkdWxlciAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzM5ODBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzM5ODApLCBbQCYjODIwMztzaXl1YW5mb3VuZGF0aW9uXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vc2l5dWFuZm91bmRhdGlvbikpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEFyY2hpdGVjdHVyZSwgQ2x1c3RlciBMaWZlY3ljbGUsIEV0Y2QsIFNjaGVkdWxpbmcgYW5kIFRlc3RpbmddCi0gUHJvbW90ZSBQb2RPYnNlcnZlZEdlbmVyYXRpb25UcmFja2luZyB0byBHQS4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM0OTQ4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM0OTQ4KSwgW0AmIzgyMDM7bmF0YXNoYTQxNTc1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vbmF0YXNoYTQxNTc1KSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXBwcywgTm9kZSwgU2NoZWR1bGluZyBhbmQgVGVzdGluZ10KLSBQcm9tb3RlZCBKb2IgTWFuYWdlZCBCeSB0byBnZW5lcmFsIGF2YWlsYWJpbGl0eS4gVGhlIGBKb2JNYW5hZ2VkQnlgIGZlYXR1cmUgZ2F0ZSBpcyBub3cgbG9ja2VkIHRvIHRydWUsIGFuZCB3aWxsIGJlIHJlbW92ZWQgaW4gYSBmdXR1cmUgcmVsZWFzZSBvZiBLdWJlcm5ldGVzLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzUwODBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzUwODApLCBbQCYjODIwMztkZWphbnplbGVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9kZWphbnplbGUpKSBcW1NJRyBBUEkgTWFjaGluZXJ5LCBBcHBzIGFuZCBUZXN0aW5nXQotIFByb21vdGVkIFJlcGxpY2FTZXQgYW5kIERlcGxveW1lbnQgYC5zdGF0dXMudGVybWluYXRpbmdSZXBsaWNhc2AgdHJhY2tpbmcgdG8gYmV0YS4gVGhlIGBEZXBsb3ltZW50UmVwbGljYVNldFRlcm1pbmF0aW5nUmVwbGljYXNgIGZlYXR1cmUgZ2F0ZSBpcyBub3cgZW5hYmxlZCBieSBkZWZhdWx0LiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzMwODddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzMwODcpLCBbQCYjODIwMzthdGlyYXRyZWVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hdGlyYXRyZWUpKSBcW1NJRyBBUEkgTWFjaGluZXJ5LCBBcHBzIGFuZCBUZXN0aW5nXQotIFNjaGVkdWxlcjogYWRkZWQgYSBuZXcgYGJpbmRpbmdUaW1lb3V0YCBhcmd1bWVudCB0byB0aGUgRHluYW1pY1Jlc291cmNlcyBwbHVnaW4gY29uZmlndXJhdGlvbi4KICBUaGlzIGFsbG93cyBjdXN0b21pemluZyB0aGUgd2FpdCBkdXJhdGlvbiBpbiBQcmVCaW5kIGZvciBkZXZpY2UgYmluZGluZyBjb25kaXRpb25zLgogIERlZmF1bHRzIHRvIDEwIG1pbnV0ZXMgd2hlbiBEUkFEZXZpY2VCaW5kaW5nQ29uZGl0aW9ucyBhbmQgRFJBUmVzb3VyY2VDbGFpbURldmljZVN0YXR1cyBhcmUgYm90aCBlbmFibGVkLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzQ5MDVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzQ5MDUpLCBbQCYjODIwMztmai1uYWppXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZmotbmFqaSkpIFxbU0lHIE5vZGUgYW5kIFNjaGVkdWxpbmddCi0gVGhlIFBvZCBDZXJ0aWZpY2F0ZXMgZmVhdHVyZSBpcyBtb3ZpbmcgdG8gYmV0YS4gVGhlIFBvZENlcnRpZmljYXRlUmVxdWVzdCBmZWF0dXJlIGdhdGUgaXMgc3RpbGwgc2V0IGZhbHNlIGJ5IGRlZmF1bHQuIFRvIHVzZSB0aGUgZmVhdHVyZSwgdXNlcnMgd2lsbCBuZWVkIHRvIGVuYWJsZSB0aGUgY2VydGlmaWNhdGVzIEFQSSBncm91cHMgaW4gdjFiZXRhMSBhbmQgZW5hYmxlIHRoZSBmZWF0dXJlIGdhdGUgUG9kQ2VydGlmaWNhdGVSZXF1ZXN0LiBBIG5ldyBmaWVsZCBVc2VyQW5ub3RhdGlvbnMgaXMgYWRkZWQgdG8gdGhlIFBvZENlcnRpZmljYXRlUHJvamVjdGlvbiBBUEkgYW5kIHRoZSBjb3JyZXNwb25kaW5nIFVudmVyaWZpZWRVc2VyQW5ub3RhdGlvbnMgaXMgYWRkZWQgdG8gdGhlIFBvZENlcnRpZmljYXRlUmVxdWVzdCBBUEkuIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzNDYyNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzNDYyNCksIFtAJiM4MjAzO3l0Mjk4NV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3l0Mjk4NSkpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEFwcHMsIEF1dGgsIEV0Y2QsIEluc3RydW1lbnRhdGlvbiwgTm9kZSBhbmQgVGVzdGluZ10KLSBUaGUgU3RyaWN0Q29zdEVuZm9yY2VtZW50Rm9yVkFQIGFuZCBTdHJpY3RDb3N0RW5mb3JjZW1lbnRGb3JXZWJob29rcyBmZWF0dXJlIGdhdGVzLCBsb2NrZWQgb24gc2luY2UgMS4zMiwgaGF2ZSBiZWVuIHJlbW92ZWQgKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTM0OTk0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTM0OTk0KSwgW0AmIzgyMDM7bGlnZ2l0dF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2xpZ2dpdHQpKSBcW1NJRyBBUEkgTWFjaGluZXJ5LCBBdXRoLCBOb2RlIGFuZCBUZXN0aW5nXQotIFRoZSBgUHJlZmVyU2FtZVpvbmVgIGFuZCBgUHJlZmVyU2FtZU5vZGVgIHZhbHVlcyBmb3IgU2VydmljZSdzCiAgYHRyYWZmaWNEaXN0cmlidXRpb25gIGZpZWxkIGFyZSBub3cgR0EuIFRoZSBvbGQgdmFsdWUgYFByZWZlckNsb3NlYCBpcyBub3cKICBkZXByZWNhdGVkIGluIGZhdm9yIG9mIHRoZSBtb3JlLWV4cGxpY2l0IGBQcmVmZXJTYW1lWm9uZWAuIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzNDQ1N10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzNDQ1NyksIFtAJiM4MjAzO2RhbndpbnNoaXBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9kYW53aW5zaGlwKSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXBwcywgTmV0d29yayBhbmQgVGVzdGluZ10KLSBLdWJlLWFwaXNlcnZlcjogZml4IGEgcG9zc2libGUgcGFuaWMgdmFsaWRhdGluZyBhIGN1c3RvbSByZXNvdXJjZSB3aG9zZSBDdXN0b21SZXNvdXJjZURlZmluaXRpb24gaW5kaWNhdGVzIGEgc3RhdHVzIHN1YnJlc291cmNlIGV4aXN0cywgYnV0IHdoaWNoIGRvZXMgbm90IGRlZmluZSBhIGBzdGF0dXNgIHByb3BlcnR5IGluIHRoZSBgb3BlbkFQSVYzU2NoZW1hYCAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzM3MjFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzM3MjEpLCBbQCYjODIwMztmdXNpZGFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9mdXNpZGEpKSBcW1NJRyBBUEkgTWFjaGluZXJ5LCBBcHBzLCBBcmNoaXRlY3R1cmUsIEF1dGgsIEF1dG9zY2FsaW5nLCBDTEksIENsb3VkIFByb3ZpZGVyLCBDbHVzdGVyIExpZmVjeWNsZSwgRXRjZCwgSW5zdHJ1bWVudGF0aW9uLCBOZXR3b3JrLCBOb2RlLCBSZWxlYXNlLCBTY2hlZHVsaW5nLCBTdG9yYWdlIGFuZCBUZXN0aW5nXQotIEt1YmVybmV0ZXMgQVBJIEdvIHR5cGVzIHJlbW92ZWQgcnVudGltZSB1c2Ugb2YgdGhlIGdpdGh1Yi5jb20vZ29nby9wcm90b2J1ZiBsaWJyYXJ5LCBhbmQgYXJlIG5vIGxvbmdlciByZWdpc3RlcmVkIGludG8gdGhlIGdsb2JhbCBnb2dvIHR5cGUgcmVnaXN0cnkuIEt1YmVybmV0ZXMgQVBJIEdvIHR5cGVzIHdlcmUgbm90IHN1aXRhYmxlIGZvciB1c2Ugd2l0aCB0aGUgZ29vZ2xlLmdvbGFuZy5vcmcvcHJvdG9idWYgbGlicmFyeSwgYW5kIG5vIGxvbmdlciBpbXBsZW1lbnQgYFByb3RvTWVzc2FnZSgpYCBieSBkZWZhdWx0IHRvIGF2b2lkIGFjY2lkZW50YWwgaW5jb21wYXRpYmxlIHVzZS4gSWYgcmVtb3ZhbCBvZiB0aGVzZSBtYXJrZXIgbWV0aG9kcyBpbXBhY3RzIHlvdXIgdXNlLCBpdCBjYW4gYmUgcmUtZW5hYmxlZCBmb3Igb25lIG1vcmUgcmVsZWFzZSB3aXRoIGEgYGt1YmVybmV0ZXNfcHJvdG9tZXNzYWdlX29uZV9tb3JlX3JlbGVhc2VgIGJ1aWxkIHRhZywgYnV0IHdpbGwgYmUgcmVtb3ZlZCBpbiAxLjM2LiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzQyNTZdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzQyNTYpLCBbQCYjODIwMztsaWdnaXR0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vbGlnZ2l0dCkpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEFwcHMsIEFyY2hpdGVjdHVyZSwgQXV0aCwgQ0xJLCBDbHVzdGVyIExpZmVjeWNsZSwgSW5zdHJ1bWVudGF0aW9uLCBOZXR3b3JrLCBOb2RlLCBTY2hlZHVsaW5nIGFuZCBTdG9yYWdlXQotIFByb21vdGVkIEhQQSBjb25maWd1cmFibGUgdG9sZXJhbmNlIHRvIGJldGEuIFRoZSBgSFBBQ29uZmlndXJhYmxlVG9sZXJhbmNlYCBmZWF0dXJlIGdhdGUgaXMgbm93IGVuYWJsZWQgYnkgZGVmYXVsdC4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTMzMTI4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTMzMTI4KSwgW0AmIzgyMDM7am0tZnJhbmNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9qbS1mcmFuYykpIFxbU0lHIEFQSSBNYWNoaW5lcnkgYW5kIEF1dG9zY2FsaW5nXQotIFRoZSBNYXhVbmF2YWlsYWJsZVN0YXRlZnVsU2V0IGZlYXR1cmUgaXMgbm93IGJldGEgYW5kIGVuYWJsZWQgYnkgZGVmYXVsdC4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTMzMTUzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTMzMTUzKSwgW0AmIzgyMDM7aGVsYXlvdHldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9oZWxheW90eSkpIFxbU0lHIEFQSSBNYWNoaW5lcnkgYW5kIEFwcHNdCi0gQWRkZWQgV2l0aE9yaWdpbiB3aXRoaW4gYXBpcy9jb3JlL3ZhbGlkYXRpb24gd2l0aCBhZGp1c3RlZCB0ZXN0cyAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzI4MjVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzI4MjUpLCBbQCYjODIwMztQYXRyaWNrTGFhYnNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9QYXRyaWNrTGFhYnMpKSBcW1NJRyBBcHBzXQotIENvbXBvbmVudC1iYXNlOiB2YWxpZGF0ZSB0aGF0IGxvZy1mbHVzaC1mcmVxdWVuY3kgaXMgcG9zaXRpdmUgYW5kIHJldHVybiBhbiBlcnJvciBpbnN0ZWFkIG9mIHBhbmljLWluZyAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzM1NDBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzM1NDApLCBbQCYjODIwMztCZW5UaGVFbGRlcl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL0JlblRoZUVsZGVyKSkgXFtTSUcgQXJjaGl0ZWN0dXJlLCBJbnN0cnVtZW50YXRpb24sIE5ldHdvcmsgYW5kIE5vZGVdCi0gRmVhdHVyZSBnYXRlIGRlcGVuZGVuY2llcyBhcmUgbm93IGV4cGxpY2l0LCBhbmQgdmFsaWRhdGVkIGF0IHN0YXJ0dXAuIEEgZmVhdHVyZSBjYW4gbm8gbG9uZ2VyIGJlIGVuYWJsZWQgaWYgaXQgZGVwZW5kcyBvbiBhIGRpc2FibGVkIGZlYXR1cmUuIEluIHBhcnRpY3VsYXIsIHRoaXMgbWVhbnMgdGhhdCBgQWxsQWxwaGE9dHJ1ZWAgd2lsbCBubyBsb25nZXIgd29yayB3aXRob3V0IGVuYWJsaW5nIGRpc2FibGVkLWJ5LWRlZmF1bHQgYmV0YSBmZWF0dXJlcyB0aGF0IGFyZSBkZXBlbmRlZCBvbiAoZWl0aGVyIHdpdGggYEFsbEJldGE9dHJ1ZWAgb3IgZXhwbGljaXRseSBlbnVtZXJhdGluZyB0aGUgZGlzYWJsZWQgZGVwZW5kZW5jaWVzKS4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTMzNjk3XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTMzNjk3KSwgW0AmIzgyMDM7dGFsbGNsYWlyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vdGFsbGNsYWlyKSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXJjaGl0ZWN0dXJlLCBDbHVzdGVyIExpZmVjeWNsZSBhbmQgTm9kZV0KLSBJbiB2ZXJzaW9uIDEuMzQsIHRoZSBQb2RPYnNlcnZlZEdlbmVyYXRpb25UcmFja2luZyBmZWF0dXJlIGhhcyBiZWVuIHVwZ3JhZGVkIHRvIGJldGEsIGFuZCB0aGUgZGVzY3JpcHRpb24gb2YgdGhlIGFscGhhIHZlcnNpb24gaW4gdGhlIG9wZW5hcGkgaGFzIGJlZW4gcmVtb3ZlZC4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTMzODgzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTMzODgzKSwgW0AmIzgyMDM7eWFuZ2p1bm15Zm0xOTIwODVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS95YW5nanVubXlmbTE5MjA4NSkpIFxbU0lHIEFwcHNdCi0gSW50cm9kdWNlIGEgbmV3IGRlY2xhcmF0aXZlIHZhbGlkYXRpb24gdGFnICtrOHM6Y3VzdG9tVW5pcXVlIHRvIGNvbnRyb2wgbGlzdG1hcCB1bmlxdWVuZXNzIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzNDI3OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzNDI3OSksIFtAJiM4MjAzO3lvbmdydWlsaW5dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS95b25ncnVpbGluKSkgXFtTSUcgQVBJIE1hY2hpbmVyeSBhbmQgQXV0aF0KLSBLdWJlLWFwaXNlcnZlcjogRml4ZWQgYSAxLjM0IHJlZ3Jlc3Npb24gaW4gQ3VzdG9tUmVzb3VyY2VEZWZpbml0aW9uIGhhbmRsaW5nIHRoYXQgaW5jb3JyZWN0bHkgd2FybmVkIGFib3V0IHVucmVjb2duaXplZCBmb3JtYXRzIG9uIG51bWJlciBhbmQgaW50ZWdlciBwcm9wZXJ0aWVzIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzMzg5Nl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzMzg5NiksIFtAJiM4MjAzO3lvbmdydWlsaW5dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS95b25ncnVpbGluKSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXBwcywgQXJjaGl0ZWN0dXJlLCBBdXRoLCBDTEksIENsb3VkIFByb3ZpZGVyLCBDb250cmlidXRvciBFeHBlcmllbmNlLCBOZXR3b3JrLCBOb2RlIGFuZCBTY2hlZHVsaW5nXQotIE9wZW5BUEkgbW9kZWwgcGFja2FnZXMgb2YgQVBJIHR5cGVzIGFyZSBnZW5lcmF0ZWQgaW50byBgenpfZ2VuZXJhdGVkLm1vZGVsX25hbWUuZ29gIGZpbGVzIGFuZCBhcmUgYWNjZXNzaWJsZSB1c2luZyB0aGUgYE9wZW5BUElNb2RlbE5hbWUoKWAgZnVuY3Rpb24uICBUaGlzIGFsbG93cyBBUEkgYXV0aG9ycyB0byBkZWNsYXJlIHRoZSBkZXNpcmVkIE9wZW5BUEkgbW9kZWwgcGFja2FnZXMgaW5zdGVhZCBvZiB1c2luZyB0aGUgZ28gcGFja2FnZSBwYXRoIG9mIEFQSSB0eXBlcy4gKFtrdWJlcm5ldGVzL2t1YmVybmV0ZXMjMTMxNzU1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL3B1bGwvMTMxNzU1KSwgW0AmIzgyMDM7anBiZXR6XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vanBiZXR6KSkgXFtTSUcgQVBJIE1hY2hpbmVyeSwgQXBwcywgQXJjaGl0ZWN0dXJlLCBBdXRoLCBDTEksIENsb3VkIFByb3ZpZGVyLCBDbHVzdGVyIExpZmVjeWNsZSwgSW5zdHJ1bWVudGF0aW9uLCBOZXR3b3JrLCBOb2RlLCBTY2hlZHVsaW5nLCBTdG9yYWdlIGFuZCBUZXN0aW5nXQotIFN1cHBvcnQgZm9yIGBrdWJlY3RsIGdldCAtbyBreWFtbGAgaXMgbm93IG9uIGJ5IGRlZmF1bHQuICBUbyBkaXNhYmxlIGl0LCBzZXQgYEtVQkVDVExfS1lBTUw9ZmFsc2VgLiAoW2t1YmVybmV0ZXMva3ViZXJuZXRlcyMxMzMzMjddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvcHVsbC8xMzMzMjcpLCBbQCYjODIwMzt0aG9ja2luXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vdGhvY2tpbikpIFxbU0lHIENMSV0KLSBUaGUgc3RvcmFnZSB2ZXJzaW9uIGZvciBNdXRhdGluZ0FkbWlzc2lvblBvbGljeSBpcyB1cGRhdGVkIHRvIHYxYmV0YTEuIChba3ViZXJuZXRlcy9rdWJlcm5ldGVzIzEzMzcxNV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9wdWxsLzEzMzcxNSksIFtAJiM4MjAzO2NpY2kzN10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpY2kzNykpIFxbU0lHIEFQSSBNYWNoaW5lcnksIEV0Y2QgYW5kIFRlc3RpbmddCgojIyMgW2B2MzQuMS4wYF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMtY2xpZW50L3B5dGhvbi9ibG9iL0hFQUQvQ0hBTkdFTE9HLm1kI3YzNDEwYjEpCgpbQ29tcGFyZSBTb3VyY2VdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzLWNsaWVudC9weXRob24vY29tcGFyZS92MzMuMS4wLi4udjM0LjEuMCkKCkt1YmVybmV0ZXMgQVBJIFZlcnNpb246IHYxLjM0LjEKCjwvZGV0YWlscz4KCi0tLQoKIyMjIENvbmZpZ3VyYXRpb24KCvCfk4UgKipTY2hlZHVsZSoqOiAoVVRDKQoKLSBCcmFuY2ggY3JlYXRpb24KICAtIEF0IGFueSB0aW1lIChubyBzY2hlZHVsZSBkZWZpbmVkKQotIEF1dG9tZXJnZQogIC0gQXQgYW55IHRpbWUgKG5vIHNjaGVkdWxlIGRlZmluZWQpCgrwn5qmICoqQXV0b21lcmdlKio6IERpc2FibGVkIGJ5IGNvbmZpZy4gUGxlYXNlIG1lcmdlIHRoaXMgbWFudWFsbHkgb25jZSB5b3UgYXJlIHNhdGlzZmllZC4KCuKZuyAqKlJlYmFzaW5nKio6IFdoZW5ldmVyIFBSIGJlY29tZXMgY29uZmxpY3RlZCwgb3IgeW91IHRpY2sgdGhlIHJlYmFzZS9yZXRyeSBjaGVja2JveC4KCvCflJUgKipJZ25vcmUqKjogQ2xvc2UgdGhpcyBQUiBhbmQgeW91IHdvbid0IGJlIHJlbWluZGVkIGFib3V0IHRoaXMgdXBkYXRlIGFnYWluLgoKLS0tCgogLSBbIF0gPCEtLSByZWJhc2UtY2hlY2sgLS0+SWYgeW91IHdhbnQgdG8gcmViYXNlL3JldHJ5IHRoaXMgUFIsIGNoZWNrIHRoaXMgYm94CgotLS0KClRoaXMgUFIgd2FzIGdlbmVyYXRlZCBieSBbTWVuZCBSZW5vdmF0ZV0oaHR0cHM6Ly9tZW5kLmlvL3Jlbm92YXRlLykuIFZpZXcgdGhlIFtyZXBvc2l0b3J5IGpvYiBsb2ddKGh0dHBzOi8vZGV2ZWxvcGVyLm1lbmQuaW8vZ2l0aHViL29zaXNtL2NvbnRhaW5lci1pbWFnZS1vc2lzbS1hbnNpYmxlKS4KPCEtLXJlbm92YXRlLWRlYnVnOmV5SmpjbVZoZEdWa1NXNVdaWElpT2lJME1pNDNOQzQxSWl3aWRYQmtZWFJsWkVsdVZtVnlJam9pTkRNdU1UZ3lMaklpTENKMFlYSm5aWFJDY21GdVkyZ2lPaUp0WVdsdUlpd2liR0ZpWld4eklqcGJJbkpsYm05MllYUmxJbDE5LS0+Cg==
      patchset: 6e48d1dc1035117b15ee5b14d185ab7b33ab1fed
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 58f24f5b479e15eb2d520850d27e3b1b6fc66aa6
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 038dd8b856c62af4433c8477c5cb3d0480847059
          trusted/project_2/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 0c74c57cedff2b36bb37ca68a5338d1c49991496
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 0c74c57cedff2b36bb37ca68a5338d1c49991496
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: 58f24f5b479e15eb2d520850d27e3b1b6fc66aa6
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 038dd8b856c62af4433c8477c5cb3d0480847059
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/ansible-lint/run.yaml
          roles:
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_0/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_0/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_1/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_1/openinfra-zuul-jobs/roles
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_2/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_2/zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/container-image-osism-ansible
        name: osism/container-image-osism-ansible
        short_name: container-image-osism-ansible
        src_dir: src/github.com/osism/container-image-osism-ansible
      projects:
        github.com/osism/container-image-osism-ansible:
          canonical_hostname: github.com
          canonical_name: github.com/osism/container-image-osism-ansible
          checkout: main
          checkout_description: zuul branch
          commit: 974a54a05f4a823d9a8b988c174f65320978192f
          name: osism/container-image-osism-ansible
          required: false
          short_name: container-image-osism-ansible
          src_dir: src/github.com/osism/container-image-osism-ansible
      ref: refs/pull/713/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
