all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    debian-bookworm:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe96:89ea
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: d2226155-97d7-42c6-93b2-507eee8c9093
        host_id: dc6e70e9c8a632db314ad904d19835ae509ec2b306670431b28f35fc
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe96:89ea
        label: debian-bookworm
        node_properties: {}
        private_ipv4: 10.128.7.66
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.193.13
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe96:89ea
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job yamllint explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#59>'
      - '<Job yamllint explicit: None implied: None source: osism/release/.zuul.yaml@main#2>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: c6cefcf35688435694fbb2c1daf11e40
      build_refs:
      - branch: main
        change: '1884'
        change_message: "chore(deps): update dependency k3s-io/k3s to v1.33.1+k3s1\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [k3s-io/k3s](https://redirect.github.com/k3s-io/k3s) | minor | `v1.30.10+k3s1`
          -> `v1.33.1+k3s1` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>k3s-io/k3s
          (k3s-io/k3s)</summary>\n\n### [`v1.33.1+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.33.1%2Bk3s1):
          v1.33.1+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.33.0+k3s1...v1.33.1+k3s1)\n\n<!--
          v1.33.1+k3s1 -->\n\nThis release updates Kubernetes to v1.33.1, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#changelog-since-v1330).\n\n####
          Changes since v1.33.0+k3s1:\n\n-   Backports for May [(#&#8203;12319)](https://redirect.github.com/k3s-io/k3s/pull/12319)\n-
          \  Backports for 2025-05 [(#&#8203;12325)](https://redirect.github.com/k3s-io/k3s/pull/12325)\n-
          \  Fix authorization-config/authentication-config handling [(#&#8203;12344)](https://redirect.github.com/k3s-io/k3s/pull/12344)\n-
          \  Fix secretsencrypt race conditions [(#&#8203;12355)](https://redirect.github.com/k3s-io/k3s/pull/12355)\n-
          \  Update to v1.33.1-k3s1 [(#&#8203;12360)](https://redirect.github.com/k3s-io/k3s/pull/12360)\n-
          \  Fix startup e2e test [(#&#8203;12370)](https://redirect.github.com/k3s-io/k3s/pull/12370)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.33.1](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#v1331)
          |\n| Kine | [v0.13.15](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.15)
          |\n| SQLite | [3.49.1](https://sqlite.org/releaselog/3\\_49\\_1.html) |\n|
          Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
          |\n| Containerd | [v2.0.5-k3s1](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.5-k3s1)
          |\n| Runc | [v1.2.6](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.6)
          |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v3.3.6](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.6)
          |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
          |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.33.0+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.33.0%2Bk3s1):
          v1.33.0+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.5+k3s1...v1.33.0+k3s1)\n\n<!--
          v1.33.0+k3s1 -->\n\nThis release updates Kubernetes to v1.33.0, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#changelog-since-v1324).\n\n#####
          Changes since v1.32.4+k3s1\n\n-   Build k3s overhaul [(#&#8203;12200)](https://redirect.github.com/k3s-io/k3s/pull/12200)\n-
          \  Fix sonobuoy conformance testing [(#&#8203;12214)](https://redirect.github.com/k3s-io/k3s/pull/12214)\n-
          \  Update k8s version to 1.33 [(#&#8203;12221)](https://redirect.github.com/k3s-io/k3s/pull/12221)\n-
          \  Remove ghcr from drone [(#&#8203;12229)](https://redirect.github.com/k3s-io/k3s/pull/12229)\n\n#####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.33.0](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#v1330)
          |\n| Kine | [v0.13.14](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.14)
          |\n| SQLite | [v3.49.2](https://sqlite.org/releaselog/3\\_49\\_2.html) |\n|
          Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
          |\n| Containerd | [v2.0.4-k3s4](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s4)
          |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
          |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v3.3.6](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.6)
          |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
          |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n##### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.32.5+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.5%2Bk3s1):
          v1.32.5+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.4+k3s1...v1.32.5+k3s1)\n\n<!--
          v1.32.5+k3s1 -->\n\nThis release updates Kubernetes to v1.32.5, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1324).\n\n#####
          Changes since v1.32.4+k3s1:\n\n-   Testing backports for 2025 May [(#&#8203;12233)](https://redirect.github.com/k3s-io/k3s/pull/12233)\n-
          \  Backports for May [(#&#8203;12318)](https://redirect.github.com/k3s-io/k3s/pull/12318)\n-
          \  Backports for 2025-05 [(#&#8203;12327)](https://redirect.github.com/k3s-io/k3s/pull/12327)\n-
          \  Fix authorization-config/authentication-config handling [(#&#8203;12345)](https://redirect.github.com/k3s-io/k3s/pull/12345)\n-
          \  Fix secretsencrypt race conditions [(#&#8203;12356)](https://redirect.github.com/k3s-io/k3s/pull/12356)\n-
          \  Fix startup e2e test [(#&#8203;12359)](https://redirect.github.com/k3s-io/k3s/pull/12359)\n-
          \  Update to v1.32.5-k3s1 and Go 1.23.8 [(#&#8203;12361)](https://redirect.github.com/k3s-io/k3s/pull/12361)\n\n#####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.32.5](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1325)
          |\n| Kine | [v0.13.15](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.15)
          |\n| SQLite | [3.49.1](https://sqlite.org/releaselog/3\\_49\\_1.html) |\n|
          Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
          |\n| Containerd | [v2.0.5-k3s1.32](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.5-k3s1.32)
          |\n| Runc | [v1.2.6](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.6)
          |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v3.3.6](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.6)
          |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
          |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n##### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.32.4+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.4%2Bk3s1):
          v1.32.4+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.3+k3s1...v1.32.4+k3s1)\n\n<!--
          v1.32.4+k3s1 -->\n\nThis release updates Kubernetes to v1.32.4, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1323).\n\n####
          Changes since v1.32.3+k3s1:\n\n-   Migrate to UrfaveCLI v2 [(#&#8203;12031)](https://redirect.github.com/k3s-io/k3s/pull/12031)\n-
          \  Improve readiness polling on node startup [(#&#8203;12038)](https://redirect.github.com/k3s-io/k3s/pull/12038)\n-
          \  Fix issue caused by default authorization-mode apiserver arg [(#&#8203;12042)](https://redirect.github.com/k3s-io/k3s/pull/12042)\n-
          \  Fix flakey etcd startup tests [(#&#8203;12050)](https://redirect.github.com/k3s-io/k3s/pull/12050)\n-
          \  Cleanup anonymous and named volumes for docker tests [(#&#8203;12079)](https://redirect.github.com/k3s-io/k3s/pull/12079)\n-
          \  Add support for secretbox encryption provider with the `k3s secrets-encrypt`
          command [(#&#8203;12067)](https://redirect.github.com/k3s-io/k3s/pull/12067)\n
          \   -   Users can now configure secrets encryption to use `secretbox` provider
          by setting the `secrets-encryption-provider` flag.\n-   Add error in certificate
          check [(#&#8203;12098)](https://redirect.github.com/k3s-io/k3s/pull/12098)\n-
          \  Backports for 2025-04 [(#&#8203;12104)](https://redirect.github.com/k3s-io/k3s/pull/12104)\n-
          \  Bump kine for nats-server/v2 CVE-2025-30215 [(#&#8203;12141)](https://redirect.github.com/k3s-io/k3s/pull/12141)\n-
          \  Drone Test Split and Reduction [(#&#8203;12151)](https://redirect.github.com/k3s-io/k3s/pull/12151)\n-
          \  More backports for 2025-04 [(#&#8203;12167)](https://redirect.github.com/k3s-io/k3s/pull/12167)\n-
          \  Fix handler panic when bootstrapper returns empty peer list [(#&#8203;12178)](https://redirect.github.com/k3s-io/k3s/pull/12178)\n-
          \  Bump traefik to v3.3.6 [(#&#8203;12189)](https://redirect.github.com/k3s-io/k3s/pull/12189)\n-
          \  Update to v1.32.4-k3s1 and Go 1.23.6 [(#&#8203;12209)](https://redirect.github.com/k3s-io/k3s/pull/12209)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.32.4](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1324)
          |\n| Kine | [v0.13.14](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.14)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
          |\n| Containerd | [v2.0.4-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s2)
          |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
          |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v3.3.6](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.6)
          |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
          |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.32.3+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.3%2Bk3s1):
          v1.32.3+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.2+k3s1...v1.32.3+k3s1)\n\n<!--
          v1.32.3+k3s1 -->\n\nThis release updates Kubernetes to v1.32.3, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1322).\n\n####
          Changes since v1.32.2+k3s1:\n\n-   Revert \"Add ability to pass configuration
          options to flannel backend\" [(#&#8203;11867)](https://redirect.github.com/k3s-io/k3s/pull/11867)\n-
          \  Backport Docker + E2E testing PRs for 2025 March [(#&#8203;11888)](https://redirect.github.com/k3s-io/k3s/pull/11888)\n-
          \  Backports for 2025-03 [(#&#8203;11919)](https://redirect.github.com/k3s-io/k3s/pull/11919)\n-
          \  Bump klipper-lb image to v0.4.13 [(#&#8203;11930)](https://redirect.github.com/k3s-io/k3s/pull/11930)\n-
          \  Fix syncing empty list of apiserver addresses during initial startup
          [(#&#8203;11953)](https://redirect.github.com/k3s-io/k3s/pull/11953)\n-
          \  Update to v1.32.3-k3s1 [(#&#8203;11960)](https://redirect.github.com/k3s-io/k3s/pull/11960)\n-
          \  Update Kubernetes to v1.32.3-k3s2 [(#&#8203;11968)](https://redirect.github.com/k3s-io/k3s/pull/11968)\n-
          \  Fix skew test for release candidates [(#&#8203;11991)](https://redirect.github.com/k3s-io/k3s/pull/11991)\n-
          \  Bump to containerd v2.0.4 [(#&#8203;12003)](https://redirect.github.com/k3s-io/k3s/pull/12003)\n-
          \  Fix upgrade test container version [(#&#8203;12000)](https://redirect.github.com/k3s-io/k3s/pull/12000)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.32.3](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1323)
          |\n| Kine | [v0.13.9](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.9)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.19-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.19-k3s1)
          |\n| Containerd | [v2.0.4-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s2)
          |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v3.3.2](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.2)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.6](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.6)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.32.2+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.2%2Bk3s1):
          v1.32.2+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.1+k3s1...v1.32.2+k3s1)\n\n<!--
          v1.32.2+k3s1 -->\n\nThis release updates Kubernetes to v1.32.2, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1321).\n\n####
          Changes since v1.32.1+k3s1:\n\n-   Correct the k3s token command help [(#&#8203;11686)](https://redirect.github.com/k3s-io/k3s/pull/11686)\n-
          \  Jan 2025 Testing Overhaul, E2E to Docker Migration, [(#&#8203;11723)](https://redirect.github.com/k3s-io/k3s/pull/11723)\n-
          \  Backports for 2025-02 [(#&#8203;11730)](https://redirect.github.com/k3s-io/k3s/pull/11730)\n
          \   -   Align the CLI-reported default `--etcd-snapshot-dir` value with
          the actual one (`server`, `etcd-snapshot` commands).\n    -   Disable s3
          transport transparent compression/decompression\n    -   Etcd snapshot backup/restore
          now supports loading s3 credentials from an AWS SDK shared credentials file.\n
          \   -   Bump klipper-helm to v0.9.4\n    -   Bump klipper-lb to v0.4.10\n
          \   -   Bump spegel to v0.0.30\n    -   Bump local-path-provisioner to v0.0.31\n
          \   -   Bump kine to v0.13.8\n    -   Bump etcd to v3.5.18\n    -   Bump
          traefik to 3.3.2\n    -   Containerd has been bumped to version 2.0.\n    -
          \  The containerd config templates for linux and windows have been consolidated
          and are no longer os-specific.\n    -   Containerd 2.0 uses a new config
          file schema. If you are using a custom containerd config template, you should
          migrate your template to `config-v3.toml.tmpl` to switch to the new version.
          See the [upstream documentation](https://redirect.github.com/containerd/containerd/blob/release/2.0/docs/cri/config.md)
          for more information.\n-   Update to v1.32.2-k3s1 and Go 1.23.6 [(#&#8203;11788)](https://redirect.github.com/k3s-io/k3s/pull/11788)\n-
          \  Render CNI dir config whenever vars are set [(#&#8203;11819)](https://redirect.github.com/k3s-io/k3s/pull/11819)\n-
          \  Bump containerd for go-cni deadlock fix [(#&#8203;11833)](https://redirect.github.com/k3s-io/k3s/pull/11833)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.32.2](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1322)
          |\n| Kine | [v0.13.9](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.9)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.18-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.18-k3s1)
          |\n| Containerd | [v2.0.2-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.2-k3s2)
          |\n| Runc | [v1.2.4-k3s1](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.4-k3s1)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v3.3.2](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.2)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.6](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.6)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.32.1+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.1%2Bk3s1):
          v1.32.1+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.0+k3s1...v1.32.1+k3s1)\n\n<!--
          v1.32.1+k3s1 -->\n\nThis release updates Kubernetes to v1.32.1, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1320).\n\n####
          Changes since v1.32.0+k3s1:\n\n-   Backports for 2025-01 [(#&#8203;11565)](https://redirect.github.com/k3s-io/k3s/pull/11565)\n-
          \  Add auto import images for containerd image store [(#&#8203;11563)](https://redirect.github.com/k3s-io/k3s/pull/11563)\n-
          \  2025 January Backports [(#&#8203;11583)](https://redirect.github.com/k3s-io/k3s/pull/11583)\n-
          \  Fix local password validation when bind-address is set [(#&#8203;11610)](https://redirect.github.com/k3s-io/k3s/pull/11610)\n-
          \  Update to v1.32.1-k3s1 and Go 1.23.4 [(#&#8203;11620)](https://redirect.github.com/k3s-io/k3s/pull/11620)\n-
          \  Remove local restriction for deferred node password validation [(#&#8203;11648)](https://redirect.github.com/k3s-io/k3s/pull/11648)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.32.1](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)
          |\n| Kine | [v0.13.5](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.5)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.16-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.16-k3s1)
          |\n| Containerd | [v1.7.23-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v1.7.23-k3s2)
          |\n| Runc | [v1.2.4-k3s1](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.4-k3s1)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.18](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.18)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.5](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.5)
          |\n| Local-path-provisioner | [v0.0.30](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.30)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n####
          What's Changed\n\n-   \\[release-1.32] Remove local restriction for deferred
          node password validation by [@&#8203;brandond](https://redirect.github.com/brandond)
          in [https://github.com/k3s-io/k3s/pull/11648](https://redirect.github.com/k3s-io/k3s/pull/11648)\n\n**Full
          Changelog**: https://github.com/k3s-io/k3s/compare/v1.32.1-rc1+k3s1...v1.32.1+k3s1\n\n###
          [`v1.32.0+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.0%2Bk3s1):
          v1.32.0+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.9+k3s1...v1.32.0+k3s1)\n\n<!--
          v1.32.0+k3s1 -->\n\nThis release is K3S's first in the v1.32 line. This
          release updates Kubernetes to v1.32.0.\n\nKubernetes 1.32 moves the `AuthorizeNodeWithSelectors`
          feature gate to Beta and on by default. See [KEP-4601](https://redirect.github.com/kubernetes/enhancements/blob/master/keps/sig-auth/4601-authorize-with-selectors/README.md)
          for more information.\n\nThis feature-gate breaks some of the RBAC that
          previous releases of K3s relied upon. The January releases of K3s v1.29,
          v1.30, and v1.31 will contain backported fixes. Until then, you must set
          `--kube-apiserver-arg=feature-gates=AuthorizeNodeWithSelectors=false` on
          server nodes, if you want to mix K3s v1.32 nodes with nodes of other versions
          (within the limits of what is supported by the [Kubernetes Version Skew
          Policy](https://kubernetes.io/releases/version-skew-policy/)).\n\nFor more
          details on what's new, see the [Kubernetes release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1310).\n\n####
          Changes since v1.31.4+k3s1:\n\n-   Fix rotateca validation failures when
          not touching default self-signed CAs [(#&#8203;10710)](https://redirect.github.com/k3s-io/k3s/pull/10710)\n-
          \  Bump runc to v1.1.13 [(#&#8203;10737)](https://redirect.github.com/k3s-io/k3s/pull/10737)\n-
          \  Update stable channel to v1.30.4+k3s1 [(#&#8203;10739)](https://redirect.github.com/k3s-io/k3s/pull/10739)\n-
          \  Fix deploy latest commit on E2E tests [(#&#8203;10725)](https://redirect.github.com/k3s-io/k3s/pull/10725)\n-
          \  Remove secrets encryption controller [(#&#8203;10612)](https://redirect.github.com/k3s-io/k3s/pull/10612)\n-
          \  Update kubernetes to v1.31.0-k3s3 [(#&#8203;10764)](https://redirect.github.com/k3s-io/k3s/pull/10764)\n-
          \  Bump traefik to v2.11.8 [(#&#8203;10779)](https://redirect.github.com/k3s-io/k3s/pull/10779)\n-
          \  Update coredns to 1.11.3 and metrics-server to 0.7.2 [(#&#8203;10760)](https://redirect.github.com/k3s-io/k3s/pull/10760)\n-
          \  Add trivy scanning to PR reports [(#&#8203;10758)](https://redirect.github.com/k3s-io/k3s/pull/10758)\n-
          \  Cover edge case when on new minor release for E2E upgrade test [(#&#8203;10781)](https://redirect.github.com/k3s-io/k3s/pull/10781)\n-
          \  Bump aquasecurity/trivy-action from 0.20.0 to 0.24.0 [(#&#8203;10795)](https://redirect.github.com/k3s-io/k3s/pull/10795)\n-
          \  Update CNI plugins version [(#&#8203;10798)](https://redirect.github.com/k3s-io/k3s/pull/10798)\n-
          \  Bump Sonobuoy version [(#&#8203;10792)](https://redirect.github.com/k3s-io/k3s/pull/10792)\n-
          \  Fix /trivy action running against target branch instead of PR branch
          [(#&#8203;10824)](https://redirect.github.com/k3s-io/k3s/pull/10824)\n-
          \  Launch private registry with init [(#&#8203;10822)](https://redirect.github.com/k3s-io/k3s/pull/10822)\n-
          \  Add channel for v1.31 [(#&#8203;10826)](https://redirect.github.com/k3s-io/k3s/pull/10826)\n-
          \  Bump containerd to v1.7.21, runc to v1.1.14 [(#&#8203;10805)](https://redirect.github.com/k3s-io/k3s/pull/10805)\n-
          \  Bump helm-controller for skip-verify/plain-http and updated tolerations
          [(#&#8203;10832)](https://redirect.github.com/k3s-io/k3s/pull/10832)\n-
          \  Tag PR image build as latest before scanning [(#&#8203;10825)](https://redirect.github.com/k3s-io/k3s/pull/10825)\n-
          \  Only clean up containerd hosts dirs managed by k3s [(#&#8203;10823)](https://redirect.github.com/k3s-io/k3s/pull/10823)\n-
          \  Remove otelgrpc pinned dependency [(#&#8203;10799)](https://redirect.github.com/k3s-io/k3s/pull/10799)\n-
          \  Add node-internal-dns/node-external-dns address pass-through support
          [(#&#8203;10852)](https://redirect.github.com/k3s-io/k3s/pull/10852)\n-
          \  Give good report if no CVEs found in trivy [(#&#8203;10853)](https://redirect.github.com/k3s-io/k3s/pull/10853)\n-
          \  Fix hosts.toml header var [(#&#8203;10870)](https://redirect.github.com/k3s-io/k3s/pull/10870)\n-
          \  Bump Trivy version [(#&#8203;10863)](https://redirect.github.com/k3s-io/k3s/pull/10863)\n-
          \  Add int test for flannel-ipv6masq [(#&#8203;10440)](https://redirect.github.com/k3s-io/k3s/pull/10440)\n-
          \  Bump Trivy version [(#&#8203;10899)](https://redirect.github.com/k3s-io/k3s/pull/10899)\n-
          \  Update Kubernetes to v1.31.1-k3s3 [(#&#8203;10911)](https://redirect.github.com/k3s-io/k3s/pull/10911)\n-
          \  Add MariaDB to CI [(#&#8203;10724)](https://redirect.github.com/k3s-io/k3s/pull/10724)\n-
          \  Update stable channel tov1.30.5+k3s1 [(#&#8203;10921)](https://redirect.github.com/k3s-io/k3s/pull/10921)\n-
          \  Use static CNI bin dir [(#&#8203;10868)](https://redirect.github.com/k3s-io/k3s/pull/10868)\n
          \   -   K3s now uses a stable directory for CNI binaries, which simplifies
          the installation of additional CNI plugins.\n-   Breakup trivy scan and
          check comment author [(#&#8203;10935)](https://redirect.github.com/k3s-io/k3s/pull/10935)\n-
          \  Fix getMembershipForUserInOrg call [(#&#8203;10937)](https://redirect.github.com/k3s-io/k3s/pull/10937)\n-
          \  Check k3s-io organization membership not team membership for trivy scans
          [(#&#8203;10940)](https://redirect.github.com/k3s-io/k3s/pull/10940)\n-
          \  Bump kine to v0.13.0 [(#&#8203;10932)](https://redirect.github.com/k3s-io/k3s/pull/10932)\n
          \   -   Kine has been bumped to v0.13.0. This release includes changes that
          should enhance performance when using postgres as an external DB. The updated
          schema will be automatically used for new databases; to migrate to the new
          schema on existing databases, K3s can be started with the `KINE_SCHEMA_MIGRATION=2`
          environment variable set.\n-   Fix trivy report download [(#&#8203;10943)](https://redirect.github.com/k3s-io/k3s/pull/10943)\n-
          \  Trivy workflow: Specify GH_REPO env to use gh cli [(#&#8203;10949)](https://redirect.github.com/k3s-io/k3s/pull/10949)\n-
          \  Bump Trivy version [(#&#8203;10924)](https://redirect.github.com/k3s-io/k3s/pull/10924)\n-
          \  Bump traefik to chart 27.0.2 [(#&#8203;10939)](https://redirect.github.com/k3s-io/k3s/pull/10939)\n-
          \  Pass Rancher's VEX report to Trivy to remove known false-positives CVEs
          [(#&#8203;10956)](https://redirect.github.com/k3s-io/k3s/pull/10956)\n-
          \  Fix trivy vex line [(#&#8203;10970)](https://redirect.github.com/k3s-io/k3s/pull/10970)\n-
          \  Add user path to runtimes search [(#&#8203;10953)](https://redirect.github.com/k3s-io/k3s/pull/10953)\n
          \   -   Runtimes detection will now use $PATH\n-   Bump to new wharfie version
          [(#&#8203;10971)](https://redirect.github.com/k3s-io/k3s/pull/10971)\n-
          \  Update README.md [(#&#8203;10523)](https://redirect.github.com/k3s-io/k3s/pull/10523)\n-
          \  Remove trailing whitespace [(#&#8203;9362)](https://redirect.github.com/k3s-io/k3s/pull/9362)\n-
          \  Bump kine to v0.13.2 [(#&#8203;10978)](https://redirect.github.com/k3s-io/k3s/pull/10978)\n-
          \  Allow configuration of Rootlesskit's CopyUpDirs through an environment
          variable [(#&#8203;10386)](https://redirect.github.com/k3s-io/k3s/pull/10386)\n
          \   -   Add new environment variable \"K3S_ROOTLESS_COPYUPDIRS\" to add
          folders to the Rootlesskit configuration.\n-   Fix race condition when multiple
          nodes reconcile S3 snapshots [(#&#8203;10979)](https://redirect.github.com/k3s-io/k3s/pull/10979)\n-
          \  Bump Trivy version [(#&#8203;10996)](https://redirect.github.com/k3s-io/k3s/pull/10996)\n-
          \  Add ca-cert rotation integration test, and fix ca-cert rotation [(#&#8203;11013)](https://redirect.github.com/k3s-io/k3s/pull/11013)\n-
          \  Add e2e test which verifies traffic policies and firewall in services
          [(#&#8203;10972)](https://redirect.github.com/k3s-io/k3s/pull/10972)\n-
          \  Update tcpproxy for import path change [(#&#8203;11029)](https://redirect.github.com/k3s-io/k3s/pull/11029)\n-
          \  Bump Local Path Provisioner version [(#&#8203;10862)](https://redirect.github.com/k3s-io/k3s/pull/10862)\n-
          \  Bump local-path-provisioner to v0.0.30 [(#&#8203;11049)](https://redirect.github.com/k3s-io/k3s/pull/11049)\n-
          \  Bump helm-controller and klipper-helm [(#&#8203;11060)](https://redirect.github.com/k3s-io/k3s/pull/11060)\n-
          \  Bump containerd to v1.7.22 [(#&#8203;11067)](https://redirect.github.com/k3s-io/k3s/pull/11067)\n-
          \  Simplify svclb daemonset [(#&#8203;10954)](https://redirect.github.com/k3s-io/k3s/pull/10954)\n
          \   -   Stop using klipper-lb as the image for svclb. Replace it with a
          simple busybox which just sleeps\n-   Add the nvidia runtime cdi [(#&#8203;11065)](https://redirect.github.com/k3s-io/k3s/pull/11065)\n
          \   -   Add nvidia cdi runtime to the list of supported and discoverable
          runtimes\n-   Bump Trivy version [(#&#8203;11103)](https://redirect.github.com/k3s-io/k3s/pull/11103)\n-
          \  Rollback GHA to Ubuntu 22.04 [(#&#8203;11111)](https://redirect.github.com/k3s-io/k3s/pull/11111)\n-
          \  Revert \"Make svclb as simple as possible\" [(#&#8203;11109)](https://redirect.github.com/k3s-io/k3s/pull/11109)\n-
          \  Fix Github Actions for Ubuntu-24.04 [(#&#8203;11112)](https://redirect.github.com/k3s-io/k3s/pull/11112)\n-
          \  Bump aquasecurity/trivy-action from 0.24.0 to 0.27.0 [(#&#8203;11105)](https://redirect.github.com/k3s-io/k3s/pull/11105)\n-
          \  Check the last 10 commits for upgrade E2E test [(#&#8203;11086)](https://redirect.github.com/k3s-io/k3s/pull/11086)\n-
          \  Bump aquasecurity/trivy-action from 0.27.0 to 0.28.0 [(#&#8203;11138)](https://redirect.github.com/k3s-io/k3s/pull/11138)\n-
          \  Fixes \"file exists\" error from CNI bins when upgrading k3s [(#&#8203;11123)](https://redirect.github.com/k3s-io/k3s/pull/11123)\n-
          \  Reduce the number of GH api request for E2E nightly [(#&#8203;11148)](https://redirect.github.com/k3s-io/k3s/pull/11148)\n-
          \  Update Kubernetes to v1.31.2-k3s1 and Go 1.22.8 [(#&#8203;11163)](https://redirect.github.com/k3s-io/k3s/pull/11163)\n-
          \  Update stable channel to v1.30.6+k3s1 [(#&#8203;11186)](https://redirect.github.com/k3s-io/k3s/pull/11186)\n-
          \  Fix timeout when defragmenting etcd on startup [(#&#8203;11164)](https://redirect.github.com/k3s-io/k3s/pull/11164)\n-
          \  Capture all fedora atomic variants in install script [(#&#8203;11170)](https://redirect.github.com/k3s-io/k3s/pull/11170)\n
          \   -   Allow easier installation of k3s on all variants of fedora atomic
          that use rpm-ostree\n-   Typo fixes in contributing.md [(#&#8203;11201)](https://redirect.github.com/k3s-io/k3s/pull/11201)\n-
          \  Bump Trivy version [(#&#8203;11206)](https://redirect.github.com/k3s-io/k3s/pull/11206)\n-
          \  Pin vagrant to older version to avoid known issue 13527 [(#&#8203;11226)](https://redirect.github.com/k3s-io/k3s/pull/11226)\n-
          \  Set kine EmulatedETCDVersion from embedded etcd version [(#&#8203;11221)](https://redirect.github.com/k3s-io/k3s/pull/11221)\n-
          \  Add nonroot-devices flag to agent CLI [(#&#8203;11200)](https://redirect.github.com/k3s-io/k3s/pull/11200)\n
          \   -   `Device_ownership_from_security_context` can now be enabled in the
          containerd CRI config by setting the `--nonroot-devices` flag or config
          key.\n-   Bump runc to v1.2 [(#&#8203;10896)](https://redirect.github.com/k3s-io/k3s/pull/10896)\n-
          \  Update flannel and base cni plugins version [(#&#8203;11188)](https://redirect.github.com/k3s-io/k3s/pull/11188)\n-
          \  Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 [(#&#8203;11236)](https://redirect.github.com/k3s-io/k3s/pull/11236)\n-
          \  Fix MustFindString returning override flags on external CLI commands
          [(#&#8203;11237)](https://redirect.github.com/k3s-io/k3s/pull/11237)\n-
          \  Bump containerd to v1.7.23-k3s1 to fix registry rewrite token scopes
          [(#&#8203;11238)](https://redirect.github.com/k3s-io/k3s/pull/11238)\n-
          \  Fix the \"Standalone\"-mode of oidc-login in the wrapped kubectl library
          [(#&#8203;11266)](https://redirect.github.com/k3s-io/k3s/pull/11266)\n    -
          \  Fixes 'no Auth Provider found for name \"oidc\"' when using oidc-login
          in standalone mode.\n-   Bump K3s-root version to v0.14.1 [(#&#8203;11282)](https://redirect.github.com/k3s-io/k3s/pull/11282)\n-
          \  Bump kine [(#&#8203;11277)](https://redirect.github.com/k3s-io/k3s/pull/11277)\n-
          \  Bump kine for mysql connection close fix [(#&#8203;11305)](https://redirect.github.com/k3s-io/k3s/pull/11305)\n-
          \  Fix handling of wrapped subcommands when run with a path [(#&#8203;11306)](https://redirect.github.com/k3s-io/k3s/pull/11306)\n-
          \  Fix updatecli config for klipper and helm-controller [(#&#8203;11290)](https://redirect.github.com/k3s-io/k3s/pull/11290)\n-
          \  Fix issue with loadbalancer failover to default server [(#&#8203;11319)](https://redirect.github.com/k3s-io/k3s/pull/11319)\n-
          \  Update `localstorage_int_test.go` reference [(#&#8203;11339)](https://redirect.github.com/k3s-io/k3s/pull/11339)\n
          \   -   Update `localstorage_int_test.go` reference in `tests/integration/README.md`\n-
          \  Add  to the output command to be consistent with the product command
          [(#&#8203;11345)](https://redirect.github.com/k3s-io/k3s/pull/11345)\n-
          \  Allow install script to print error on failed binary download [(#&#8203;11335)](https://redirect.github.com/k3s-io/k3s/pull/11335)\n-
          \  Remove the go toolchain line [(#&#8203;11358)](https://redirect.github.com/k3s-io/k3s/pull/11358)\n-
          \  Add ubuntu 24.04 apt command for e2e test [(#&#8203;11361)](https://redirect.github.com/k3s-io/k3s/pull/11361)\n-
          \  Bump Trivy version [(#&#8203;11360)](https://redirect.github.com/k3s-io/k3s/pull/11360)\n-
          \  Bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 [(#&#8203;11364)](https://redirect.github.com/k3s-io/k3s/pull/11364)\n-
          \  Convert legacy docker tests from bash to golang [(#&#8203;11357)](https://redirect.github.com/k3s-io/k3s/pull/11357)\n-
          \  Update Kubernetes to v1.31.3-k3s1 [(#&#8203;11373)](https://redirect.github.com/k3s-io/k3s/pull/11373)\n-
          \  Fix Branch Name logic for Dependabot and UpdateCLI pushes to k3s-io [(#&#8203;11376)](https://redirect.github.com/k3s-io/k3s/pull/11376)\n-
          \  Fix INSTALL_K3S_PR support [(#&#8203;11383)](https://redirect.github.com/k3s-io/k3s/pull/11383)\n-
          \  Fix etcd backup/restore test and add guardrail for etcd-snapshot [(#&#8203;11314)](https://redirect.github.com/k3s-io/k3s/pull/11314)\n-
          \  Bump containerd to -k3s2 to fix rewrites [(#&#8203;11401)](https://redirect.github.com/k3s-io/k3s/pull/11401)\n-
          \  Fix opensuse-leap install test [(#&#8203;11379)](https://redirect.github.com/k3s-io/k3s/pull/11379)\n-
          \  Fix secrets-encrypt reencrypt timeout error [(#&#8203;11385)](https://redirect.github.com/k3s-io/k3s/pull/11385)\n-
          \  Rework loadbalancer server selection logic [(#&#8203;11329)](https://redirect.github.com/k3s-io/k3s/pull/11329)\n-
          \  Remove experimental from embedded-registry flag [(#&#8203;11443)](https://redirect.github.com/k3s-io/k3s/pull/11443)\n-
          \  Update stable channel to v1.31.3+k3s1 [(#&#8203;11436)](https://redirect.github.com/k3s-io/k3s/pull/11436)\n-
          \  Fix agent tunnel address with dedicated supervisor port [(#&#8203;11427)](https://redirect.github.com/k3s-io/k3s/pull/11427)\n-
          \  Update coredns to 1.12.0 [(#&#8203;11387)](https://redirect.github.com/k3s-io/k3s/pull/11387)\n-
          \  Bump Trivy version [(#&#8203;11430)](https://redirect.github.com/k3s-io/k3s/pull/11430)\n-
          \  Update to v1.31.4-k3s1 and Go 1.22.9 [(#&#8203;11463)](https://redirect.github.com/k3s-io/k3s/pull/11463)\n-
          \  Bump alpine from 3.20 to 3.21 in /conformance [(#&#8203;11433)](https://redirect.github.com/k3s-io/k3s/pull/11433)\n-
          \  Fix docker check warnings [(#&#8203;11474)](https://redirect.github.com/k3s-io/k3s/pull/11474)\n-
          \  Update stable channel to v1.31.4+k3s1 [(#&#8203;11483)](https://redirect.github.com/k3s-io/k3s/pull/11483)\n-
          \  V1.32.0+k3s1 [(#&#8203;11478)](https://redirect.github.com/k3s-io/k3s/pull/11478)\n-
          \  Switch to using kubelet config file for all supported flags [(#&#8203;10433)](https://redirect.github.com/k3s-io/k3s/pull/10433)\n-
          \  Load kernel modules for nft in agent setup [(#&#8203;11527)](https://redirect.github.com/k3s-io/k3s/pull/11527)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.32.0](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1320)
          |\n| Kine | [v0.13.5](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.5)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.16-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.16-k3s1)
          |\n| Containerd | [v1.7.23-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v1.7.23-k3s2)
          |\n| Runc | [v1.2.1-k3s1](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.1-k3s1)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.10](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.10)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.5](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.5)
          |\n| Local-path-provisioner | [v0.0.30](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.30)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.31.9+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.9%2Bk3s1):
          v1.31.9+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.8+k3s1...v1.31.9+k3s1)\n\n<!--
          v1.31.9+k3s1 -->\n\nThis release updates Kubernetes to v1.31.9, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1318).\n\n####
          Changes since v1.31.8+k3s1:\n\n-   Testing backports for 2025 May [(#&#8203;12234)](https://redirect.github.com/k3s-io/k3s/pull/12234)\n-
          \  Backports for May [(#&#8203;12317)](https://redirect.github.com/k3s-io/k3s/pull/12317)\n-
          \  Backports for 2025-05 [(#&#8203;12328)](https://redirect.github.com/k3s-io/k3s/pull/12328)\n-
          \  Fix authorization-config/authentication-config handling [(#&#8203;12346)](https://redirect.github.com/k3s-io/k3s/pull/12346)\n-
          \  Fix secretsencrypt race conditions [(#&#8203;12357)](https://redirect.github.com/k3s-io/k3s/pull/12357)\n-
          \  Update to v1.31.9-k3s1 and Go 1.23.8 [(#&#8203;12363)](https://redirect.github.com/k3s-io/k3s/pull/12363)\n-
          \  Fix startup e2e test [(#&#8203;12371)](https://redirect.github.com/k3s-io/k3s/pull/12371)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.31.9](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1319)
          |\n| Kine | [v0.13.15](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.15)
          |\n| SQLite | [3.49.1](https://sqlite.org/releaselog/3\\_49\\_1.html) |\n|
          Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
          |\n| Containerd | [v2.0.5-k3s1.32](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.5-k3s1.32)
          |\n| Runc | [v1.2.6](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.6)
          |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.24](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.24)
          |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
          |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.31.8+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.8%2Bk3s1):
          v1.31.8+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.7+k3s1...v1.31.8+k3s1)\n\n<!--
          v1.31.8+k3s1 -->\n\nThis release updates Kubernetes to v1.31.8, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1317).\n\n####
          Changes since v1.31.7+k3s1:\n\n-   Migrate to UrfaveCLI v2 [(#&#8203;12030)](https://redirect.github.com/k3s-io/k3s/pull/12030)\n-
          \  Improve readiness polling on node startup [(#&#8203;12037)](https://redirect.github.com/k3s-io/k3s/pull/12037)\n-
          \  Fix issue caused by default authorization-mode apiserver arg [(#&#8203;12044)](https://redirect.github.com/k3s-io/k3s/pull/12044)\n-
          \  Cleanup anonymous and named volumes for docker tests ([#&#8203;12069](https://redirect.github.com/k3s-io/k3s/issues/12069))
          [(#&#8203;12076)](https://redirect.github.com/k3s-io/k3s/pull/12076)\n-
          \  Add support for secretbox encryption provider with the `k3s secrets-encrypt`
          command [(#&#8203;12066)](https://redirect.github.com/k3s-io/k3s/pull/12066)\n
          \   -   Users can now configure secrets encryption to use `secretbox` provider
          by setting the `secrets-encryption-provider` flag.\n-   Add error in certificate
          check [(#&#8203;12097)](https://redirect.github.com/k3s-io/k3s/pull/12097)\n-
          \  Backports for 2025-04 [(#&#8203;12105)](https://redirect.github.com/k3s-io/k3s/pull/12105)\n-
          \  Bump kine for nats-server/v2 CVE-2025-30215 [(#&#8203;12142)](https://redirect.github.com/k3s-io/k3s/pull/12142)\n-
          \  Drone Test Split and Reduction [(#&#8203;12150)](https://redirect.github.com/k3s-io/k3s/pull/12150)\n-
          \  More backports for 2025-04 [(#&#8203;12168)](https://redirect.github.com/k3s-io/k3s/pull/12168)\n-
          \  Fix handler panic when bootstrapper returns empty peer list [(#&#8203;12179)](https://redirect.github.com/k3s-io/k3s/pull/12179)\n-
          \  Bump traefik to v2.11.24 [(#&#8203;12190)](https://redirect.github.com/k3s-io/k3s/pull/12190)\n-
          \  Update to v1.31.8-k3s1 and Go 1.23.6 [(#&#8203;12207)](https://redirect.github.com/k3s-io/k3s/pull/12207)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.31.8](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1318)
          |\n| Kine | [v0.13.14](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.14)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
          |\n| Containerd | [v2.0.4-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s2)
          |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
          |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.24](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.24)
          |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
          |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.31.7+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.7%2Bk3s1):
          v1.31.7+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.6+k3s1...v1.31.7+k3s1)\n\n<!--
          v1.31.7+k3s1 -->\n\nThis release updates Kubernetes to v1.31.7, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1316).\n\n####
          Changes since v1.31.6+k3s1:\n\n-   Revert \"Add ability to pass configuration
          options to flannel backend\" [(#&#8203;11868)](https://redirect.github.com/k3s-io/k3s/pull/11868)\n-
          \  Backport Docker + E2E testing PRs for 2025 March [(#&#8203;11887)](https://redirect.github.com/k3s-io/k3s/pull/11887)\n-
          \  Backports for 2025-03 [(#&#8203;11920)](https://redirect.github.com/k3s-io/k3s/pull/11920)\n-
          \  Bump klipper-lb to v0.4.13 [(#&#8203;11927)](https://redirect.github.com/k3s-io/k3s/pull/11927)\n-
          \  Fix syncing empty list of apiserver addresses during initial startup
          [(#&#8203;11954)](https://redirect.github.com/k3s-io/k3s/pull/11954)\n-
          \  Update to v1.31.7-k3s1 [(#&#8203;11958)](https://redirect.github.com/k3s-io/k3s/pull/11958)\n-
          \  Fix skew test for release candidates [(#&#8203;11990)](https://redirect.github.com/k3s-io/k3s/pull/11990)\n-
          \  Bump to containerd v2.0.4 [(#&#8203;12004)](https://redirect.github.com/k3s-io/k3s/pull/12004)\n-
          \  Fix upgrade test container version [(#&#8203;11999)](https://redirect.github.com/k3s-io/k3s/pull/11999)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.31.7](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1317)
          |\n| Kine | [v0.13.9](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.9)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.19-k3s1.30](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.19-k3s1.30)
          |\n| Containerd | [v2.0.4-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s2)
          |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.20](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.20)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.6](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.6)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.31.6+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.6%2Bk3s1):
          v1.31.6+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.5+k3s1...v1.31.6+k3s1)\n\n<!--
          v1.31.6+k3s1 -->\n\nThis release updates Kubernetes to v1.31.6, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1315).\n\n####
          Changes since v1.31.5+k3s1:\n\n-   Correct the k3s token command help [(#&#8203;11685)](https://redirect.github.com/k3s-io/k3s/pull/11685)\n-
          \  Jan 2025 Testing Overhaul, E2E to Docker Migration, [(#&#8203;11724)](https://redirect.github.com/k3s-io/k3s/pull/11724)\n-
          \  Backports for 2025-02 [(#&#8203;11732)](https://redirect.github.com/k3s-io/k3s/pull/11732)\n
          \   -   Align the CLI-reported default `--etcd-snapshot-dir` value with
          the actual one (`server`, `etcd-snapshot` commands).\n    -   Disable s3
          transport transparent compression/decompression\n    -   Etcd snapshot backup/restore
          now supports loading s3 credentials from an AWS SDK shared credentials file.\n
          \   -   Bump klipper-helm to v0.9.4\n    -   Bump klipper-lb to v0.4.10\n
          \   -   Bump spegel to v0.0.30\n    -   Bump local-path-provisioner to v0.0.31\n
          \   -   Bump kine to v0.13.8\n    -   Bump etcd to v3.5.18\n    -   Bump
          traefik to 2.11.20\n    -   Containerd has been bumped to version 2.0.\n
          \   -   The containerd config templates for linux and windows have been
          consolidated and are no longer os-specific.\n    -   Containerd 2.0 uses
          a new config file schema. If you are using a custom containerd config template,
          you should migrate your template to `config-v3.toml.tmpl` to switch to the
          new version. See the [upstream documentation](https://redirect.github.com/containerd/containerd/blob/release/2.0/docs/cri/config.md)
          for more information.\n-   Bump traefik to v2.11.20 [(#&#8203;11763)](https://redirect.github.com/k3s-io/k3s/pull/11763)\n-
          \  Update to v1.31.6-k3s1 and Go 1.22.12 [(#&#8203;11787)](https://redirect.github.com/k3s-io/k3s/pull/11787)\n-
          \  Render CNI dir config whenever vars are set [(#&#8203;11820)](https://redirect.github.com/k3s-io/k3s/pull/11820)\n-
          \  Bump containerd for go-cni deadlock fix [(#&#8203;11834)](https://redirect.github.com/k3s-io/k3s/pull/11834)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.31.6](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)
          |\n| Kine | [v0.13.9](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.9)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.18-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.18-k3s1)
          |\n| Containerd | [v2.0.2-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.2-k3s2)
          |\n| Runc | [v1.2.4-k3s2](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.4-k3s2)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.20](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.20)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.6](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.6)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.31.5+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.5%2Bk3s1):
          v1.31.5+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.4+k3s1...v1.31.5+k3s1)\n\n<!--
          v1.31.5+k3s1 -->\n\nThis release updates Kubernetes to v1.31.5, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1314).\n\n####
          Changes since v1.31.4+k3s1:\n\n-   Add guardrail for etcd-snapshot [(#&#8203;11393)](https://redirect.github.com/k3s-io/k3s/pull/11393)\n-
          \  Backports for 2025-01 [(#&#8203;11566)](https://redirect.github.com/k3s-io/k3s/pull/11566)\n-
          \  Add auto import images for containerd image store [(#&#8203;11562)](https://redirect.github.com/k3s-io/k3s/pull/11562)\n-
          \  2025 January Backports [(#&#8203;11588)](https://redirect.github.com/k3s-io/k3s/pull/11588)\n-
          \  Load kernel modules for nft in agent setup [(#&#8203;11596)](https://redirect.github.com/k3s-io/k3s/pull/11596)\n-
          \  Fix local password validation when bind-address is set [(#&#8203;11611)](https://redirect.github.com/k3s-io/k3s/pull/11611)\n-
          \  Update to v1.31.5-k3s1 and Go 1.22.10 [(#&#8203;11621)](https://redirect.github.com/k3s-io/k3s/pull/11621)\n-
          \  Remove local restriction for deferred node password validation [(#&#8203;11649)](https://redirect.github.com/k3s-io/k3s/pull/11649)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.31.5](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)
          |\n| Kine | [v0.13.5](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.5)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.16-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.16-k3s1)
          |\n| Containerd | [v1.7.23-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v1.7.23-k3s2)
          |\n| Runc | [v1.2.4-k3s1](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.4-k3s1)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.18](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.18)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.5](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.5)
          |\n| Local-path-provisioner | [v0.0.30](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.30)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n####
          What's Changed\n\n-   \\[release-1.31] Remove local restriction for deferred
          node password validation by [@&#8203;brandond](https://redirect.github.com/brandond)
          in [https://github.com/k3s-io/k3s/pull/11649](https://redirect.github.com/k3s-io/k3s/pull/11649)\n\n**Full
          Changelog**: https://github.com/k3s-io/k3s/compare/v1.31.5-rc1+k3s1...v1.31.5+k3s1\n\n###
          [`v1.31.4+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.4%2Bk3s1):
          v1.31.4+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.3+k3s1...v1.31.4+k3s1)\n\n<!--
          v1.31.4+k3s1 -->\n\nThis release updates Kubernetes to v1.31.4, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1313).\n\n#####
          Changes since v1.31.3+k3s1\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: Branch creation - At any time (no schedule defined), Automerge
          - At any time (no schedule defined).\n\n\U0001F6A6 **Automerge**: Disabled
          by config. Please merge this manually once you are satisfied.\n\n\u267B
          **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
          checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
          about this update again.\n\n---\n\n - [ ] <!-- rebase-check -->If you want
          to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated
          by [Mend Renovate](https://mend.io/renovate/). View the [repository job
          log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjcuMyIsInVwZGF0ZWRJblZlciI6IjQwLjE2LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/release/pull/1884
        commit_id: 91662de9fc2c9ddf675d28e41dd1344ae719fa8d
        patchset: 91662de9fc2c9ddf675d28e41dd1344ae719fa8d
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          name: osism/release
          short_name: release
        src_dir: src/github.com/osism/release
        topic: null
      buildset: 42ea2f646f764fcaab02b36b9c854002
      buildset_refs:
      - branch: main
        change: '1884'
        change_message: "chore(deps): update dependency k3s-io/k3s to v1.33.1+k3s1\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [k3s-io/k3s](https://redirect.github.com/k3s-io/k3s) | minor | `v1.30.10+k3s1`
          -> `v1.33.1+k3s1` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>k3s-io/k3s
          (k3s-io/k3s)</summary>\n\n### [`v1.33.1+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.33.1%2Bk3s1):
          v1.33.1+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.33.0+k3s1...v1.33.1+k3s1)\n\n<!--
          v1.33.1+k3s1 -->\n\nThis release updates Kubernetes to v1.33.1, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#changelog-since-v1330).\n\n####
          Changes since v1.33.0+k3s1:\n\n-   Backports for May [(#&#8203;12319)](https://redirect.github.com/k3s-io/k3s/pull/12319)\n-
          \  Backports for 2025-05 [(#&#8203;12325)](https://redirect.github.com/k3s-io/k3s/pull/12325)\n-
          \  Fix authorization-config/authentication-config handling [(#&#8203;12344)](https://redirect.github.com/k3s-io/k3s/pull/12344)\n-
          \  Fix secretsencrypt race conditions [(#&#8203;12355)](https://redirect.github.com/k3s-io/k3s/pull/12355)\n-
          \  Update to v1.33.1-k3s1 [(#&#8203;12360)](https://redirect.github.com/k3s-io/k3s/pull/12360)\n-
          \  Fix startup e2e test [(#&#8203;12370)](https://redirect.github.com/k3s-io/k3s/pull/12370)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.33.1](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#v1331)
          |\n| Kine | [v0.13.15](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.15)
          |\n| SQLite | [3.49.1](https://sqlite.org/releaselog/3\\_49\\_1.html) |\n|
          Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
          |\n| Containerd | [v2.0.5-k3s1](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.5-k3s1)
          |\n| Runc | [v1.2.6](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.6)
          |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v3.3.6](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.6)
          |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
          |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.33.0+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.33.0%2Bk3s1):
          v1.33.0+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.5+k3s1...v1.33.0+k3s1)\n\n<!--
          v1.33.0+k3s1 -->\n\nThis release updates Kubernetes to v1.33.0, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#changelog-since-v1324).\n\n#####
          Changes since v1.32.4+k3s1\n\n-   Build k3s overhaul [(#&#8203;12200)](https://redirect.github.com/k3s-io/k3s/pull/12200)\n-
          \  Fix sonobuoy conformance testing [(#&#8203;12214)](https://redirect.github.com/k3s-io/k3s/pull/12214)\n-
          \  Update k8s version to 1.33 [(#&#8203;12221)](https://redirect.github.com/k3s-io/k3s/pull/12221)\n-
          \  Remove ghcr from drone [(#&#8203;12229)](https://redirect.github.com/k3s-io/k3s/pull/12229)\n\n#####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.33.0](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#v1330)
          |\n| Kine | [v0.13.14](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.14)
          |\n| SQLite | [v3.49.2](https://sqlite.org/releaselog/3\\_49\\_2.html) |\n|
          Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
          |\n| Containerd | [v2.0.4-k3s4](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s4)
          |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
          |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v3.3.6](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.6)
          |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
          |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n##### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.32.5+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.5%2Bk3s1):
          v1.32.5+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.4+k3s1...v1.32.5+k3s1)\n\n<!--
          v1.32.5+k3s1 -->\n\nThis release updates Kubernetes to v1.32.5, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1324).\n\n#####
          Changes since v1.32.4+k3s1:\n\n-   Testing backports for 2025 May [(#&#8203;12233)](https://redirect.github.com/k3s-io/k3s/pull/12233)\n-
          \  Backports for May [(#&#8203;12318)](https://redirect.github.com/k3s-io/k3s/pull/12318)\n-
          \  Backports for 2025-05 [(#&#8203;12327)](https://redirect.github.com/k3s-io/k3s/pull/12327)\n-
          \  Fix authorization-config/authentication-config handling [(#&#8203;12345)](https://redirect.github.com/k3s-io/k3s/pull/12345)\n-
          \  Fix secretsencrypt race conditions [(#&#8203;12356)](https://redirect.github.com/k3s-io/k3s/pull/12356)\n-
          \  Fix startup e2e test [(#&#8203;12359)](https://redirect.github.com/k3s-io/k3s/pull/12359)\n-
          \  Update to v1.32.5-k3s1 and Go 1.23.8 [(#&#8203;12361)](https://redirect.github.com/k3s-io/k3s/pull/12361)\n\n#####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.32.5](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1325)
          |\n| Kine | [v0.13.15](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.15)
          |\n| SQLite | [3.49.1](https://sqlite.org/releaselog/3\\_49\\_1.html) |\n|
          Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
          |\n| Containerd | [v2.0.5-k3s1.32](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.5-k3s1.32)
          |\n| Runc | [v1.2.6](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.6)
          |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v3.3.6](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.6)
          |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
          |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n##### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.32.4+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.4%2Bk3s1):
          v1.32.4+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.3+k3s1...v1.32.4+k3s1)\n\n<!--
          v1.32.4+k3s1 -->\n\nThis release updates Kubernetes to v1.32.4, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1323).\n\n####
          Changes since v1.32.3+k3s1:\n\n-   Migrate to UrfaveCLI v2 [(#&#8203;12031)](https://redirect.github.com/k3s-io/k3s/pull/12031)\n-
          \  Improve readiness polling on node startup [(#&#8203;12038)](https://redirect.github.com/k3s-io/k3s/pull/12038)\n-
          \  Fix issue caused by default authorization-mode apiserver arg [(#&#8203;12042)](https://redirect.github.com/k3s-io/k3s/pull/12042)\n-
          \  Fix flakey etcd startup tests [(#&#8203;12050)](https://redirect.github.com/k3s-io/k3s/pull/12050)\n-
          \  Cleanup anonymous and named volumes for docker tests [(#&#8203;12079)](https://redirect.github.com/k3s-io/k3s/pull/12079)\n-
          \  Add support for secretbox encryption provider with the `k3s secrets-encrypt`
          command [(#&#8203;12067)](https://redirect.github.com/k3s-io/k3s/pull/12067)\n
          \   -   Users can now configure secrets encryption to use `secretbox` provider
          by setting the `secrets-encryption-provider` flag.\n-   Add error in certificate
          check [(#&#8203;12098)](https://redirect.github.com/k3s-io/k3s/pull/12098)\n-
          \  Backports for 2025-04 [(#&#8203;12104)](https://redirect.github.com/k3s-io/k3s/pull/12104)\n-
          \  Bump kine for nats-server/v2 CVE-2025-30215 [(#&#8203;12141)](https://redirect.github.com/k3s-io/k3s/pull/12141)\n-
          \  Drone Test Split and Reduction [(#&#8203;12151)](https://redirect.github.com/k3s-io/k3s/pull/12151)\n-
          \  More backports for 2025-04 [(#&#8203;12167)](https://redirect.github.com/k3s-io/k3s/pull/12167)\n-
          \  Fix handler panic when bootstrapper returns empty peer list [(#&#8203;12178)](https://redirect.github.com/k3s-io/k3s/pull/12178)\n-
          \  Bump traefik to v3.3.6 [(#&#8203;12189)](https://redirect.github.com/k3s-io/k3s/pull/12189)\n-
          \  Update to v1.32.4-k3s1 and Go 1.23.6 [(#&#8203;12209)](https://redirect.github.com/k3s-io/k3s/pull/12209)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.32.4](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1324)
          |\n| Kine | [v0.13.14](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.14)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
          |\n| Containerd | [v2.0.4-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s2)
          |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
          |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v3.3.6](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.6)
          |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
          |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.32.3+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.3%2Bk3s1):
          v1.32.3+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.2+k3s1...v1.32.3+k3s1)\n\n<!--
          v1.32.3+k3s1 -->\n\nThis release updates Kubernetes to v1.32.3, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1322).\n\n####
          Changes since v1.32.2+k3s1:\n\n-   Revert \"Add ability to pass configuration
          options to flannel backend\" [(#&#8203;11867)](https://redirect.github.com/k3s-io/k3s/pull/11867)\n-
          \  Backport Docker + E2E testing PRs for 2025 March [(#&#8203;11888)](https://redirect.github.com/k3s-io/k3s/pull/11888)\n-
          \  Backports for 2025-03 [(#&#8203;11919)](https://redirect.github.com/k3s-io/k3s/pull/11919)\n-
          \  Bump klipper-lb image to v0.4.13 [(#&#8203;11930)](https://redirect.github.com/k3s-io/k3s/pull/11930)\n-
          \  Fix syncing empty list of apiserver addresses during initial startup
          [(#&#8203;11953)](https://redirect.github.com/k3s-io/k3s/pull/11953)\n-
          \  Update to v1.32.3-k3s1 [(#&#8203;11960)](https://redirect.github.com/k3s-io/k3s/pull/11960)\n-
          \  Update Kubernetes to v1.32.3-k3s2 [(#&#8203;11968)](https://redirect.github.com/k3s-io/k3s/pull/11968)\n-
          \  Fix skew test for release candidates [(#&#8203;11991)](https://redirect.github.com/k3s-io/k3s/pull/11991)\n-
          \  Bump to containerd v2.0.4 [(#&#8203;12003)](https://redirect.github.com/k3s-io/k3s/pull/12003)\n-
          \  Fix upgrade test container version [(#&#8203;12000)](https://redirect.github.com/k3s-io/k3s/pull/12000)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.32.3](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1323)
          |\n| Kine | [v0.13.9](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.9)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.19-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.19-k3s1)
          |\n| Containerd | [v2.0.4-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s2)
          |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v3.3.2](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.2)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.6](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.6)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.32.2+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.2%2Bk3s1):
          v1.32.2+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.1+k3s1...v1.32.2+k3s1)\n\n<!--
          v1.32.2+k3s1 -->\n\nThis release updates Kubernetes to v1.32.2, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1321).\n\n####
          Changes since v1.32.1+k3s1:\n\n-   Correct the k3s token command help [(#&#8203;11686)](https://redirect.github.com/k3s-io/k3s/pull/11686)\n-
          \  Jan 2025 Testing Overhaul, E2E to Docker Migration, [(#&#8203;11723)](https://redirect.github.com/k3s-io/k3s/pull/11723)\n-
          \  Backports for 2025-02 [(#&#8203;11730)](https://redirect.github.com/k3s-io/k3s/pull/11730)\n
          \   -   Align the CLI-reported default `--etcd-snapshot-dir` value with
          the actual one (`server`, `etcd-snapshot` commands).\n    -   Disable s3
          transport transparent compression/decompression\n    -   Etcd snapshot backup/restore
          now supports loading s3 credentials from an AWS SDK shared credentials file.\n
          \   -   Bump klipper-helm to v0.9.4\n    -   Bump klipper-lb to v0.4.10\n
          \   -   Bump spegel to v0.0.30\n    -   Bump local-path-provisioner to v0.0.31\n
          \   -   Bump kine to v0.13.8\n    -   Bump etcd to v3.5.18\n    -   Bump
          traefik to 3.3.2\n    -   Containerd has been bumped to version 2.0.\n    -
          \  The containerd config templates for linux and windows have been consolidated
          and are no longer os-specific.\n    -   Containerd 2.0 uses a new config
          file schema. If you are using a custom containerd config template, you should
          migrate your template to `config-v3.toml.tmpl` to switch to the new version.
          See the [upstream documentation](https://redirect.github.com/containerd/containerd/blob/release/2.0/docs/cri/config.md)
          for more information.\n-   Update to v1.32.2-k3s1 and Go 1.23.6 [(#&#8203;11788)](https://redirect.github.com/k3s-io/k3s/pull/11788)\n-
          \  Render CNI dir config whenever vars are set [(#&#8203;11819)](https://redirect.github.com/k3s-io/k3s/pull/11819)\n-
          \  Bump containerd for go-cni deadlock fix [(#&#8203;11833)](https://redirect.github.com/k3s-io/k3s/pull/11833)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.32.2](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1322)
          |\n| Kine | [v0.13.9](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.9)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.18-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.18-k3s1)
          |\n| Containerd | [v2.0.2-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.2-k3s2)
          |\n| Runc | [v1.2.4-k3s1](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.4-k3s1)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v3.3.2](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.2)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.6](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.6)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.32.1+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.1%2Bk3s1):
          v1.32.1+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.0+k3s1...v1.32.1+k3s1)\n\n<!--
          v1.32.1+k3s1 -->\n\nThis release updates Kubernetes to v1.32.1, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1320).\n\n####
          Changes since v1.32.0+k3s1:\n\n-   Backports for 2025-01 [(#&#8203;11565)](https://redirect.github.com/k3s-io/k3s/pull/11565)\n-
          \  Add auto import images for containerd image store [(#&#8203;11563)](https://redirect.github.com/k3s-io/k3s/pull/11563)\n-
          \  2025 January Backports [(#&#8203;11583)](https://redirect.github.com/k3s-io/k3s/pull/11583)\n-
          \  Fix local password validation when bind-address is set [(#&#8203;11610)](https://redirect.github.com/k3s-io/k3s/pull/11610)\n-
          \  Update to v1.32.1-k3s1 and Go 1.23.4 [(#&#8203;11620)](https://redirect.github.com/k3s-io/k3s/pull/11620)\n-
          \  Remove local restriction for deferred node password validation [(#&#8203;11648)](https://redirect.github.com/k3s-io/k3s/pull/11648)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.32.1](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)
          |\n| Kine | [v0.13.5](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.5)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.16-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.16-k3s1)
          |\n| Containerd | [v1.7.23-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v1.7.23-k3s2)
          |\n| Runc | [v1.2.4-k3s1](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.4-k3s1)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.18](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.18)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.5](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.5)
          |\n| Local-path-provisioner | [v0.0.30](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.30)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n####
          What's Changed\n\n-   \\[release-1.32] Remove local restriction for deferred
          node password validation by [@&#8203;brandond](https://redirect.github.com/brandond)
          in [https://github.com/k3s-io/k3s/pull/11648](https://redirect.github.com/k3s-io/k3s/pull/11648)\n\n**Full
          Changelog**: https://github.com/k3s-io/k3s/compare/v1.32.1-rc1+k3s1...v1.32.1+k3s1\n\n###
          [`v1.32.0+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.0%2Bk3s1):
          v1.32.0+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.9+k3s1...v1.32.0+k3s1)\n\n<!--
          v1.32.0+k3s1 -->\n\nThis release is K3S's first in the v1.32 line. This
          release updates Kubernetes to v1.32.0.\n\nKubernetes 1.32 moves the `AuthorizeNodeWithSelectors`
          feature gate to Beta and on by default. See [KEP-4601](https://redirect.github.com/kubernetes/enhancements/blob/master/keps/sig-auth/4601-authorize-with-selectors/README.md)
          for more information.\n\nThis feature-gate breaks some of the RBAC that
          previous releases of K3s relied upon. The January releases of K3s v1.29,
          v1.30, and v1.31 will contain backported fixes. Until then, you must set
          `--kube-apiserver-arg=feature-gates=AuthorizeNodeWithSelectors=false` on
          server nodes, if you want to mix K3s v1.32 nodes with nodes of other versions
          (within the limits of what is supported by the [Kubernetes Version Skew
          Policy](https://kubernetes.io/releases/version-skew-policy/)).\n\nFor more
          details on what's new, see the [Kubernetes release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1310).\n\n####
          Changes since v1.31.4+k3s1:\n\n-   Fix rotateca validation failures when
          not touching default self-signed CAs [(#&#8203;10710)](https://redirect.github.com/k3s-io/k3s/pull/10710)\n-
          \  Bump runc to v1.1.13 [(#&#8203;10737)](https://redirect.github.com/k3s-io/k3s/pull/10737)\n-
          \  Update stable channel to v1.30.4+k3s1 [(#&#8203;10739)](https://redirect.github.com/k3s-io/k3s/pull/10739)\n-
          \  Fix deploy latest commit on E2E tests [(#&#8203;10725)](https://redirect.github.com/k3s-io/k3s/pull/10725)\n-
          \  Remove secrets encryption controller [(#&#8203;10612)](https://redirect.github.com/k3s-io/k3s/pull/10612)\n-
          \  Update kubernetes to v1.31.0-k3s3 [(#&#8203;10764)](https://redirect.github.com/k3s-io/k3s/pull/10764)\n-
          \  Bump traefik to v2.11.8 [(#&#8203;10779)](https://redirect.github.com/k3s-io/k3s/pull/10779)\n-
          \  Update coredns to 1.11.3 and metrics-server to 0.7.2 [(#&#8203;10760)](https://redirect.github.com/k3s-io/k3s/pull/10760)\n-
          \  Add trivy scanning to PR reports [(#&#8203;10758)](https://redirect.github.com/k3s-io/k3s/pull/10758)\n-
          \  Cover edge case when on new minor release for E2E upgrade test [(#&#8203;10781)](https://redirect.github.com/k3s-io/k3s/pull/10781)\n-
          \  Bump aquasecurity/trivy-action from 0.20.0 to 0.24.0 [(#&#8203;10795)](https://redirect.github.com/k3s-io/k3s/pull/10795)\n-
          \  Update CNI plugins version [(#&#8203;10798)](https://redirect.github.com/k3s-io/k3s/pull/10798)\n-
          \  Bump Sonobuoy version [(#&#8203;10792)](https://redirect.github.com/k3s-io/k3s/pull/10792)\n-
          \  Fix /trivy action running against target branch instead of PR branch
          [(#&#8203;10824)](https://redirect.github.com/k3s-io/k3s/pull/10824)\n-
          \  Launch private registry with init [(#&#8203;10822)](https://redirect.github.com/k3s-io/k3s/pull/10822)\n-
          \  Add channel for v1.31 [(#&#8203;10826)](https://redirect.github.com/k3s-io/k3s/pull/10826)\n-
          \  Bump containerd to v1.7.21, runc to v1.1.14 [(#&#8203;10805)](https://redirect.github.com/k3s-io/k3s/pull/10805)\n-
          \  Bump helm-controller for skip-verify/plain-http and updated tolerations
          [(#&#8203;10832)](https://redirect.github.com/k3s-io/k3s/pull/10832)\n-
          \  Tag PR image build as latest before scanning [(#&#8203;10825)](https://redirect.github.com/k3s-io/k3s/pull/10825)\n-
          \  Only clean up containerd hosts dirs managed by k3s [(#&#8203;10823)](https://redirect.github.com/k3s-io/k3s/pull/10823)\n-
          \  Remove otelgrpc pinned dependency [(#&#8203;10799)](https://redirect.github.com/k3s-io/k3s/pull/10799)\n-
          \  Add node-internal-dns/node-external-dns address pass-through support
          [(#&#8203;10852)](https://redirect.github.com/k3s-io/k3s/pull/10852)\n-
          \  Give good report if no CVEs found in trivy [(#&#8203;10853)](https://redirect.github.com/k3s-io/k3s/pull/10853)\n-
          \  Fix hosts.toml header var [(#&#8203;10870)](https://redirect.github.com/k3s-io/k3s/pull/10870)\n-
          \  Bump Trivy version [(#&#8203;10863)](https://redirect.github.com/k3s-io/k3s/pull/10863)\n-
          \  Add int test for flannel-ipv6masq [(#&#8203;10440)](https://redirect.github.com/k3s-io/k3s/pull/10440)\n-
          \  Bump Trivy version [(#&#8203;10899)](https://redirect.github.com/k3s-io/k3s/pull/10899)\n-
          \  Update Kubernetes to v1.31.1-k3s3 [(#&#8203;10911)](https://redirect.github.com/k3s-io/k3s/pull/10911)\n-
          \  Add MariaDB to CI [(#&#8203;10724)](https://redirect.github.com/k3s-io/k3s/pull/10724)\n-
          \  Update stable channel tov1.30.5+k3s1 [(#&#8203;10921)](https://redirect.github.com/k3s-io/k3s/pull/10921)\n-
          \  Use static CNI bin dir [(#&#8203;10868)](https://redirect.github.com/k3s-io/k3s/pull/10868)\n
          \   -   K3s now uses a stable directory for CNI binaries, which simplifies
          the installation of additional CNI plugins.\n-   Breakup trivy scan and
          check comment author [(#&#8203;10935)](https://redirect.github.com/k3s-io/k3s/pull/10935)\n-
          \  Fix getMembershipForUserInOrg call [(#&#8203;10937)](https://redirect.github.com/k3s-io/k3s/pull/10937)\n-
          \  Check k3s-io organization membership not team membership for trivy scans
          [(#&#8203;10940)](https://redirect.github.com/k3s-io/k3s/pull/10940)\n-
          \  Bump kine to v0.13.0 [(#&#8203;10932)](https://redirect.github.com/k3s-io/k3s/pull/10932)\n
          \   -   Kine has been bumped to v0.13.0. This release includes changes that
          should enhance performance when using postgres as an external DB. The updated
          schema will be automatically used for new databases; to migrate to the new
          schema on existing databases, K3s can be started with the `KINE_SCHEMA_MIGRATION=2`
          environment variable set.\n-   Fix trivy report download [(#&#8203;10943)](https://redirect.github.com/k3s-io/k3s/pull/10943)\n-
          \  Trivy workflow: Specify GH_REPO env to use gh cli [(#&#8203;10949)](https://redirect.github.com/k3s-io/k3s/pull/10949)\n-
          \  Bump Trivy version [(#&#8203;10924)](https://redirect.github.com/k3s-io/k3s/pull/10924)\n-
          \  Bump traefik to chart 27.0.2 [(#&#8203;10939)](https://redirect.github.com/k3s-io/k3s/pull/10939)\n-
          \  Pass Rancher's VEX report to Trivy to remove known false-positives CVEs
          [(#&#8203;10956)](https://redirect.github.com/k3s-io/k3s/pull/10956)\n-
          \  Fix trivy vex line [(#&#8203;10970)](https://redirect.github.com/k3s-io/k3s/pull/10970)\n-
          \  Add user path to runtimes search [(#&#8203;10953)](https://redirect.github.com/k3s-io/k3s/pull/10953)\n
          \   -   Runtimes detection will now use $PATH\n-   Bump to new wharfie version
          [(#&#8203;10971)](https://redirect.github.com/k3s-io/k3s/pull/10971)\n-
          \  Update README.md [(#&#8203;10523)](https://redirect.github.com/k3s-io/k3s/pull/10523)\n-
          \  Remove trailing whitespace [(#&#8203;9362)](https://redirect.github.com/k3s-io/k3s/pull/9362)\n-
          \  Bump kine to v0.13.2 [(#&#8203;10978)](https://redirect.github.com/k3s-io/k3s/pull/10978)\n-
          \  Allow configuration of Rootlesskit's CopyUpDirs through an environment
          variable [(#&#8203;10386)](https://redirect.github.com/k3s-io/k3s/pull/10386)\n
          \   -   Add new environment variable \"K3S_ROOTLESS_COPYUPDIRS\" to add
          folders to the Rootlesskit configuration.\n-   Fix race condition when multiple
          nodes reconcile S3 snapshots [(#&#8203;10979)](https://redirect.github.com/k3s-io/k3s/pull/10979)\n-
          \  Bump Trivy version [(#&#8203;10996)](https://redirect.github.com/k3s-io/k3s/pull/10996)\n-
          \  Add ca-cert rotation integration test, and fix ca-cert rotation [(#&#8203;11013)](https://redirect.github.com/k3s-io/k3s/pull/11013)\n-
          \  Add e2e test which verifies traffic policies and firewall in services
          [(#&#8203;10972)](https://redirect.github.com/k3s-io/k3s/pull/10972)\n-
          \  Update tcpproxy for import path change [(#&#8203;11029)](https://redirect.github.com/k3s-io/k3s/pull/11029)\n-
          \  Bump Local Path Provisioner version [(#&#8203;10862)](https://redirect.github.com/k3s-io/k3s/pull/10862)\n-
          \  Bump local-path-provisioner to v0.0.30 [(#&#8203;11049)](https://redirect.github.com/k3s-io/k3s/pull/11049)\n-
          \  Bump helm-controller and klipper-helm [(#&#8203;11060)](https://redirect.github.com/k3s-io/k3s/pull/11060)\n-
          \  Bump containerd to v1.7.22 [(#&#8203;11067)](https://redirect.github.com/k3s-io/k3s/pull/11067)\n-
          \  Simplify svclb daemonset [(#&#8203;10954)](https://redirect.github.com/k3s-io/k3s/pull/10954)\n
          \   -   Stop using klipper-lb as the image for svclb. Replace it with a
          simple busybox which just sleeps\n-   Add the nvidia runtime cdi [(#&#8203;11065)](https://redirect.github.com/k3s-io/k3s/pull/11065)\n
          \   -   Add nvidia cdi runtime to the list of supported and discoverable
          runtimes\n-   Bump Trivy version [(#&#8203;11103)](https://redirect.github.com/k3s-io/k3s/pull/11103)\n-
          \  Rollback GHA to Ubuntu 22.04 [(#&#8203;11111)](https://redirect.github.com/k3s-io/k3s/pull/11111)\n-
          \  Revert \"Make svclb as simple as possible\" [(#&#8203;11109)](https://redirect.github.com/k3s-io/k3s/pull/11109)\n-
          \  Fix Github Actions for Ubuntu-24.04 [(#&#8203;11112)](https://redirect.github.com/k3s-io/k3s/pull/11112)\n-
          \  Bump aquasecurity/trivy-action from 0.24.0 to 0.27.0 [(#&#8203;11105)](https://redirect.github.com/k3s-io/k3s/pull/11105)\n-
          \  Check the last 10 commits for upgrade E2E test [(#&#8203;11086)](https://redirect.github.com/k3s-io/k3s/pull/11086)\n-
          \  Bump aquasecurity/trivy-action from 0.27.0 to 0.28.0 [(#&#8203;11138)](https://redirect.github.com/k3s-io/k3s/pull/11138)\n-
          \  Fixes \"file exists\" error from CNI bins when upgrading k3s [(#&#8203;11123)](https://redirect.github.com/k3s-io/k3s/pull/11123)\n-
          \  Reduce the number of GH api request for E2E nightly [(#&#8203;11148)](https://redirect.github.com/k3s-io/k3s/pull/11148)\n-
          \  Update Kubernetes to v1.31.2-k3s1 and Go 1.22.8 [(#&#8203;11163)](https://redirect.github.com/k3s-io/k3s/pull/11163)\n-
          \  Update stable channel to v1.30.6+k3s1 [(#&#8203;11186)](https://redirect.github.com/k3s-io/k3s/pull/11186)\n-
          \  Fix timeout when defragmenting etcd on startup [(#&#8203;11164)](https://redirect.github.com/k3s-io/k3s/pull/11164)\n-
          \  Capture all fedora atomic variants in install script [(#&#8203;11170)](https://redirect.github.com/k3s-io/k3s/pull/11170)\n
          \   -   Allow easier installation of k3s on all variants of fedora atomic
          that use rpm-ostree\n-   Typo fixes in contributing.md [(#&#8203;11201)](https://redirect.github.com/k3s-io/k3s/pull/11201)\n-
          \  Bump Trivy version [(#&#8203;11206)](https://redirect.github.com/k3s-io/k3s/pull/11206)\n-
          \  Pin vagrant to older version to avoid known issue 13527 [(#&#8203;11226)](https://redirect.github.com/k3s-io/k3s/pull/11226)\n-
          \  Set kine EmulatedETCDVersion from embedded etcd version [(#&#8203;11221)](https://redirect.github.com/k3s-io/k3s/pull/11221)\n-
          \  Add nonroot-devices flag to agent CLI [(#&#8203;11200)](https://redirect.github.com/k3s-io/k3s/pull/11200)\n
          \   -   `Device_ownership_from_security_context` can now be enabled in the
          containerd CRI config by setting the `--nonroot-devices` flag or config
          key.\n-   Bump runc to v1.2 [(#&#8203;10896)](https://redirect.github.com/k3s-io/k3s/pull/10896)\n-
          \  Update flannel and base cni plugins version [(#&#8203;11188)](https://redirect.github.com/k3s-io/k3s/pull/11188)\n-
          \  Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 [(#&#8203;11236)](https://redirect.github.com/k3s-io/k3s/pull/11236)\n-
          \  Fix MustFindString returning override flags on external CLI commands
          [(#&#8203;11237)](https://redirect.github.com/k3s-io/k3s/pull/11237)\n-
          \  Bump containerd to v1.7.23-k3s1 to fix registry rewrite token scopes
          [(#&#8203;11238)](https://redirect.github.com/k3s-io/k3s/pull/11238)\n-
          \  Fix the \"Standalone\"-mode of oidc-login in the wrapped kubectl library
          [(#&#8203;11266)](https://redirect.github.com/k3s-io/k3s/pull/11266)\n    -
          \  Fixes 'no Auth Provider found for name \"oidc\"' when using oidc-login
          in standalone mode.\n-   Bump K3s-root version to v0.14.1 [(#&#8203;11282)](https://redirect.github.com/k3s-io/k3s/pull/11282)\n-
          \  Bump kine [(#&#8203;11277)](https://redirect.github.com/k3s-io/k3s/pull/11277)\n-
          \  Bump kine for mysql connection close fix [(#&#8203;11305)](https://redirect.github.com/k3s-io/k3s/pull/11305)\n-
          \  Fix handling of wrapped subcommands when run with a path [(#&#8203;11306)](https://redirect.github.com/k3s-io/k3s/pull/11306)\n-
          \  Fix updatecli config for klipper and helm-controller [(#&#8203;11290)](https://redirect.github.com/k3s-io/k3s/pull/11290)\n-
          \  Fix issue with loadbalancer failover to default server [(#&#8203;11319)](https://redirect.github.com/k3s-io/k3s/pull/11319)\n-
          \  Update `localstorage_int_test.go` reference [(#&#8203;11339)](https://redirect.github.com/k3s-io/k3s/pull/11339)\n
          \   -   Update `localstorage_int_test.go` reference in `tests/integration/README.md`\n-
          \  Add  to the output command to be consistent with the product command
          [(#&#8203;11345)](https://redirect.github.com/k3s-io/k3s/pull/11345)\n-
          \  Allow install script to print error on failed binary download [(#&#8203;11335)](https://redirect.github.com/k3s-io/k3s/pull/11335)\n-
          \  Remove the go toolchain line [(#&#8203;11358)](https://redirect.github.com/k3s-io/k3s/pull/11358)\n-
          \  Add ubuntu 24.04 apt command for e2e test [(#&#8203;11361)](https://redirect.github.com/k3s-io/k3s/pull/11361)\n-
          \  Bump Trivy version [(#&#8203;11360)](https://redirect.github.com/k3s-io/k3s/pull/11360)\n-
          \  Bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 [(#&#8203;11364)](https://redirect.github.com/k3s-io/k3s/pull/11364)\n-
          \  Convert legacy docker tests from bash to golang [(#&#8203;11357)](https://redirect.github.com/k3s-io/k3s/pull/11357)\n-
          \  Update Kubernetes to v1.31.3-k3s1 [(#&#8203;11373)](https://redirect.github.com/k3s-io/k3s/pull/11373)\n-
          \  Fix Branch Name logic for Dependabot and UpdateCLI pushes to k3s-io [(#&#8203;11376)](https://redirect.github.com/k3s-io/k3s/pull/11376)\n-
          \  Fix INSTALL_K3S_PR support [(#&#8203;11383)](https://redirect.github.com/k3s-io/k3s/pull/11383)\n-
          \  Fix etcd backup/restore test and add guardrail for etcd-snapshot [(#&#8203;11314)](https://redirect.github.com/k3s-io/k3s/pull/11314)\n-
          \  Bump containerd to -k3s2 to fix rewrites [(#&#8203;11401)](https://redirect.github.com/k3s-io/k3s/pull/11401)\n-
          \  Fix opensuse-leap install test [(#&#8203;11379)](https://redirect.github.com/k3s-io/k3s/pull/11379)\n-
          \  Fix secrets-encrypt reencrypt timeout error [(#&#8203;11385)](https://redirect.github.com/k3s-io/k3s/pull/11385)\n-
          \  Rework loadbalancer server selection logic [(#&#8203;11329)](https://redirect.github.com/k3s-io/k3s/pull/11329)\n-
          \  Remove experimental from embedded-registry flag [(#&#8203;11443)](https://redirect.github.com/k3s-io/k3s/pull/11443)\n-
          \  Update stable channel to v1.31.3+k3s1 [(#&#8203;11436)](https://redirect.github.com/k3s-io/k3s/pull/11436)\n-
          \  Fix agent tunnel address with dedicated supervisor port [(#&#8203;11427)](https://redirect.github.com/k3s-io/k3s/pull/11427)\n-
          \  Update coredns to 1.12.0 [(#&#8203;11387)](https://redirect.github.com/k3s-io/k3s/pull/11387)\n-
          \  Bump Trivy version [(#&#8203;11430)](https://redirect.github.com/k3s-io/k3s/pull/11430)\n-
          \  Update to v1.31.4-k3s1 and Go 1.22.9 [(#&#8203;11463)](https://redirect.github.com/k3s-io/k3s/pull/11463)\n-
          \  Bump alpine from 3.20 to 3.21 in /conformance [(#&#8203;11433)](https://redirect.github.com/k3s-io/k3s/pull/11433)\n-
          \  Fix docker check warnings [(#&#8203;11474)](https://redirect.github.com/k3s-io/k3s/pull/11474)\n-
          \  Update stable channel to v1.31.4+k3s1 [(#&#8203;11483)](https://redirect.github.com/k3s-io/k3s/pull/11483)\n-
          \  V1.32.0+k3s1 [(#&#8203;11478)](https://redirect.github.com/k3s-io/k3s/pull/11478)\n-
          \  Switch to using kubelet config file for all supported flags [(#&#8203;10433)](https://redirect.github.com/k3s-io/k3s/pull/10433)\n-
          \  Load kernel modules for nft in agent setup [(#&#8203;11527)](https://redirect.github.com/k3s-io/k3s/pull/11527)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.32.0](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1320)
          |\n| Kine | [v0.13.5](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.5)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.16-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.16-k3s1)
          |\n| Containerd | [v1.7.23-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v1.7.23-k3s2)
          |\n| Runc | [v1.2.1-k3s1](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.1-k3s1)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.10](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.10)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.5](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.5)
          |\n| Local-path-provisioner | [v0.0.30](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.30)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.31.9+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.9%2Bk3s1):
          v1.31.9+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.8+k3s1...v1.31.9+k3s1)\n\n<!--
          v1.31.9+k3s1 -->\n\nThis release updates Kubernetes to v1.31.9, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1318).\n\n####
          Changes since v1.31.8+k3s1:\n\n-   Testing backports for 2025 May [(#&#8203;12234)](https://redirect.github.com/k3s-io/k3s/pull/12234)\n-
          \  Backports for May [(#&#8203;12317)](https://redirect.github.com/k3s-io/k3s/pull/12317)\n-
          \  Backports for 2025-05 [(#&#8203;12328)](https://redirect.github.com/k3s-io/k3s/pull/12328)\n-
          \  Fix authorization-config/authentication-config handling [(#&#8203;12346)](https://redirect.github.com/k3s-io/k3s/pull/12346)\n-
          \  Fix secretsencrypt race conditions [(#&#8203;12357)](https://redirect.github.com/k3s-io/k3s/pull/12357)\n-
          \  Update to v1.31.9-k3s1 and Go 1.23.8 [(#&#8203;12363)](https://redirect.github.com/k3s-io/k3s/pull/12363)\n-
          \  Fix startup e2e test [(#&#8203;12371)](https://redirect.github.com/k3s-io/k3s/pull/12371)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.31.9](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1319)
          |\n| Kine | [v0.13.15](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.15)
          |\n| SQLite | [3.49.1](https://sqlite.org/releaselog/3\\_49\\_1.html) |\n|
          Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
          |\n| Containerd | [v2.0.5-k3s1.32](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.5-k3s1.32)
          |\n| Runc | [v1.2.6](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.6)
          |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.24](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.24)
          |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
          |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.31.8+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.8%2Bk3s1):
          v1.31.8+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.7+k3s1...v1.31.8+k3s1)\n\n<!--
          v1.31.8+k3s1 -->\n\nThis release updates Kubernetes to v1.31.8, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1317).\n\n####
          Changes since v1.31.7+k3s1:\n\n-   Migrate to UrfaveCLI v2 [(#&#8203;12030)](https://redirect.github.com/k3s-io/k3s/pull/12030)\n-
          \  Improve readiness polling on node startup [(#&#8203;12037)](https://redirect.github.com/k3s-io/k3s/pull/12037)\n-
          \  Fix issue caused by default authorization-mode apiserver arg [(#&#8203;12044)](https://redirect.github.com/k3s-io/k3s/pull/12044)\n-
          \  Cleanup anonymous and named volumes for docker tests ([#&#8203;12069](https://redirect.github.com/k3s-io/k3s/issues/12069))
          [(#&#8203;12076)](https://redirect.github.com/k3s-io/k3s/pull/12076)\n-
          \  Add support for secretbox encryption provider with the `k3s secrets-encrypt`
          command [(#&#8203;12066)](https://redirect.github.com/k3s-io/k3s/pull/12066)\n
          \   -   Users can now configure secrets encryption to use `secretbox` provider
          by setting the `secrets-encryption-provider` flag.\n-   Add error in certificate
          check [(#&#8203;12097)](https://redirect.github.com/k3s-io/k3s/pull/12097)\n-
          \  Backports for 2025-04 [(#&#8203;12105)](https://redirect.github.com/k3s-io/k3s/pull/12105)\n-
          \  Bump kine for nats-server/v2 CVE-2025-30215 [(#&#8203;12142)](https://redirect.github.com/k3s-io/k3s/pull/12142)\n-
          \  Drone Test Split and Reduction [(#&#8203;12150)](https://redirect.github.com/k3s-io/k3s/pull/12150)\n-
          \  More backports for 2025-04 [(#&#8203;12168)](https://redirect.github.com/k3s-io/k3s/pull/12168)\n-
          \  Fix handler panic when bootstrapper returns empty peer list [(#&#8203;12179)](https://redirect.github.com/k3s-io/k3s/pull/12179)\n-
          \  Bump traefik to v2.11.24 [(#&#8203;12190)](https://redirect.github.com/k3s-io/k3s/pull/12190)\n-
          \  Update to v1.31.8-k3s1 and Go 1.23.6 [(#&#8203;12207)](https://redirect.github.com/k3s-io/k3s/pull/12207)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.31.8](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1318)
          |\n| Kine | [v0.13.14](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.14)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
          |\n| Containerd | [v2.0.4-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s2)
          |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
          |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.24](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.24)
          |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
          |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.31.7+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.7%2Bk3s1):
          v1.31.7+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.6+k3s1...v1.31.7+k3s1)\n\n<!--
          v1.31.7+k3s1 -->\n\nThis release updates Kubernetes to v1.31.7, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1316).\n\n####
          Changes since v1.31.6+k3s1:\n\n-   Revert \"Add ability to pass configuration
          options to flannel backend\" [(#&#8203;11868)](https://redirect.github.com/k3s-io/k3s/pull/11868)\n-
          \  Backport Docker + E2E testing PRs for 2025 March [(#&#8203;11887)](https://redirect.github.com/k3s-io/k3s/pull/11887)\n-
          \  Backports for 2025-03 [(#&#8203;11920)](https://redirect.github.com/k3s-io/k3s/pull/11920)\n-
          \  Bump klipper-lb to v0.4.13 [(#&#8203;11927)](https://redirect.github.com/k3s-io/k3s/pull/11927)\n-
          \  Fix syncing empty list of apiserver addresses during initial startup
          [(#&#8203;11954)](https://redirect.github.com/k3s-io/k3s/pull/11954)\n-
          \  Update to v1.31.7-k3s1 [(#&#8203;11958)](https://redirect.github.com/k3s-io/k3s/pull/11958)\n-
          \  Fix skew test for release candidates [(#&#8203;11990)](https://redirect.github.com/k3s-io/k3s/pull/11990)\n-
          \  Bump to containerd v2.0.4 [(#&#8203;12004)](https://redirect.github.com/k3s-io/k3s/pull/12004)\n-
          \  Fix upgrade test container version [(#&#8203;11999)](https://redirect.github.com/k3s-io/k3s/pull/11999)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.31.7](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1317)
          |\n| Kine | [v0.13.9](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.9)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.19-k3s1.30](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.19-k3s1.30)
          |\n| Containerd | [v2.0.4-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s2)
          |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.20](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.20)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.6](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.6)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.31.6+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.6%2Bk3s1):
          v1.31.6+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.5+k3s1...v1.31.6+k3s1)\n\n<!--
          v1.31.6+k3s1 -->\n\nThis release updates Kubernetes to v1.31.6, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1315).\n\n####
          Changes since v1.31.5+k3s1:\n\n-   Correct the k3s token command help [(#&#8203;11685)](https://redirect.github.com/k3s-io/k3s/pull/11685)\n-
          \  Jan 2025 Testing Overhaul, E2E to Docker Migration, [(#&#8203;11724)](https://redirect.github.com/k3s-io/k3s/pull/11724)\n-
          \  Backports for 2025-02 [(#&#8203;11732)](https://redirect.github.com/k3s-io/k3s/pull/11732)\n
          \   -   Align the CLI-reported default `--etcd-snapshot-dir` value with
          the actual one (`server`, `etcd-snapshot` commands).\n    -   Disable s3
          transport transparent compression/decompression\n    -   Etcd snapshot backup/restore
          now supports loading s3 credentials from an AWS SDK shared credentials file.\n
          \   -   Bump klipper-helm to v0.9.4\n    -   Bump klipper-lb to v0.4.10\n
          \   -   Bump spegel to v0.0.30\n    -   Bump local-path-provisioner to v0.0.31\n
          \   -   Bump kine to v0.13.8\n    -   Bump etcd to v3.5.18\n    -   Bump
          traefik to 2.11.20\n    -   Containerd has been bumped to version 2.0.\n
          \   -   The containerd config templates for linux and windows have been
          consolidated and are no longer os-specific.\n    -   Containerd 2.0 uses
          a new config file schema. If you are using a custom containerd config template,
          you should migrate your template to `config-v3.toml.tmpl` to switch to the
          new version. See the [upstream documentation](https://redirect.github.com/containerd/containerd/blob/release/2.0/docs/cri/config.md)
          for more information.\n-   Bump traefik to v2.11.20 [(#&#8203;11763)](https://redirect.github.com/k3s-io/k3s/pull/11763)\n-
          \  Update to v1.31.6-k3s1 and Go 1.22.12 [(#&#8203;11787)](https://redirect.github.com/k3s-io/k3s/pull/11787)\n-
          \  Render CNI dir config whenever vars are set [(#&#8203;11820)](https://redirect.github.com/k3s-io/k3s/pull/11820)\n-
          \  Bump containerd for go-cni deadlock fix [(#&#8203;11834)](https://redirect.github.com/k3s-io/k3s/pull/11834)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.31.6](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)
          |\n| Kine | [v0.13.9](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.9)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.18-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.18-k3s1)
          |\n| Containerd | [v2.0.2-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.2-k3s2)
          |\n| Runc | [v1.2.4-k3s2](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.4-k3s2)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.20](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.20)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.6](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.6)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.31.5+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.5%2Bk3s1):
          v1.31.5+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.4+k3s1...v1.31.5+k3s1)\n\n<!--
          v1.31.5+k3s1 -->\n\nThis release updates Kubernetes to v1.31.5, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1314).\n\n####
          Changes since v1.31.4+k3s1:\n\n-   Add guardrail for etcd-snapshot [(#&#8203;11393)](https://redirect.github.com/k3s-io/k3s/pull/11393)\n-
          \  Backports for 2025-01 [(#&#8203;11566)](https://redirect.github.com/k3s-io/k3s/pull/11566)\n-
          \  Add auto import images for containerd image store [(#&#8203;11562)](https://redirect.github.com/k3s-io/k3s/pull/11562)\n-
          \  2025 January Backports [(#&#8203;11588)](https://redirect.github.com/k3s-io/k3s/pull/11588)\n-
          \  Load kernel modules for nft in agent setup [(#&#8203;11596)](https://redirect.github.com/k3s-io/k3s/pull/11596)\n-
          \  Fix local password validation when bind-address is set [(#&#8203;11611)](https://redirect.github.com/k3s-io/k3s/pull/11611)\n-
          \  Update to v1.31.5-k3s1 and Go 1.22.10 [(#&#8203;11621)](https://redirect.github.com/k3s-io/k3s/pull/11621)\n-
          \  Remove local restriction for deferred node password validation [(#&#8203;11649)](https://redirect.github.com/k3s-io/k3s/pull/11649)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.31.5](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)
          |\n| Kine | [v0.13.5](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.5)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.16-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.16-k3s1)
          |\n| Containerd | [v1.7.23-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v1.7.23-k3s2)
          |\n| Runc | [v1.2.4-k3s1](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.4-k3s1)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.18](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.18)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.5](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.5)
          |\n| Local-path-provisioner | [v0.0.30](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.30)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n####
          What's Changed\n\n-   \\[release-1.31] Remove local restriction for deferred
          node password validation by [@&#8203;brandond](https://redirect.github.com/brandond)
          in [https://github.com/k3s-io/k3s/pull/11649](https://redirect.github.com/k3s-io/k3s/pull/11649)\n\n**Full
          Changelog**: https://github.com/k3s-io/k3s/compare/v1.31.5-rc1+k3s1...v1.31.5+k3s1\n\n###
          [`v1.31.4+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.4%2Bk3s1):
          v1.31.4+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.3+k3s1...v1.31.4+k3s1)\n\n<!--
          v1.31.4+k3s1 -->\n\nThis release updates Kubernetes to v1.31.4, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1313).\n\n#####
          Changes since v1.31.3+k3s1\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: Branch creation - At any time (no schedule defined), Automerge
          - At any time (no schedule defined).\n\n\U0001F6A6 **Automerge**: Disabled
          by config. Please merge this manually once you are satisfied.\n\n\u267B
          **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
          checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
          about this update again.\n\n---\n\n - [ ] <!-- rebase-check -->If you want
          to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated
          by [Mend Renovate](https://mend.io/renovate/). View the [repository job
          log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjcuMyIsInVwZGF0ZWRJblZlciI6IjQwLjE2LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/release/pull/1884
        commit_id: 91662de9fc2c9ddf675d28e41dd1344ae719fa8d
        patchset: 91662de9fc2c9ddf675d28e41dd1344ae719fa8d
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          name: osism/release
          short_name: release
        src_dir: src/github.com/osism/release
        topic: null
      change: '1884'
      change_message: "chore(deps): update dependency k3s-io/k3s to v1.33.1+k3s1\n\nThis
        PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
        [k3s-io/k3s](https://redirect.github.com/k3s-io/k3s) | minor | `v1.30.10+k3s1`
        -> `v1.33.1+k3s1` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>k3s-io/k3s
        (k3s-io/k3s)</summary>\n\n### [`v1.33.1+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.33.1%2Bk3s1):
        v1.33.1+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.33.0+k3s1...v1.33.1+k3s1)\n\n<!--
        v1.33.1+k3s1 -->\n\nThis release updates Kubernetes to v1.33.1, and fixes
        a number of issues.\n\nFor more details on what's new, see the [Kubernetes
        release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#changelog-since-v1330).\n\n####
        Changes since v1.33.0+k3s1:\n\n-   Backports for May [(#&#8203;12319)](https://redirect.github.com/k3s-io/k3s/pull/12319)\n-
        \  Backports for 2025-05 [(#&#8203;12325)](https://redirect.github.com/k3s-io/k3s/pull/12325)\n-
        \  Fix authorization-config/authentication-config handling [(#&#8203;12344)](https://redirect.github.com/k3s-io/k3s/pull/12344)\n-
        \  Fix secretsencrypt race conditions [(#&#8203;12355)](https://redirect.github.com/k3s-io/k3s/pull/12355)\n-
        \  Update to v1.33.1-k3s1 [(#&#8203;12360)](https://redirect.github.com/k3s-io/k3s/pull/12360)\n-
        \  Fix startup e2e test [(#&#8203;12370)](https://redirect.github.com/k3s-io/k3s/pull/12370)\n\n####
        Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
        | [v1.33.1](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#v1331)
        |\n| Kine | [v0.13.15](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.15)
        |\n| SQLite | [3.49.1](https://sqlite.org/releaselog/3\\_49\\_1.html) |\n|
        Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
        |\n| Containerd | [v2.0.5-k3s1](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.5-k3s1)
        |\n| Runc | [v1.2.6](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.6)
        |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
        |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
        |\n| Traefik | [v3.3.6](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.6)
        |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
        |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
        |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
        |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback from
        our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
        \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
        documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on how
        to get started or to dive deep into K3s.\n-   [Read how you can contribute
        here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
        [`v1.33.0+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.33.0%2Bk3s1):
        v1.33.0+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.5+k3s1...v1.33.0+k3s1)\n\n<!--
        v1.33.0+k3s1 -->\n\nThis release updates Kubernetes to v1.33.0, and fixes
        a number of issues.\n\nFor more details on what's new, see the [Kubernetes
        release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#changelog-since-v1324).\n\n#####
        Changes since v1.32.4+k3s1\n\n-   Build k3s overhaul [(#&#8203;12200)](https://redirect.github.com/k3s-io/k3s/pull/12200)\n-
        \  Fix sonobuoy conformance testing [(#&#8203;12214)](https://redirect.github.com/k3s-io/k3s/pull/12214)\n-
        \  Update k8s version to 1.33 [(#&#8203;12221)](https://redirect.github.com/k3s-io/k3s/pull/12221)\n-
        \  Remove ghcr from drone [(#&#8203;12229)](https://redirect.github.com/k3s-io/k3s/pull/12229)\n\n#####
        Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
        | [v1.33.0](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#v1330)
        |\n| Kine | [v0.13.14](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.14)
        |\n| SQLite | [v3.49.2](https://sqlite.org/releaselog/3\\_49\\_2.html) |\n|
        Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
        |\n| Containerd | [v2.0.4-k3s4](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s4)
        |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
        |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
        |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
        |\n| Traefik | [v3.3.6](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.6)
        |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
        |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
        |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
        |\n\n##### Helpful Links\n\nAs always, we welcome and appreciate feedback
        from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
        \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
        documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on how
        to get started or to dive deep into K3s.\n-   [Read how you can contribute
        here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
        [`v1.32.5+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.5%2Bk3s1):
        v1.32.5+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.4+k3s1...v1.32.5+k3s1)\n\n<!--
        v1.32.5+k3s1 -->\n\nThis release updates Kubernetes to v1.32.5, and fixes
        a number of issues.\n\nFor more details on what's new, see the [Kubernetes
        release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1324).\n\n#####
        Changes since v1.32.4+k3s1:\n\n-   Testing backports for 2025 May [(#&#8203;12233)](https://redirect.github.com/k3s-io/k3s/pull/12233)\n-
        \  Backports for May [(#&#8203;12318)](https://redirect.github.com/k3s-io/k3s/pull/12318)\n-
        \  Backports for 2025-05 [(#&#8203;12327)](https://redirect.github.com/k3s-io/k3s/pull/12327)\n-
        \  Fix authorization-config/authentication-config handling [(#&#8203;12345)](https://redirect.github.com/k3s-io/k3s/pull/12345)\n-
        \  Fix secretsencrypt race conditions [(#&#8203;12356)](https://redirect.github.com/k3s-io/k3s/pull/12356)\n-
        \  Fix startup e2e test [(#&#8203;12359)](https://redirect.github.com/k3s-io/k3s/pull/12359)\n-
        \  Update to v1.32.5-k3s1 and Go 1.23.8 [(#&#8203;12361)](https://redirect.github.com/k3s-io/k3s/pull/12361)\n\n#####
        Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
        | [v1.32.5](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1325)
        |\n| Kine | [v0.13.15](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.15)
        |\n| SQLite | [3.49.1](https://sqlite.org/releaselog/3\\_49\\_1.html) |\n|
        Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
        |\n| Containerd | [v2.0.5-k3s1.32](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.5-k3s1.32)
        |\n| Runc | [v1.2.6](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.6)
        |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
        |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
        |\n| Traefik | [v3.3.6](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.6)
        |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
        |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
        |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
        |\n\n##### Helpful Links\n\nAs always, we welcome and appreciate feedback
        from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
        \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
        documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on how
        to get started or to dive deep into K3s.\n-   [Read how you can contribute
        here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
        [`v1.32.4+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.4%2Bk3s1):
        v1.32.4+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.3+k3s1...v1.32.4+k3s1)\n\n<!--
        v1.32.4+k3s1 -->\n\nThis release updates Kubernetes to v1.32.4, and fixes
        a number of issues.\n\nFor more details on what's new, see the [Kubernetes
        release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1323).\n\n####
        Changes since v1.32.3+k3s1:\n\n-   Migrate to UrfaveCLI v2 [(#&#8203;12031)](https://redirect.github.com/k3s-io/k3s/pull/12031)\n-
        \  Improve readiness polling on node startup [(#&#8203;12038)](https://redirect.github.com/k3s-io/k3s/pull/12038)\n-
        \  Fix issue caused by default authorization-mode apiserver arg [(#&#8203;12042)](https://redirect.github.com/k3s-io/k3s/pull/12042)\n-
        \  Fix flakey etcd startup tests [(#&#8203;12050)](https://redirect.github.com/k3s-io/k3s/pull/12050)\n-
        \  Cleanup anonymous and named volumes for docker tests [(#&#8203;12079)](https://redirect.github.com/k3s-io/k3s/pull/12079)\n-
        \  Add support for secretbox encryption provider with the `k3s secrets-encrypt`
        command [(#&#8203;12067)](https://redirect.github.com/k3s-io/k3s/pull/12067)\n
        \   -   Users can now configure secrets encryption to use `secretbox` provider
        by setting the `secrets-encryption-provider` flag.\n-   Add error in certificate
        check [(#&#8203;12098)](https://redirect.github.com/k3s-io/k3s/pull/12098)\n-
        \  Backports for 2025-04 [(#&#8203;12104)](https://redirect.github.com/k3s-io/k3s/pull/12104)\n-
        \  Bump kine for nats-server/v2 CVE-2025-30215 [(#&#8203;12141)](https://redirect.github.com/k3s-io/k3s/pull/12141)\n-
        \  Drone Test Split and Reduction [(#&#8203;12151)](https://redirect.github.com/k3s-io/k3s/pull/12151)\n-
        \  More backports for 2025-04 [(#&#8203;12167)](https://redirect.github.com/k3s-io/k3s/pull/12167)\n-
        \  Fix handler panic when bootstrapper returns empty peer list [(#&#8203;12178)](https://redirect.github.com/k3s-io/k3s/pull/12178)\n-
        \  Bump traefik to v3.3.6 [(#&#8203;12189)](https://redirect.github.com/k3s-io/k3s/pull/12189)\n-
        \  Update to v1.32.4-k3s1 and Go 1.23.6 [(#&#8203;12209)](https://redirect.github.com/k3s-io/k3s/pull/12209)\n\n####
        Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
        | [v1.32.4](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1324)
        |\n| Kine | [v0.13.14](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.14)
        |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
        Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
        |\n| Containerd | [v2.0.4-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s2)
        |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
        |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
        |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
        |\n| Traefik | [v3.3.6](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.6)
        |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
        |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
        |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
        |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback from
        our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
        \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
        documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on how
        to get started or to dive deep into K3s.\n-   [Read how you can contribute
        here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
        [`v1.32.3+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.3%2Bk3s1):
        v1.32.3+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.2+k3s1...v1.32.3+k3s1)\n\n<!--
        v1.32.3+k3s1 -->\n\nThis release updates Kubernetes to v1.32.3, and fixes
        a number of issues.\n\nFor more details on what's new, see the [Kubernetes
        release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1322).\n\n####
        Changes since v1.32.2+k3s1:\n\n-   Revert \"Add ability to pass configuration
        options to flannel backend\" [(#&#8203;11867)](https://redirect.github.com/k3s-io/k3s/pull/11867)\n-
        \  Backport Docker + E2E testing PRs for 2025 March [(#&#8203;11888)](https://redirect.github.com/k3s-io/k3s/pull/11888)\n-
        \  Backports for 2025-03 [(#&#8203;11919)](https://redirect.github.com/k3s-io/k3s/pull/11919)\n-
        \  Bump klipper-lb image to v0.4.13 [(#&#8203;11930)](https://redirect.github.com/k3s-io/k3s/pull/11930)\n-
        \  Fix syncing empty list of apiserver addresses during initial startup [(#&#8203;11953)](https://redirect.github.com/k3s-io/k3s/pull/11953)\n-
        \  Update to v1.32.3-k3s1 [(#&#8203;11960)](https://redirect.github.com/k3s-io/k3s/pull/11960)\n-
        \  Update Kubernetes to v1.32.3-k3s2 [(#&#8203;11968)](https://redirect.github.com/k3s-io/k3s/pull/11968)\n-
        \  Fix skew test for release candidates [(#&#8203;11991)](https://redirect.github.com/k3s-io/k3s/pull/11991)\n-
        \  Bump to containerd v2.0.4 [(#&#8203;12003)](https://redirect.github.com/k3s-io/k3s/pull/12003)\n-
        \  Fix upgrade test container version [(#&#8203;12000)](https://redirect.github.com/k3s-io/k3s/pull/12000)\n\n####
        Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
        | [v1.32.3](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1323)
        |\n| Kine | [v0.13.9](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.9)
        |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
        Etcd | [v3.5.19-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.19-k3s1)
        |\n| Containerd | [v2.0.4-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s2)
        |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
        |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
        |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
        |\n| Traefik | [v3.3.2](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.2)
        |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
        |\n| Helm-controller | [v0.16.6](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.6)
        |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
        |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback from
        our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
        \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
        documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on how
        to get started or to dive deep into K3s.\n-   [Read how you can contribute
        here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
        [`v1.32.2+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.2%2Bk3s1):
        v1.32.2+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.1+k3s1...v1.32.2+k3s1)\n\n<!--
        v1.32.2+k3s1 -->\n\nThis release updates Kubernetes to v1.32.2, and fixes
        a number of issues.\n\nFor more details on what's new, see the [Kubernetes
        release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1321).\n\n####
        Changes since v1.32.1+k3s1:\n\n-   Correct the k3s token command help [(#&#8203;11686)](https://redirect.github.com/k3s-io/k3s/pull/11686)\n-
        \  Jan 2025 Testing Overhaul, E2E to Docker Migration, [(#&#8203;11723)](https://redirect.github.com/k3s-io/k3s/pull/11723)\n-
        \  Backports for 2025-02 [(#&#8203;11730)](https://redirect.github.com/k3s-io/k3s/pull/11730)\n
        \   -   Align the CLI-reported default `--etcd-snapshot-dir` value with the
        actual one (`server`, `etcd-snapshot` commands).\n    -   Disable s3 transport
        transparent compression/decompression\n    -   Etcd snapshot backup/restore
        now supports loading s3 credentials from an AWS SDK shared credentials file.\n
        \   -   Bump klipper-helm to v0.9.4\n    -   Bump klipper-lb to v0.4.10\n
        \   -   Bump spegel to v0.0.30\n    -   Bump local-path-provisioner to v0.0.31\n
        \   -   Bump kine to v0.13.8\n    -   Bump etcd to v3.5.18\n    -   Bump traefik
        to 3.3.2\n    -   Containerd has been bumped to version 2.0.\n    -   The
        containerd config templates for linux and windows have been consolidated and
        are no longer os-specific.\n    -   Containerd 2.0 uses a new config file
        schema. If you are using a custom containerd config template, you should migrate
        your template to `config-v3.toml.tmpl` to switch to the new version. See the
        [upstream documentation](https://redirect.github.com/containerd/containerd/blob/release/2.0/docs/cri/config.md)
        for more information.\n-   Update to v1.32.2-k3s1 and Go 1.23.6 [(#&#8203;11788)](https://redirect.github.com/k3s-io/k3s/pull/11788)\n-
        \  Render CNI dir config whenever vars are set [(#&#8203;11819)](https://redirect.github.com/k3s-io/k3s/pull/11819)\n-
        \  Bump containerd for go-cni deadlock fix [(#&#8203;11833)](https://redirect.github.com/k3s-io/k3s/pull/11833)\n\n####
        Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
        | [v1.32.2](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1322)
        |\n| Kine | [v0.13.9](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.9)
        |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
        Etcd | [v3.5.18-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.18-k3s1)
        |\n| Containerd | [v2.0.2-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.2-k3s2)
        |\n| Runc | [v1.2.4-k3s1](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.4-k3s1)
        |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
        |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
        |\n| Traefik | [v3.3.2](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.2)
        |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
        |\n| Helm-controller | [v0.16.6](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.6)
        |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
        |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback from
        our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
        \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
        documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on how
        to get started or to dive deep into K3s.\n-   [Read how you can contribute
        here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
        [`v1.32.1+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.1%2Bk3s1):
        v1.32.1+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.0+k3s1...v1.32.1+k3s1)\n\n<!--
        v1.32.1+k3s1 -->\n\nThis release updates Kubernetes to v1.32.1, and fixes
        a number of issues.\n\nFor more details on what's new, see the [Kubernetes
        release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1320).\n\n####
        Changes since v1.32.0+k3s1:\n\n-   Backports for 2025-01 [(#&#8203;11565)](https://redirect.github.com/k3s-io/k3s/pull/11565)\n-
        \  Add auto import images for containerd image store [(#&#8203;11563)](https://redirect.github.com/k3s-io/k3s/pull/11563)\n-
        \  2025 January Backports [(#&#8203;11583)](https://redirect.github.com/k3s-io/k3s/pull/11583)\n-
        \  Fix local password validation when bind-address is set [(#&#8203;11610)](https://redirect.github.com/k3s-io/k3s/pull/11610)\n-
        \  Update to v1.32.1-k3s1 and Go 1.23.4 [(#&#8203;11620)](https://redirect.github.com/k3s-io/k3s/pull/11620)\n-
        \  Remove local restriction for deferred node password validation [(#&#8203;11648)](https://redirect.github.com/k3s-io/k3s/pull/11648)\n\n####
        Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
        | [v1.32.1](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)
        |\n| Kine | [v0.13.5](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.5)
        |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
        Etcd | [v3.5.16-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.16-k3s1)
        |\n| Containerd | [v1.7.23-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v1.7.23-k3s2)
        |\n| Runc | [v1.2.4-k3s1](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.4-k3s1)
        |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
        |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
        |\n| Traefik | [v2.11.18](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.18)
        |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
        |\n| Helm-controller | [v0.16.5](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.5)
        |\n| Local-path-provisioner | [v0.0.30](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.30)
        |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback from
        our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
        \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
        documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on how
        to get started or to dive deep into K3s.\n-   [Read how you can contribute
        here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n####
        What's Changed\n\n-   \\[release-1.32] Remove local restriction for deferred
        node password validation by [@&#8203;brandond](https://redirect.github.com/brandond)
        in [https://github.com/k3s-io/k3s/pull/11648](https://redirect.github.com/k3s-io/k3s/pull/11648)\n\n**Full
        Changelog**: https://github.com/k3s-io/k3s/compare/v1.32.1-rc1+k3s1...v1.32.1+k3s1\n\n###
        [`v1.32.0+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.0%2Bk3s1):
        v1.32.0+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.9+k3s1...v1.32.0+k3s1)\n\n<!--
        v1.32.0+k3s1 -->\n\nThis release is K3S's first in the v1.32 line. This release
        updates Kubernetes to v1.32.0.\n\nKubernetes 1.32 moves the `AuthorizeNodeWithSelectors`
        feature gate to Beta and on by default. See [KEP-4601](https://redirect.github.com/kubernetes/enhancements/blob/master/keps/sig-auth/4601-authorize-with-selectors/README.md)
        for more information.\n\nThis feature-gate breaks some of the RBAC that previous
        releases of K3s relied upon. The January releases of K3s v1.29, v1.30, and
        v1.31 will contain backported fixes. Until then, you must set `--kube-apiserver-arg=feature-gates=AuthorizeNodeWithSelectors=false`
        on server nodes, if you want to mix K3s v1.32 nodes with nodes of other versions
        (within the limits of what is supported by the [Kubernetes Version Skew Policy](https://kubernetes.io/releases/version-skew-policy/)).\n\nFor
        more details on what's new, see the [Kubernetes release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1310).\n\n####
        Changes since v1.31.4+k3s1:\n\n-   Fix rotateca validation failures when not
        touching default self-signed CAs [(#&#8203;10710)](https://redirect.github.com/k3s-io/k3s/pull/10710)\n-
        \  Bump runc to v1.1.13 [(#&#8203;10737)](https://redirect.github.com/k3s-io/k3s/pull/10737)\n-
        \  Update stable channel to v1.30.4+k3s1 [(#&#8203;10739)](https://redirect.github.com/k3s-io/k3s/pull/10739)\n-
        \  Fix deploy latest commit on E2E tests [(#&#8203;10725)](https://redirect.github.com/k3s-io/k3s/pull/10725)\n-
        \  Remove secrets encryption controller [(#&#8203;10612)](https://redirect.github.com/k3s-io/k3s/pull/10612)\n-
        \  Update kubernetes to v1.31.0-k3s3 [(#&#8203;10764)](https://redirect.github.com/k3s-io/k3s/pull/10764)\n-
        \  Bump traefik to v2.11.8 [(#&#8203;10779)](https://redirect.github.com/k3s-io/k3s/pull/10779)\n-
        \  Update coredns to 1.11.3 and metrics-server to 0.7.2 [(#&#8203;10760)](https://redirect.github.com/k3s-io/k3s/pull/10760)\n-
        \  Add trivy scanning to PR reports [(#&#8203;10758)](https://redirect.github.com/k3s-io/k3s/pull/10758)\n-
        \  Cover edge case when on new minor release for E2E upgrade test [(#&#8203;10781)](https://redirect.github.com/k3s-io/k3s/pull/10781)\n-
        \  Bump aquasecurity/trivy-action from 0.20.0 to 0.24.0 [(#&#8203;10795)](https://redirect.github.com/k3s-io/k3s/pull/10795)\n-
        \  Update CNI plugins version [(#&#8203;10798)](https://redirect.github.com/k3s-io/k3s/pull/10798)\n-
        \  Bump Sonobuoy version [(#&#8203;10792)](https://redirect.github.com/k3s-io/k3s/pull/10792)\n-
        \  Fix /trivy action running against target branch instead of PR branch [(#&#8203;10824)](https://redirect.github.com/k3s-io/k3s/pull/10824)\n-
        \  Launch private registry with init [(#&#8203;10822)](https://redirect.github.com/k3s-io/k3s/pull/10822)\n-
        \  Add channel for v1.31 [(#&#8203;10826)](https://redirect.github.com/k3s-io/k3s/pull/10826)\n-
        \  Bump containerd to v1.7.21, runc to v1.1.14 [(#&#8203;10805)](https://redirect.github.com/k3s-io/k3s/pull/10805)\n-
        \  Bump helm-controller for skip-verify/plain-http and updated tolerations
        [(#&#8203;10832)](https://redirect.github.com/k3s-io/k3s/pull/10832)\n-   Tag
        PR image build as latest before scanning [(#&#8203;10825)](https://redirect.github.com/k3s-io/k3s/pull/10825)\n-
        \  Only clean up containerd hosts dirs managed by k3s [(#&#8203;10823)](https://redirect.github.com/k3s-io/k3s/pull/10823)\n-
        \  Remove otelgrpc pinned dependency [(#&#8203;10799)](https://redirect.github.com/k3s-io/k3s/pull/10799)\n-
        \  Add node-internal-dns/node-external-dns address pass-through support [(#&#8203;10852)](https://redirect.github.com/k3s-io/k3s/pull/10852)\n-
        \  Give good report if no CVEs found in trivy [(#&#8203;10853)](https://redirect.github.com/k3s-io/k3s/pull/10853)\n-
        \  Fix hosts.toml header var [(#&#8203;10870)](https://redirect.github.com/k3s-io/k3s/pull/10870)\n-
        \  Bump Trivy version [(#&#8203;10863)](https://redirect.github.com/k3s-io/k3s/pull/10863)\n-
        \  Add int test for flannel-ipv6masq [(#&#8203;10440)](https://redirect.github.com/k3s-io/k3s/pull/10440)\n-
        \  Bump Trivy version [(#&#8203;10899)](https://redirect.github.com/k3s-io/k3s/pull/10899)\n-
        \  Update Kubernetes to v1.31.1-k3s3 [(#&#8203;10911)](https://redirect.github.com/k3s-io/k3s/pull/10911)\n-
        \  Add MariaDB to CI [(#&#8203;10724)](https://redirect.github.com/k3s-io/k3s/pull/10724)\n-
        \  Update stable channel tov1.30.5+k3s1 [(#&#8203;10921)](https://redirect.github.com/k3s-io/k3s/pull/10921)\n-
        \  Use static CNI bin dir [(#&#8203;10868)](https://redirect.github.com/k3s-io/k3s/pull/10868)\n
        \   -   K3s now uses a stable directory for CNI binaries, which simplifies
        the installation of additional CNI plugins.\n-   Breakup trivy scan and check
        comment author [(#&#8203;10935)](https://redirect.github.com/k3s-io/k3s/pull/10935)\n-
        \  Fix getMembershipForUserInOrg call [(#&#8203;10937)](https://redirect.github.com/k3s-io/k3s/pull/10937)\n-
        \  Check k3s-io organization membership not team membership for trivy scans
        [(#&#8203;10940)](https://redirect.github.com/k3s-io/k3s/pull/10940)\n-   Bump
        kine to v0.13.0 [(#&#8203;10932)](https://redirect.github.com/k3s-io/k3s/pull/10932)\n
        \   -   Kine has been bumped to v0.13.0. This release includes changes that
        should enhance performance when using postgres as an external DB. The updated
        schema will be automatically used for new databases; to migrate to the new
        schema on existing databases, K3s can be started with the `KINE_SCHEMA_MIGRATION=2`
        environment variable set.\n-   Fix trivy report download [(#&#8203;10943)](https://redirect.github.com/k3s-io/k3s/pull/10943)\n-
        \  Trivy workflow: Specify GH_REPO env to use gh cli [(#&#8203;10949)](https://redirect.github.com/k3s-io/k3s/pull/10949)\n-
        \  Bump Trivy version [(#&#8203;10924)](https://redirect.github.com/k3s-io/k3s/pull/10924)\n-
        \  Bump traefik to chart 27.0.2 [(#&#8203;10939)](https://redirect.github.com/k3s-io/k3s/pull/10939)\n-
        \  Pass Rancher's VEX report to Trivy to remove known false-positives CVEs
        [(#&#8203;10956)](https://redirect.github.com/k3s-io/k3s/pull/10956)\n-   Fix
        trivy vex line [(#&#8203;10970)](https://redirect.github.com/k3s-io/k3s/pull/10970)\n-
        \  Add user path to runtimes search [(#&#8203;10953)](https://redirect.github.com/k3s-io/k3s/pull/10953)\n
        \   -   Runtimes detection will now use $PATH\n-   Bump to new wharfie version
        [(#&#8203;10971)](https://redirect.github.com/k3s-io/k3s/pull/10971)\n-   Update
        README.md [(#&#8203;10523)](https://redirect.github.com/k3s-io/k3s/pull/10523)\n-
        \  Remove trailing whitespace [(#&#8203;9362)](https://redirect.github.com/k3s-io/k3s/pull/9362)\n-
        \  Bump kine to v0.13.2 [(#&#8203;10978)](https://redirect.github.com/k3s-io/k3s/pull/10978)\n-
        \  Allow configuration of Rootlesskit's CopyUpDirs through an environment
        variable [(#&#8203;10386)](https://redirect.github.com/k3s-io/k3s/pull/10386)\n
        \   -   Add new environment variable \"K3S_ROOTLESS_COPYUPDIRS\" to add folders
        to the Rootlesskit configuration.\n-   Fix race condition when multiple nodes
        reconcile S3 snapshots [(#&#8203;10979)](https://redirect.github.com/k3s-io/k3s/pull/10979)\n-
        \  Bump Trivy version [(#&#8203;10996)](https://redirect.github.com/k3s-io/k3s/pull/10996)\n-
        \  Add ca-cert rotation integration test, and fix ca-cert rotation [(#&#8203;11013)](https://redirect.github.com/k3s-io/k3s/pull/11013)\n-
        \  Add e2e test which verifies traffic policies and firewall in services [(#&#8203;10972)](https://redirect.github.com/k3s-io/k3s/pull/10972)\n-
        \  Update tcpproxy for import path change [(#&#8203;11029)](https://redirect.github.com/k3s-io/k3s/pull/11029)\n-
        \  Bump Local Path Provisioner version [(#&#8203;10862)](https://redirect.github.com/k3s-io/k3s/pull/10862)\n-
        \  Bump local-path-provisioner to v0.0.30 [(#&#8203;11049)](https://redirect.github.com/k3s-io/k3s/pull/11049)\n-
        \  Bump helm-controller and klipper-helm [(#&#8203;11060)](https://redirect.github.com/k3s-io/k3s/pull/11060)\n-
        \  Bump containerd to v1.7.22 [(#&#8203;11067)](https://redirect.github.com/k3s-io/k3s/pull/11067)\n-
        \  Simplify svclb daemonset [(#&#8203;10954)](https://redirect.github.com/k3s-io/k3s/pull/10954)\n
        \   -   Stop using klipper-lb as the image for svclb. Replace it with a simple
        busybox which just sleeps\n-   Add the nvidia runtime cdi [(#&#8203;11065)](https://redirect.github.com/k3s-io/k3s/pull/11065)\n
        \   -   Add nvidia cdi runtime to the list of supported and discoverable runtimes\n-
        \  Bump Trivy version [(#&#8203;11103)](https://redirect.github.com/k3s-io/k3s/pull/11103)\n-
        \  Rollback GHA to Ubuntu 22.04 [(#&#8203;11111)](https://redirect.github.com/k3s-io/k3s/pull/11111)\n-
        \  Revert \"Make svclb as simple as possible\" [(#&#8203;11109)](https://redirect.github.com/k3s-io/k3s/pull/11109)\n-
        \  Fix Github Actions for Ubuntu-24.04 [(#&#8203;11112)](https://redirect.github.com/k3s-io/k3s/pull/11112)\n-
        \  Bump aquasecurity/trivy-action from 0.24.0 to 0.27.0 [(#&#8203;11105)](https://redirect.github.com/k3s-io/k3s/pull/11105)\n-
        \  Check the last 10 commits for upgrade E2E test [(#&#8203;11086)](https://redirect.github.com/k3s-io/k3s/pull/11086)\n-
        \  Bump aquasecurity/trivy-action from 0.27.0 to 0.28.0 [(#&#8203;11138)](https://redirect.github.com/k3s-io/k3s/pull/11138)\n-
        \  Fixes \"file exists\" error from CNI bins when upgrading k3s [(#&#8203;11123)](https://redirect.github.com/k3s-io/k3s/pull/11123)\n-
        \  Reduce the number of GH api request for E2E nightly [(#&#8203;11148)](https://redirect.github.com/k3s-io/k3s/pull/11148)\n-
        \  Update Kubernetes to v1.31.2-k3s1 and Go 1.22.8 [(#&#8203;11163)](https://redirect.github.com/k3s-io/k3s/pull/11163)\n-
        \  Update stable channel to v1.30.6+k3s1 [(#&#8203;11186)](https://redirect.github.com/k3s-io/k3s/pull/11186)\n-
        \  Fix timeout when defragmenting etcd on startup [(#&#8203;11164)](https://redirect.github.com/k3s-io/k3s/pull/11164)\n-
        \  Capture all fedora atomic variants in install script [(#&#8203;11170)](https://redirect.github.com/k3s-io/k3s/pull/11170)\n
        \   -   Allow easier installation of k3s on all variants of fedora atomic
        that use rpm-ostree\n-   Typo fixes in contributing.md [(#&#8203;11201)](https://redirect.github.com/k3s-io/k3s/pull/11201)\n-
        \  Bump Trivy version [(#&#8203;11206)](https://redirect.github.com/k3s-io/k3s/pull/11206)\n-
        \  Pin vagrant to older version to avoid known issue 13527 [(#&#8203;11226)](https://redirect.github.com/k3s-io/k3s/pull/11226)\n-
        \  Set kine EmulatedETCDVersion from embedded etcd version [(#&#8203;11221)](https://redirect.github.com/k3s-io/k3s/pull/11221)\n-
        \  Add nonroot-devices flag to agent CLI [(#&#8203;11200)](https://redirect.github.com/k3s-io/k3s/pull/11200)\n
        \   -   `Device_ownership_from_security_context` can now be enabled in the
        containerd CRI config by setting the `--nonroot-devices` flag or config key.\n-
        \  Bump runc to v1.2 [(#&#8203;10896)](https://redirect.github.com/k3s-io/k3s/pull/10896)\n-
        \  Update flannel and base cni plugins version [(#&#8203;11188)](https://redirect.github.com/k3s-io/k3s/pull/11188)\n-
        \  Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 [(#&#8203;11236)](https://redirect.github.com/k3s-io/k3s/pull/11236)\n-
        \  Fix MustFindString returning override flags on external CLI commands [(#&#8203;11237)](https://redirect.github.com/k3s-io/k3s/pull/11237)\n-
        \  Bump containerd to v1.7.23-k3s1 to fix registry rewrite token scopes [(#&#8203;11238)](https://redirect.github.com/k3s-io/k3s/pull/11238)\n-
        \  Fix the \"Standalone\"-mode of oidc-login in the wrapped kubectl library
        [(#&#8203;11266)](https://redirect.github.com/k3s-io/k3s/pull/11266)\n    -
        \  Fixes 'no Auth Provider found for name \"oidc\"' when using oidc-login
        in standalone mode.\n-   Bump K3s-root version to v0.14.1 [(#&#8203;11282)](https://redirect.github.com/k3s-io/k3s/pull/11282)\n-
        \  Bump kine [(#&#8203;11277)](https://redirect.github.com/k3s-io/k3s/pull/11277)\n-
        \  Bump kine for mysql connection close fix [(#&#8203;11305)](https://redirect.github.com/k3s-io/k3s/pull/11305)\n-
        \  Fix handling of wrapped subcommands when run with a path [(#&#8203;11306)](https://redirect.github.com/k3s-io/k3s/pull/11306)\n-
        \  Fix updatecli config for klipper and helm-controller [(#&#8203;11290)](https://redirect.github.com/k3s-io/k3s/pull/11290)\n-
        \  Fix issue with loadbalancer failover to default server [(#&#8203;11319)](https://redirect.github.com/k3s-io/k3s/pull/11319)\n-
        \  Update `localstorage_int_test.go` reference [(#&#8203;11339)](https://redirect.github.com/k3s-io/k3s/pull/11339)\n
        \   -   Update `localstorage_int_test.go` reference in `tests/integration/README.md`\n-
        \  Add  to the output command to be consistent with the product command [(#&#8203;11345)](https://redirect.github.com/k3s-io/k3s/pull/11345)\n-
        \  Allow install script to print error on failed binary download [(#&#8203;11335)](https://redirect.github.com/k3s-io/k3s/pull/11335)\n-
        \  Remove the go toolchain line [(#&#8203;11358)](https://redirect.github.com/k3s-io/k3s/pull/11358)\n-
        \  Add ubuntu 24.04 apt command for e2e test [(#&#8203;11361)](https://redirect.github.com/k3s-io/k3s/pull/11361)\n-
        \  Bump Trivy version [(#&#8203;11360)](https://redirect.github.com/k3s-io/k3s/pull/11360)\n-
        \  Bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 [(#&#8203;11364)](https://redirect.github.com/k3s-io/k3s/pull/11364)\n-
        \  Convert legacy docker tests from bash to golang [(#&#8203;11357)](https://redirect.github.com/k3s-io/k3s/pull/11357)\n-
        \  Update Kubernetes to v1.31.3-k3s1 [(#&#8203;11373)](https://redirect.github.com/k3s-io/k3s/pull/11373)\n-
        \  Fix Branch Name logic for Dependabot and UpdateCLI pushes to k3s-io [(#&#8203;11376)](https://redirect.github.com/k3s-io/k3s/pull/11376)\n-
        \  Fix INSTALL_K3S_PR support [(#&#8203;11383)](https://redirect.github.com/k3s-io/k3s/pull/11383)\n-
        \  Fix etcd backup/restore test and add guardrail for etcd-snapshot [(#&#8203;11314)](https://redirect.github.com/k3s-io/k3s/pull/11314)\n-
        \  Bump containerd to -k3s2 to fix rewrites [(#&#8203;11401)](https://redirect.github.com/k3s-io/k3s/pull/11401)\n-
        \  Fix opensuse-leap install test [(#&#8203;11379)](https://redirect.github.com/k3s-io/k3s/pull/11379)\n-
        \  Fix secrets-encrypt reencrypt timeout error [(#&#8203;11385)](https://redirect.github.com/k3s-io/k3s/pull/11385)\n-
        \  Rework loadbalancer server selection logic [(#&#8203;11329)](https://redirect.github.com/k3s-io/k3s/pull/11329)\n-
        \  Remove experimental from embedded-registry flag [(#&#8203;11443)](https://redirect.github.com/k3s-io/k3s/pull/11443)\n-
        \  Update stable channel to v1.31.3+k3s1 [(#&#8203;11436)](https://redirect.github.com/k3s-io/k3s/pull/11436)\n-
        \  Fix agent tunnel address with dedicated supervisor port [(#&#8203;11427)](https://redirect.github.com/k3s-io/k3s/pull/11427)\n-
        \  Update coredns to 1.12.0 [(#&#8203;11387)](https://redirect.github.com/k3s-io/k3s/pull/11387)\n-
        \  Bump Trivy version [(#&#8203;11430)](https://redirect.github.com/k3s-io/k3s/pull/11430)\n-
        \  Update to v1.31.4-k3s1 and Go 1.22.9 [(#&#8203;11463)](https://redirect.github.com/k3s-io/k3s/pull/11463)\n-
        \  Bump alpine from 3.20 to 3.21 in /conformance [(#&#8203;11433)](https://redirect.github.com/k3s-io/k3s/pull/11433)\n-
        \  Fix docker check warnings [(#&#8203;11474)](https://redirect.github.com/k3s-io/k3s/pull/11474)\n-
        \  Update stable channel to v1.31.4+k3s1 [(#&#8203;11483)](https://redirect.github.com/k3s-io/k3s/pull/11483)\n-
        \  V1.32.0+k3s1 [(#&#8203;11478)](https://redirect.github.com/k3s-io/k3s/pull/11478)\n-
        \  Switch to using kubelet config file for all supported flags [(#&#8203;10433)](https://redirect.github.com/k3s-io/k3s/pull/10433)\n-
        \  Load kernel modules for nft in agent setup [(#&#8203;11527)](https://redirect.github.com/k3s-io/k3s/pull/11527)\n\n####
        Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
        | [v1.32.0](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1320)
        |\n| Kine | [v0.13.5](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.5)
        |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
        Etcd | [v3.5.16-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.16-k3s1)
        |\n| Containerd | [v1.7.23-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v1.7.23-k3s2)
        |\n| Runc | [v1.2.1-k3s1](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.1-k3s1)
        |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
        |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
        |\n| Traefik | [v2.11.10](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.10)
        |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
        |\n| Helm-controller | [v0.16.5](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.5)
        |\n| Local-path-provisioner | [v0.0.30](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.30)
        |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback from
        our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
        \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
        documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on how
        to get started or to dive deep into K3s.\n-   [Read how you can contribute
        here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
        [`v1.31.9+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.9%2Bk3s1):
        v1.31.9+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.8+k3s1...v1.31.9+k3s1)\n\n<!--
        v1.31.9+k3s1 -->\n\nThis release updates Kubernetes to v1.31.9, and fixes
        a number of issues.\n\nFor more details on what's new, see the [Kubernetes
        release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1318).\n\n####
        Changes since v1.31.8+k3s1:\n\n-   Testing backports for 2025 May [(#&#8203;12234)](https://redirect.github.com/k3s-io/k3s/pull/12234)\n-
        \  Backports for May [(#&#8203;12317)](https://redirect.github.com/k3s-io/k3s/pull/12317)\n-
        \  Backports for 2025-05 [(#&#8203;12328)](https://redirect.github.com/k3s-io/k3s/pull/12328)\n-
        \  Fix authorization-config/authentication-config handling [(#&#8203;12346)](https://redirect.github.com/k3s-io/k3s/pull/12346)\n-
        \  Fix secretsencrypt race conditions [(#&#8203;12357)](https://redirect.github.com/k3s-io/k3s/pull/12357)\n-
        \  Update to v1.31.9-k3s1 and Go 1.23.8 [(#&#8203;12363)](https://redirect.github.com/k3s-io/k3s/pull/12363)\n-
        \  Fix startup e2e test [(#&#8203;12371)](https://redirect.github.com/k3s-io/k3s/pull/12371)\n\n####
        Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
        | [v1.31.9](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1319)
        |\n| Kine | [v0.13.15](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.15)
        |\n| SQLite | [3.49.1](https://sqlite.org/releaselog/3\\_49\\_1.html) |\n|
        Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
        |\n| Containerd | [v2.0.5-k3s1.32](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.5-k3s1.32)
        |\n| Runc | [v1.2.6](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.6)
        |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
        |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
        |\n| Traefik | [v2.11.24](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.24)
        |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
        |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
        |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
        |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback from
        our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
        \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
        documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on how
        to get started or to dive deep into K3s.\n-   [Read how you can contribute
        here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
        [`v1.31.8+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.8%2Bk3s1):
        v1.31.8+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.7+k3s1...v1.31.8+k3s1)\n\n<!--
        v1.31.8+k3s1 -->\n\nThis release updates Kubernetes to v1.31.8, and fixes
        a number of issues.\n\nFor more details on what's new, see the [Kubernetes
        release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1317).\n\n####
        Changes since v1.31.7+k3s1:\n\n-   Migrate to UrfaveCLI v2 [(#&#8203;12030)](https://redirect.github.com/k3s-io/k3s/pull/12030)\n-
        \  Improve readiness polling on node startup [(#&#8203;12037)](https://redirect.github.com/k3s-io/k3s/pull/12037)\n-
        \  Fix issue caused by default authorization-mode apiserver arg [(#&#8203;12044)](https://redirect.github.com/k3s-io/k3s/pull/12044)\n-
        \  Cleanup anonymous and named volumes for docker tests ([#&#8203;12069](https://redirect.github.com/k3s-io/k3s/issues/12069))
        [(#&#8203;12076)](https://redirect.github.com/k3s-io/k3s/pull/12076)\n-   Add
        support for secretbox encryption provider with the `k3s secrets-encrypt` command
        [(#&#8203;12066)](https://redirect.github.com/k3s-io/k3s/pull/12066)\n    -
        \  Users can now configure secrets encryption to use `secretbox` provider
        by setting the `secrets-encryption-provider` flag.\n-   Add error in certificate
        check [(#&#8203;12097)](https://redirect.github.com/k3s-io/k3s/pull/12097)\n-
        \  Backports for 2025-04 [(#&#8203;12105)](https://redirect.github.com/k3s-io/k3s/pull/12105)\n-
        \  Bump kine for nats-server/v2 CVE-2025-30215 [(#&#8203;12142)](https://redirect.github.com/k3s-io/k3s/pull/12142)\n-
        \  Drone Test Split and Reduction [(#&#8203;12150)](https://redirect.github.com/k3s-io/k3s/pull/12150)\n-
        \  More backports for 2025-04 [(#&#8203;12168)](https://redirect.github.com/k3s-io/k3s/pull/12168)\n-
        \  Fix handler panic when bootstrapper returns empty peer list [(#&#8203;12179)](https://redirect.github.com/k3s-io/k3s/pull/12179)\n-
        \  Bump traefik to v2.11.24 [(#&#8203;12190)](https://redirect.github.com/k3s-io/k3s/pull/12190)\n-
        \  Update to v1.31.8-k3s1 and Go 1.23.6 [(#&#8203;12207)](https://redirect.github.com/k3s-io/k3s/pull/12207)\n\n####
        Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
        | [v1.31.8](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1318)
        |\n| Kine | [v0.13.14](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.14)
        |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
        Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
        |\n| Containerd | [v2.0.4-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s2)
        |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
        |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
        |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
        |\n| Traefik | [v2.11.24](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.24)
        |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
        |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
        |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
        |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback from
        our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
        \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
        documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on how
        to get started or to dive deep into K3s.\n-   [Read how you can contribute
        here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
        [`v1.31.7+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.7%2Bk3s1):
        v1.31.7+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.6+k3s1...v1.31.7+k3s1)\n\n<!--
        v1.31.7+k3s1 -->\n\nThis release updates Kubernetes to v1.31.7, and fixes
        a number of issues.\n\nFor more details on what's new, see the [Kubernetes
        release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1316).\n\n####
        Changes since v1.31.6+k3s1:\n\n-   Revert \"Add ability to pass configuration
        options to flannel backend\" [(#&#8203;11868)](https://redirect.github.com/k3s-io/k3s/pull/11868)\n-
        \  Backport Docker + E2E testing PRs for 2025 March [(#&#8203;11887)](https://redirect.github.com/k3s-io/k3s/pull/11887)\n-
        \  Backports for 2025-03 [(#&#8203;11920)](https://redirect.github.com/k3s-io/k3s/pull/11920)\n-
        \  Bump klipper-lb to v0.4.13 [(#&#8203;11927)](https://redirect.github.com/k3s-io/k3s/pull/11927)\n-
        \  Fix syncing empty list of apiserver addresses during initial startup [(#&#8203;11954)](https://redirect.github.com/k3s-io/k3s/pull/11954)\n-
        \  Update to v1.31.7-k3s1 [(#&#8203;11958)](https://redirect.github.com/k3s-io/k3s/pull/11958)\n-
        \  Fix skew test for release candidates [(#&#8203;11990)](https://redirect.github.com/k3s-io/k3s/pull/11990)\n-
        \  Bump to containerd v2.0.4 [(#&#8203;12004)](https://redirect.github.com/k3s-io/k3s/pull/12004)\n-
        \  Fix upgrade test container version [(#&#8203;11999)](https://redirect.github.com/k3s-io/k3s/pull/11999)\n\n####
        Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
        | [v1.31.7](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1317)
        |\n| Kine | [v0.13.9](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.9)
        |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
        Etcd | [v3.5.19-k3s1.30](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.19-k3s1.30)
        |\n| Containerd | [v2.0.4-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s2)
        |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
        |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
        |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
        |\n| Traefik | [v2.11.20](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.20)
        |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
        |\n| Helm-controller | [v0.16.6](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.6)
        |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
        |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback from
        our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
        \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
        documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on how
        to get started or to dive deep into K3s.\n-   [Read how you can contribute
        here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
        [`v1.31.6+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.6%2Bk3s1):
        v1.31.6+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.5+k3s1...v1.31.6+k3s1)\n\n<!--
        v1.31.6+k3s1 -->\n\nThis release updates Kubernetes to v1.31.6, and fixes
        a number of issues.\n\nFor more details on what's new, see the [Kubernetes
        release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1315).\n\n####
        Changes since v1.31.5+k3s1:\n\n-   Correct the k3s token command help [(#&#8203;11685)](https://redirect.github.com/k3s-io/k3s/pull/11685)\n-
        \  Jan 2025 Testing Overhaul, E2E to Docker Migration, [(#&#8203;11724)](https://redirect.github.com/k3s-io/k3s/pull/11724)\n-
        \  Backports for 2025-02 [(#&#8203;11732)](https://redirect.github.com/k3s-io/k3s/pull/11732)\n
        \   -   Align the CLI-reported default `--etcd-snapshot-dir` value with the
        actual one (`server`, `etcd-snapshot` commands).\n    -   Disable s3 transport
        transparent compression/decompression\n    -   Etcd snapshot backup/restore
        now supports loading s3 credentials from an AWS SDK shared credentials file.\n
        \   -   Bump klipper-helm to v0.9.4\n    -   Bump klipper-lb to v0.4.10\n
        \   -   Bump spegel to v0.0.30\n    -   Bump local-path-provisioner to v0.0.31\n
        \   -   Bump kine to v0.13.8\n    -   Bump etcd to v3.5.18\n    -   Bump traefik
        to 2.11.20\n    -   Containerd has been bumped to version 2.0.\n    -   The
        containerd config templates for linux and windows have been consolidated and
        are no longer os-specific.\n    -   Containerd 2.0 uses a new config file
        schema. If you are using a custom containerd config template, you should migrate
        your template to `config-v3.toml.tmpl` to switch to the new version. See the
        [upstream documentation](https://redirect.github.com/containerd/containerd/blob/release/2.0/docs/cri/config.md)
        for more information.\n-   Bump traefik to v2.11.20 [(#&#8203;11763)](https://redirect.github.com/k3s-io/k3s/pull/11763)\n-
        \  Update to v1.31.6-k3s1 and Go 1.22.12 [(#&#8203;11787)](https://redirect.github.com/k3s-io/k3s/pull/11787)\n-
        \  Render CNI dir config whenever vars are set [(#&#8203;11820)](https://redirect.github.com/k3s-io/k3s/pull/11820)\n-
        \  Bump containerd for go-cni deadlock fix [(#&#8203;11834)](https://redirect.github.com/k3s-io/k3s/pull/11834)\n\n####
        Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
        | [v1.31.6](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)
        |\n| Kine | [v0.13.9](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.9)
        |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
        Etcd | [v3.5.18-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.18-k3s1)
        |\n| Containerd | [v2.0.2-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.2-k3s2)
        |\n| Runc | [v1.2.4-k3s2](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.4-k3s2)
        |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
        |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
        |\n| Traefik | [v2.11.20](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.20)
        |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
        |\n| Helm-controller | [v0.16.6](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.6)
        |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
        |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback from
        our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
        \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
        documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on how
        to get started or to dive deep into K3s.\n-   [Read how you can contribute
        here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
        [`v1.31.5+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.5%2Bk3s1):
        v1.31.5+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.4+k3s1...v1.31.5+k3s1)\n\n<!--
        v1.31.5+k3s1 -->\n\nThis release updates Kubernetes to v1.31.5, and fixes
        a number of issues.\n\nFor more details on what's new, see the [Kubernetes
        release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1314).\n\n####
        Changes since v1.31.4+k3s1:\n\n-   Add guardrail for etcd-snapshot [(#&#8203;11393)](https://redirect.github.com/k3s-io/k3s/pull/11393)\n-
        \  Backports for 2025-01 [(#&#8203;11566)](https://redirect.github.com/k3s-io/k3s/pull/11566)\n-
        \  Add auto import images for containerd image store [(#&#8203;11562)](https://redirect.github.com/k3s-io/k3s/pull/11562)\n-
        \  2025 January Backports [(#&#8203;11588)](https://redirect.github.com/k3s-io/k3s/pull/11588)\n-
        \  Load kernel modules for nft in agent setup [(#&#8203;11596)](https://redirect.github.com/k3s-io/k3s/pull/11596)\n-
        \  Fix local password validation when bind-address is set [(#&#8203;11611)](https://redirect.github.com/k3s-io/k3s/pull/11611)\n-
        \  Update to v1.31.5-k3s1 and Go 1.22.10 [(#&#8203;11621)](https://redirect.github.com/k3s-io/k3s/pull/11621)\n-
        \  Remove local restriction for deferred node password validation [(#&#8203;11649)](https://redirect.github.com/k3s-io/k3s/pull/11649)\n\n####
        Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
        | [v1.31.5](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)
        |\n| Kine | [v0.13.5](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.5)
        |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
        Etcd | [v3.5.16-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.16-k3s1)
        |\n| Containerd | [v1.7.23-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v1.7.23-k3s2)
        |\n| Runc | [v1.2.4-k3s1](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.4-k3s1)
        |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
        |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
        |\n| Traefik | [v2.11.18](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.18)
        |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
        |\n| Helm-controller | [v0.16.5](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.5)
        |\n| Local-path-provisioner | [v0.0.30](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.30)
        |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback from
        our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
        \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
        documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on how
        to get started or to dive deep into K3s.\n-   [Read how you can contribute
        here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n####
        What's Changed\n\n-   \\[release-1.31] Remove local restriction for deferred
        node password validation by [@&#8203;brandond](https://redirect.github.com/brandond)
        in [https://github.com/k3s-io/k3s/pull/11649](https://redirect.github.com/k3s-io/k3s/pull/11649)\n\n**Full
        Changelog**: https://github.com/k3s-io/k3s/compare/v1.31.5-rc1+k3s1...v1.31.5+k3s1\n\n###
        [`v1.31.4+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.4%2Bk3s1):
        v1.31.4+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.3+k3s1...v1.31.4+k3s1)\n\n<!--
        v1.31.4+k3s1 -->\n\nThis release updates Kubernetes to v1.31.4, and fixes
        a number of issues.\n\nFor more details on what's new, see the [Kubernetes
        release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1313).\n\n#####
        Changes since v1.31.3+k3s1\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
        **Schedule**: Branch creation - At any time (no schedule defined), Automerge
        - At any time (no schedule defined).\n\n\U0001F6A6 **Automerge**: Disabled
        by config. Please merge this manually once you are satisfied.\n\n\u267B **Rebasing**:
        Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n\U0001F515
        **Ignore**: Close this PR and you won't be reminded about this update again.\n\n---\n\n
        - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this
        box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).
        View the [repository job log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjcuMyIsInVwZGF0ZWRJblZlciI6IjQwLjE2LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
      change_url: https://github.com/osism/release/pull/1884
      child_jobs: []
      commit_id: 91662de9fc2c9ddf675d28e41dd1344ae719fa8d
      event_id: 68652dc0-3a63-11f0-8413-a7a48bcb1d9f
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/c6cefcf35688435694fbb2c1daf11e40/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/c6cefcf35688435694fbb2c1daf11e40/work/logs
        result_data_file: /var/lib/zuul/builds/c6cefcf35688435694fbb2c1daf11e40/work/results.json
        src_root: /var/lib/zuul/builds/c6cefcf35688435694fbb2c1daf11e40/work/src
        work_root: /var/lib/zuul/builds/c6cefcf35688435694fbb2c1daf11e40/work
      include_vars: []
      items:
      - branch: main
        change: '1884'
        change_message: "chore(deps): update dependency k3s-io/k3s to v1.33.1+k3s1\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [k3s-io/k3s](https://redirect.github.com/k3s-io/k3s) | minor | `v1.30.10+k3s1`
          -> `v1.33.1+k3s1` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>k3s-io/k3s
          (k3s-io/k3s)</summary>\n\n### [`v1.33.1+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.33.1%2Bk3s1):
          v1.33.1+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.33.0+k3s1...v1.33.1+k3s1)\n\n<!--
          v1.33.1+k3s1 -->\n\nThis release updates Kubernetes to v1.33.1, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#changelog-since-v1330).\n\n####
          Changes since v1.33.0+k3s1:\n\n-   Backports for May [(#&#8203;12319)](https://redirect.github.com/k3s-io/k3s/pull/12319)\n-
          \  Backports for 2025-05 [(#&#8203;12325)](https://redirect.github.com/k3s-io/k3s/pull/12325)\n-
          \  Fix authorization-config/authentication-config handling [(#&#8203;12344)](https://redirect.github.com/k3s-io/k3s/pull/12344)\n-
          \  Fix secretsencrypt race conditions [(#&#8203;12355)](https://redirect.github.com/k3s-io/k3s/pull/12355)\n-
          \  Update to v1.33.1-k3s1 [(#&#8203;12360)](https://redirect.github.com/k3s-io/k3s/pull/12360)\n-
          \  Fix startup e2e test [(#&#8203;12370)](https://redirect.github.com/k3s-io/k3s/pull/12370)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.33.1](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#v1331)
          |\n| Kine | [v0.13.15](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.15)
          |\n| SQLite | [3.49.1](https://sqlite.org/releaselog/3\\_49\\_1.html) |\n|
          Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
          |\n| Containerd | [v2.0.5-k3s1](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.5-k3s1)
          |\n| Runc | [v1.2.6](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.6)
          |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v3.3.6](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.6)
          |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
          |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.33.0+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.33.0%2Bk3s1):
          v1.33.0+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.5+k3s1...v1.33.0+k3s1)\n\n<!--
          v1.33.0+k3s1 -->\n\nThis release updates Kubernetes to v1.33.0, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#changelog-since-v1324).\n\n#####
          Changes since v1.32.4+k3s1\n\n-   Build k3s overhaul [(#&#8203;12200)](https://redirect.github.com/k3s-io/k3s/pull/12200)\n-
          \  Fix sonobuoy conformance testing [(#&#8203;12214)](https://redirect.github.com/k3s-io/k3s/pull/12214)\n-
          \  Update k8s version to 1.33 [(#&#8203;12221)](https://redirect.github.com/k3s-io/k3s/pull/12221)\n-
          \  Remove ghcr from drone [(#&#8203;12229)](https://redirect.github.com/k3s-io/k3s/pull/12229)\n\n#####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.33.0](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.33.md#v1330)
          |\n| Kine | [v0.13.14](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.14)
          |\n| SQLite | [v3.49.2](https://sqlite.org/releaselog/3\\_49\\_2.html) |\n|
          Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
          |\n| Containerd | [v2.0.4-k3s4](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s4)
          |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
          |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v3.3.6](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.6)
          |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
          |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n##### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.32.5+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.5%2Bk3s1):
          v1.32.5+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.4+k3s1...v1.32.5+k3s1)\n\n<!--
          v1.32.5+k3s1 -->\n\nThis release updates Kubernetes to v1.32.5, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1324).\n\n#####
          Changes since v1.32.4+k3s1:\n\n-   Testing backports for 2025 May [(#&#8203;12233)](https://redirect.github.com/k3s-io/k3s/pull/12233)\n-
          \  Backports for May [(#&#8203;12318)](https://redirect.github.com/k3s-io/k3s/pull/12318)\n-
          \  Backports for 2025-05 [(#&#8203;12327)](https://redirect.github.com/k3s-io/k3s/pull/12327)\n-
          \  Fix authorization-config/authentication-config handling [(#&#8203;12345)](https://redirect.github.com/k3s-io/k3s/pull/12345)\n-
          \  Fix secretsencrypt race conditions [(#&#8203;12356)](https://redirect.github.com/k3s-io/k3s/pull/12356)\n-
          \  Fix startup e2e test [(#&#8203;12359)](https://redirect.github.com/k3s-io/k3s/pull/12359)\n-
          \  Update to v1.32.5-k3s1 and Go 1.23.8 [(#&#8203;12361)](https://redirect.github.com/k3s-io/k3s/pull/12361)\n\n#####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.32.5](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1325)
          |\n| Kine | [v0.13.15](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.15)
          |\n| SQLite | [3.49.1](https://sqlite.org/releaselog/3\\_49\\_1.html) |\n|
          Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
          |\n| Containerd | [v2.0.5-k3s1.32](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.5-k3s1.32)
          |\n| Runc | [v1.2.6](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.6)
          |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v3.3.6](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.6)
          |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
          |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n##### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.32.4+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.4%2Bk3s1):
          v1.32.4+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.3+k3s1...v1.32.4+k3s1)\n\n<!--
          v1.32.4+k3s1 -->\n\nThis release updates Kubernetes to v1.32.4, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1323).\n\n####
          Changes since v1.32.3+k3s1:\n\n-   Migrate to UrfaveCLI v2 [(#&#8203;12031)](https://redirect.github.com/k3s-io/k3s/pull/12031)\n-
          \  Improve readiness polling on node startup [(#&#8203;12038)](https://redirect.github.com/k3s-io/k3s/pull/12038)\n-
          \  Fix issue caused by default authorization-mode apiserver arg [(#&#8203;12042)](https://redirect.github.com/k3s-io/k3s/pull/12042)\n-
          \  Fix flakey etcd startup tests [(#&#8203;12050)](https://redirect.github.com/k3s-io/k3s/pull/12050)\n-
          \  Cleanup anonymous and named volumes for docker tests [(#&#8203;12079)](https://redirect.github.com/k3s-io/k3s/pull/12079)\n-
          \  Add support for secretbox encryption provider with the `k3s secrets-encrypt`
          command [(#&#8203;12067)](https://redirect.github.com/k3s-io/k3s/pull/12067)\n
          \   -   Users can now configure secrets encryption to use `secretbox` provider
          by setting the `secrets-encryption-provider` flag.\n-   Add error in certificate
          check [(#&#8203;12098)](https://redirect.github.com/k3s-io/k3s/pull/12098)\n-
          \  Backports for 2025-04 [(#&#8203;12104)](https://redirect.github.com/k3s-io/k3s/pull/12104)\n-
          \  Bump kine for nats-server/v2 CVE-2025-30215 [(#&#8203;12141)](https://redirect.github.com/k3s-io/k3s/pull/12141)\n-
          \  Drone Test Split and Reduction [(#&#8203;12151)](https://redirect.github.com/k3s-io/k3s/pull/12151)\n-
          \  More backports for 2025-04 [(#&#8203;12167)](https://redirect.github.com/k3s-io/k3s/pull/12167)\n-
          \  Fix handler panic when bootstrapper returns empty peer list [(#&#8203;12178)](https://redirect.github.com/k3s-io/k3s/pull/12178)\n-
          \  Bump traefik to v3.3.6 [(#&#8203;12189)](https://redirect.github.com/k3s-io/k3s/pull/12189)\n-
          \  Update to v1.32.4-k3s1 and Go 1.23.6 [(#&#8203;12209)](https://redirect.github.com/k3s-io/k3s/pull/12209)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.32.4](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1324)
          |\n| Kine | [v0.13.14](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.14)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
          |\n| Containerd | [v2.0.4-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s2)
          |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
          |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v3.3.6](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.6)
          |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
          |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.32.3+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.3%2Bk3s1):
          v1.32.3+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.2+k3s1...v1.32.3+k3s1)\n\n<!--
          v1.32.3+k3s1 -->\n\nThis release updates Kubernetes to v1.32.3, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1322).\n\n####
          Changes since v1.32.2+k3s1:\n\n-   Revert \"Add ability to pass configuration
          options to flannel backend\" [(#&#8203;11867)](https://redirect.github.com/k3s-io/k3s/pull/11867)\n-
          \  Backport Docker + E2E testing PRs for 2025 March [(#&#8203;11888)](https://redirect.github.com/k3s-io/k3s/pull/11888)\n-
          \  Backports for 2025-03 [(#&#8203;11919)](https://redirect.github.com/k3s-io/k3s/pull/11919)\n-
          \  Bump klipper-lb image to v0.4.13 [(#&#8203;11930)](https://redirect.github.com/k3s-io/k3s/pull/11930)\n-
          \  Fix syncing empty list of apiserver addresses during initial startup
          [(#&#8203;11953)](https://redirect.github.com/k3s-io/k3s/pull/11953)\n-
          \  Update to v1.32.3-k3s1 [(#&#8203;11960)](https://redirect.github.com/k3s-io/k3s/pull/11960)\n-
          \  Update Kubernetes to v1.32.3-k3s2 [(#&#8203;11968)](https://redirect.github.com/k3s-io/k3s/pull/11968)\n-
          \  Fix skew test for release candidates [(#&#8203;11991)](https://redirect.github.com/k3s-io/k3s/pull/11991)\n-
          \  Bump to containerd v2.0.4 [(#&#8203;12003)](https://redirect.github.com/k3s-io/k3s/pull/12003)\n-
          \  Fix upgrade test container version [(#&#8203;12000)](https://redirect.github.com/k3s-io/k3s/pull/12000)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.32.3](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1323)
          |\n| Kine | [v0.13.9](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.9)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.19-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.19-k3s1)
          |\n| Containerd | [v2.0.4-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s2)
          |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v3.3.2](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.2)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.6](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.6)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.32.2+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.2%2Bk3s1):
          v1.32.2+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.1+k3s1...v1.32.2+k3s1)\n\n<!--
          v1.32.2+k3s1 -->\n\nThis release updates Kubernetes to v1.32.2, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1321).\n\n####
          Changes since v1.32.1+k3s1:\n\n-   Correct the k3s token command help [(#&#8203;11686)](https://redirect.github.com/k3s-io/k3s/pull/11686)\n-
          \  Jan 2025 Testing Overhaul, E2E to Docker Migration, [(#&#8203;11723)](https://redirect.github.com/k3s-io/k3s/pull/11723)\n-
          \  Backports for 2025-02 [(#&#8203;11730)](https://redirect.github.com/k3s-io/k3s/pull/11730)\n
          \   -   Align the CLI-reported default `--etcd-snapshot-dir` value with
          the actual one (`server`, `etcd-snapshot` commands).\n    -   Disable s3
          transport transparent compression/decompression\n    -   Etcd snapshot backup/restore
          now supports loading s3 credentials from an AWS SDK shared credentials file.\n
          \   -   Bump klipper-helm to v0.9.4\n    -   Bump klipper-lb to v0.4.10\n
          \   -   Bump spegel to v0.0.30\n    -   Bump local-path-provisioner to v0.0.31\n
          \   -   Bump kine to v0.13.8\n    -   Bump etcd to v3.5.18\n    -   Bump
          traefik to 3.3.2\n    -   Containerd has been bumped to version 2.0.\n    -
          \  The containerd config templates for linux and windows have been consolidated
          and are no longer os-specific.\n    -   Containerd 2.0 uses a new config
          file schema. If you are using a custom containerd config template, you should
          migrate your template to `config-v3.toml.tmpl` to switch to the new version.
          See the [upstream documentation](https://redirect.github.com/containerd/containerd/blob/release/2.0/docs/cri/config.md)
          for more information.\n-   Update to v1.32.2-k3s1 and Go 1.23.6 [(#&#8203;11788)](https://redirect.github.com/k3s-io/k3s/pull/11788)\n-
          \  Render CNI dir config whenever vars are set [(#&#8203;11819)](https://redirect.github.com/k3s-io/k3s/pull/11819)\n-
          \  Bump containerd for go-cni deadlock fix [(#&#8203;11833)](https://redirect.github.com/k3s-io/k3s/pull/11833)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.32.2](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1322)
          |\n| Kine | [v0.13.9](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.9)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.18-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.18-k3s1)
          |\n| Containerd | [v2.0.2-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.2-k3s2)
          |\n| Runc | [v1.2.4-k3s1](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.4-k3s1)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v3.3.2](https://redirect.github.com/traefik/traefik/releases/tag/v3.3.2)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.6](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.6)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.32.1+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.1%2Bk3s1):
          v1.32.1+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.32.0+k3s1...v1.32.1+k3s1)\n\n<!--
          v1.32.1+k3s1 -->\n\nThis release updates Kubernetes to v1.32.1, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1320).\n\n####
          Changes since v1.32.0+k3s1:\n\n-   Backports for 2025-01 [(#&#8203;11565)](https://redirect.github.com/k3s-io/k3s/pull/11565)\n-
          \  Add auto import images for containerd image store [(#&#8203;11563)](https://redirect.github.com/k3s-io/k3s/pull/11563)\n-
          \  2025 January Backports [(#&#8203;11583)](https://redirect.github.com/k3s-io/k3s/pull/11583)\n-
          \  Fix local password validation when bind-address is set [(#&#8203;11610)](https://redirect.github.com/k3s-io/k3s/pull/11610)\n-
          \  Update to v1.32.1-k3s1 and Go 1.23.4 [(#&#8203;11620)](https://redirect.github.com/k3s-io/k3s/pull/11620)\n-
          \  Remove local restriction for deferred node password validation [(#&#8203;11648)](https://redirect.github.com/k3s-io/k3s/pull/11648)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.32.1](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)
          |\n| Kine | [v0.13.5](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.5)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.16-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.16-k3s1)
          |\n| Containerd | [v1.7.23-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v1.7.23-k3s2)
          |\n| Runc | [v1.2.4-k3s1](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.4-k3s1)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.18](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.18)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.5](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.5)
          |\n| Local-path-provisioner | [v0.0.30](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.30)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n####
          What's Changed\n\n-   \\[release-1.32] Remove local restriction for deferred
          node password validation by [@&#8203;brandond](https://redirect.github.com/brandond)
          in [https://github.com/k3s-io/k3s/pull/11648](https://redirect.github.com/k3s-io/k3s/pull/11648)\n\n**Full
          Changelog**: https://github.com/k3s-io/k3s/compare/v1.32.1-rc1+k3s1...v1.32.1+k3s1\n\n###
          [`v1.32.0+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.32.0%2Bk3s1):
          v1.32.0+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.9+k3s1...v1.32.0+k3s1)\n\n<!--
          v1.32.0+k3s1 -->\n\nThis release is K3S's first in the v1.32 line. This
          release updates Kubernetes to v1.32.0.\n\nKubernetes 1.32 moves the `AuthorizeNodeWithSelectors`
          feature gate to Beta and on by default. See [KEP-4601](https://redirect.github.com/kubernetes/enhancements/blob/master/keps/sig-auth/4601-authorize-with-selectors/README.md)
          for more information.\n\nThis feature-gate breaks some of the RBAC that
          previous releases of K3s relied upon. The January releases of K3s v1.29,
          v1.30, and v1.31 will contain backported fixes. Until then, you must set
          `--kube-apiserver-arg=feature-gates=AuthorizeNodeWithSelectors=false` on
          server nodes, if you want to mix K3s v1.32 nodes with nodes of other versions
          (within the limits of what is supported by the [Kubernetes Version Skew
          Policy](https://kubernetes.io/releases/version-skew-policy/)).\n\nFor more
          details on what's new, see the [Kubernetes release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#changelog-since-v1310).\n\n####
          Changes since v1.31.4+k3s1:\n\n-   Fix rotateca validation failures when
          not touching default self-signed CAs [(#&#8203;10710)](https://redirect.github.com/k3s-io/k3s/pull/10710)\n-
          \  Bump runc to v1.1.13 [(#&#8203;10737)](https://redirect.github.com/k3s-io/k3s/pull/10737)\n-
          \  Update stable channel to v1.30.4+k3s1 [(#&#8203;10739)](https://redirect.github.com/k3s-io/k3s/pull/10739)\n-
          \  Fix deploy latest commit on E2E tests [(#&#8203;10725)](https://redirect.github.com/k3s-io/k3s/pull/10725)\n-
          \  Remove secrets encryption controller [(#&#8203;10612)](https://redirect.github.com/k3s-io/k3s/pull/10612)\n-
          \  Update kubernetes to v1.31.0-k3s3 [(#&#8203;10764)](https://redirect.github.com/k3s-io/k3s/pull/10764)\n-
          \  Bump traefik to v2.11.8 [(#&#8203;10779)](https://redirect.github.com/k3s-io/k3s/pull/10779)\n-
          \  Update coredns to 1.11.3 and metrics-server to 0.7.2 [(#&#8203;10760)](https://redirect.github.com/k3s-io/k3s/pull/10760)\n-
          \  Add trivy scanning to PR reports [(#&#8203;10758)](https://redirect.github.com/k3s-io/k3s/pull/10758)\n-
          \  Cover edge case when on new minor release for E2E upgrade test [(#&#8203;10781)](https://redirect.github.com/k3s-io/k3s/pull/10781)\n-
          \  Bump aquasecurity/trivy-action from 0.20.0 to 0.24.0 [(#&#8203;10795)](https://redirect.github.com/k3s-io/k3s/pull/10795)\n-
          \  Update CNI plugins version [(#&#8203;10798)](https://redirect.github.com/k3s-io/k3s/pull/10798)\n-
          \  Bump Sonobuoy version [(#&#8203;10792)](https://redirect.github.com/k3s-io/k3s/pull/10792)\n-
          \  Fix /trivy action running against target branch instead of PR branch
          [(#&#8203;10824)](https://redirect.github.com/k3s-io/k3s/pull/10824)\n-
          \  Launch private registry with init [(#&#8203;10822)](https://redirect.github.com/k3s-io/k3s/pull/10822)\n-
          \  Add channel for v1.31 [(#&#8203;10826)](https://redirect.github.com/k3s-io/k3s/pull/10826)\n-
          \  Bump containerd to v1.7.21, runc to v1.1.14 [(#&#8203;10805)](https://redirect.github.com/k3s-io/k3s/pull/10805)\n-
          \  Bump helm-controller for skip-verify/plain-http and updated tolerations
          [(#&#8203;10832)](https://redirect.github.com/k3s-io/k3s/pull/10832)\n-
          \  Tag PR image build as latest before scanning [(#&#8203;10825)](https://redirect.github.com/k3s-io/k3s/pull/10825)\n-
          \  Only clean up containerd hosts dirs managed by k3s [(#&#8203;10823)](https://redirect.github.com/k3s-io/k3s/pull/10823)\n-
          \  Remove otelgrpc pinned dependency [(#&#8203;10799)](https://redirect.github.com/k3s-io/k3s/pull/10799)\n-
          \  Add node-internal-dns/node-external-dns address pass-through support
          [(#&#8203;10852)](https://redirect.github.com/k3s-io/k3s/pull/10852)\n-
          \  Give good report if no CVEs found in trivy [(#&#8203;10853)](https://redirect.github.com/k3s-io/k3s/pull/10853)\n-
          \  Fix hosts.toml header var [(#&#8203;10870)](https://redirect.github.com/k3s-io/k3s/pull/10870)\n-
          \  Bump Trivy version [(#&#8203;10863)](https://redirect.github.com/k3s-io/k3s/pull/10863)\n-
          \  Add int test for flannel-ipv6masq [(#&#8203;10440)](https://redirect.github.com/k3s-io/k3s/pull/10440)\n-
          \  Bump Trivy version [(#&#8203;10899)](https://redirect.github.com/k3s-io/k3s/pull/10899)\n-
          \  Update Kubernetes to v1.31.1-k3s3 [(#&#8203;10911)](https://redirect.github.com/k3s-io/k3s/pull/10911)\n-
          \  Add MariaDB to CI [(#&#8203;10724)](https://redirect.github.com/k3s-io/k3s/pull/10724)\n-
          \  Update stable channel tov1.30.5+k3s1 [(#&#8203;10921)](https://redirect.github.com/k3s-io/k3s/pull/10921)\n-
          \  Use static CNI bin dir [(#&#8203;10868)](https://redirect.github.com/k3s-io/k3s/pull/10868)\n
          \   -   K3s now uses a stable directory for CNI binaries, which simplifies
          the installation of additional CNI plugins.\n-   Breakup trivy scan and
          check comment author [(#&#8203;10935)](https://redirect.github.com/k3s-io/k3s/pull/10935)\n-
          \  Fix getMembershipForUserInOrg call [(#&#8203;10937)](https://redirect.github.com/k3s-io/k3s/pull/10937)\n-
          \  Check k3s-io organization membership not team membership for trivy scans
          [(#&#8203;10940)](https://redirect.github.com/k3s-io/k3s/pull/10940)\n-
          \  Bump kine to v0.13.0 [(#&#8203;10932)](https://redirect.github.com/k3s-io/k3s/pull/10932)\n
          \   -   Kine has been bumped to v0.13.0. This release includes changes that
          should enhance performance when using postgres as an external DB. The updated
          schema will be automatically used for new databases; to migrate to the new
          schema on existing databases, K3s can be started with the `KINE_SCHEMA_MIGRATION=2`
          environment variable set.\n-   Fix trivy report download [(#&#8203;10943)](https://redirect.github.com/k3s-io/k3s/pull/10943)\n-
          \  Trivy workflow: Specify GH_REPO env to use gh cli [(#&#8203;10949)](https://redirect.github.com/k3s-io/k3s/pull/10949)\n-
          \  Bump Trivy version [(#&#8203;10924)](https://redirect.github.com/k3s-io/k3s/pull/10924)\n-
          \  Bump traefik to chart 27.0.2 [(#&#8203;10939)](https://redirect.github.com/k3s-io/k3s/pull/10939)\n-
          \  Pass Rancher's VEX report to Trivy to remove known false-positives CVEs
          [(#&#8203;10956)](https://redirect.github.com/k3s-io/k3s/pull/10956)\n-
          \  Fix trivy vex line [(#&#8203;10970)](https://redirect.github.com/k3s-io/k3s/pull/10970)\n-
          \  Add user path to runtimes search [(#&#8203;10953)](https://redirect.github.com/k3s-io/k3s/pull/10953)\n
          \   -   Runtimes detection will now use $PATH\n-   Bump to new wharfie version
          [(#&#8203;10971)](https://redirect.github.com/k3s-io/k3s/pull/10971)\n-
          \  Update README.md [(#&#8203;10523)](https://redirect.github.com/k3s-io/k3s/pull/10523)\n-
          \  Remove trailing whitespace [(#&#8203;9362)](https://redirect.github.com/k3s-io/k3s/pull/9362)\n-
          \  Bump kine to v0.13.2 [(#&#8203;10978)](https://redirect.github.com/k3s-io/k3s/pull/10978)\n-
          \  Allow configuration of Rootlesskit's CopyUpDirs through an environment
          variable [(#&#8203;10386)](https://redirect.github.com/k3s-io/k3s/pull/10386)\n
          \   -   Add new environment variable \"K3S_ROOTLESS_COPYUPDIRS\" to add
          folders to the Rootlesskit configuration.\n-   Fix race condition when multiple
          nodes reconcile S3 snapshots [(#&#8203;10979)](https://redirect.github.com/k3s-io/k3s/pull/10979)\n-
          \  Bump Trivy version [(#&#8203;10996)](https://redirect.github.com/k3s-io/k3s/pull/10996)\n-
          \  Add ca-cert rotation integration test, and fix ca-cert rotation [(#&#8203;11013)](https://redirect.github.com/k3s-io/k3s/pull/11013)\n-
          \  Add e2e test which verifies traffic policies and firewall in services
          [(#&#8203;10972)](https://redirect.github.com/k3s-io/k3s/pull/10972)\n-
          \  Update tcpproxy for import path change [(#&#8203;11029)](https://redirect.github.com/k3s-io/k3s/pull/11029)\n-
          \  Bump Local Path Provisioner version [(#&#8203;10862)](https://redirect.github.com/k3s-io/k3s/pull/10862)\n-
          \  Bump local-path-provisioner to v0.0.30 [(#&#8203;11049)](https://redirect.github.com/k3s-io/k3s/pull/11049)\n-
          \  Bump helm-controller and klipper-helm [(#&#8203;11060)](https://redirect.github.com/k3s-io/k3s/pull/11060)\n-
          \  Bump containerd to v1.7.22 [(#&#8203;11067)](https://redirect.github.com/k3s-io/k3s/pull/11067)\n-
          \  Simplify svclb daemonset [(#&#8203;10954)](https://redirect.github.com/k3s-io/k3s/pull/10954)\n
          \   -   Stop using klipper-lb as the image for svclb. Replace it with a
          simple busybox which just sleeps\n-   Add the nvidia runtime cdi [(#&#8203;11065)](https://redirect.github.com/k3s-io/k3s/pull/11065)\n
          \   -   Add nvidia cdi runtime to the list of supported and discoverable
          runtimes\n-   Bump Trivy version [(#&#8203;11103)](https://redirect.github.com/k3s-io/k3s/pull/11103)\n-
          \  Rollback GHA to Ubuntu 22.04 [(#&#8203;11111)](https://redirect.github.com/k3s-io/k3s/pull/11111)\n-
          \  Revert \"Make svclb as simple as possible\" [(#&#8203;11109)](https://redirect.github.com/k3s-io/k3s/pull/11109)\n-
          \  Fix Github Actions for Ubuntu-24.04 [(#&#8203;11112)](https://redirect.github.com/k3s-io/k3s/pull/11112)\n-
          \  Bump aquasecurity/trivy-action from 0.24.0 to 0.27.0 [(#&#8203;11105)](https://redirect.github.com/k3s-io/k3s/pull/11105)\n-
          \  Check the last 10 commits for upgrade E2E test [(#&#8203;11086)](https://redirect.github.com/k3s-io/k3s/pull/11086)\n-
          \  Bump aquasecurity/trivy-action from 0.27.0 to 0.28.0 [(#&#8203;11138)](https://redirect.github.com/k3s-io/k3s/pull/11138)\n-
          \  Fixes \"file exists\" error from CNI bins when upgrading k3s [(#&#8203;11123)](https://redirect.github.com/k3s-io/k3s/pull/11123)\n-
          \  Reduce the number of GH api request for E2E nightly [(#&#8203;11148)](https://redirect.github.com/k3s-io/k3s/pull/11148)\n-
          \  Update Kubernetes to v1.31.2-k3s1 and Go 1.22.8 [(#&#8203;11163)](https://redirect.github.com/k3s-io/k3s/pull/11163)\n-
          \  Update stable channel to v1.30.6+k3s1 [(#&#8203;11186)](https://redirect.github.com/k3s-io/k3s/pull/11186)\n-
          \  Fix timeout when defragmenting etcd on startup [(#&#8203;11164)](https://redirect.github.com/k3s-io/k3s/pull/11164)\n-
          \  Capture all fedora atomic variants in install script [(#&#8203;11170)](https://redirect.github.com/k3s-io/k3s/pull/11170)\n
          \   -   Allow easier installation of k3s on all variants of fedora atomic
          that use rpm-ostree\n-   Typo fixes in contributing.md [(#&#8203;11201)](https://redirect.github.com/k3s-io/k3s/pull/11201)\n-
          \  Bump Trivy version [(#&#8203;11206)](https://redirect.github.com/k3s-io/k3s/pull/11206)\n-
          \  Pin vagrant to older version to avoid known issue 13527 [(#&#8203;11226)](https://redirect.github.com/k3s-io/k3s/pull/11226)\n-
          \  Set kine EmulatedETCDVersion from embedded etcd version [(#&#8203;11221)](https://redirect.github.com/k3s-io/k3s/pull/11221)\n-
          \  Add nonroot-devices flag to agent CLI [(#&#8203;11200)](https://redirect.github.com/k3s-io/k3s/pull/11200)\n
          \   -   `Device_ownership_from_security_context` can now be enabled in the
          containerd CRI config by setting the `--nonroot-devices` flag or config
          key.\n-   Bump runc to v1.2 [(#&#8203;10896)](https://redirect.github.com/k3s-io/k3s/pull/10896)\n-
          \  Update flannel and base cni plugins version [(#&#8203;11188)](https://redirect.github.com/k3s-io/k3s/pull/11188)\n-
          \  Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 [(#&#8203;11236)](https://redirect.github.com/k3s-io/k3s/pull/11236)\n-
          \  Fix MustFindString returning override flags on external CLI commands
          [(#&#8203;11237)](https://redirect.github.com/k3s-io/k3s/pull/11237)\n-
          \  Bump containerd to v1.7.23-k3s1 to fix registry rewrite token scopes
          [(#&#8203;11238)](https://redirect.github.com/k3s-io/k3s/pull/11238)\n-
          \  Fix the \"Standalone\"-mode of oidc-login in the wrapped kubectl library
          [(#&#8203;11266)](https://redirect.github.com/k3s-io/k3s/pull/11266)\n    -
          \  Fixes 'no Auth Provider found for name \"oidc\"' when using oidc-login
          in standalone mode.\n-   Bump K3s-root version to v0.14.1 [(#&#8203;11282)](https://redirect.github.com/k3s-io/k3s/pull/11282)\n-
          \  Bump kine [(#&#8203;11277)](https://redirect.github.com/k3s-io/k3s/pull/11277)\n-
          \  Bump kine for mysql connection close fix [(#&#8203;11305)](https://redirect.github.com/k3s-io/k3s/pull/11305)\n-
          \  Fix handling of wrapped subcommands when run with a path [(#&#8203;11306)](https://redirect.github.com/k3s-io/k3s/pull/11306)\n-
          \  Fix updatecli config for klipper and helm-controller [(#&#8203;11290)](https://redirect.github.com/k3s-io/k3s/pull/11290)\n-
          \  Fix issue with loadbalancer failover to default server [(#&#8203;11319)](https://redirect.github.com/k3s-io/k3s/pull/11319)\n-
          \  Update `localstorage_int_test.go` reference [(#&#8203;11339)](https://redirect.github.com/k3s-io/k3s/pull/11339)\n
          \   -   Update `localstorage_int_test.go` reference in `tests/integration/README.md`\n-
          \  Add  to the output command to be consistent with the product command
          [(#&#8203;11345)](https://redirect.github.com/k3s-io/k3s/pull/11345)\n-
          \  Allow install script to print error on failed binary download [(#&#8203;11335)](https://redirect.github.com/k3s-io/k3s/pull/11335)\n-
          \  Remove the go toolchain line [(#&#8203;11358)](https://redirect.github.com/k3s-io/k3s/pull/11358)\n-
          \  Add ubuntu 24.04 apt command for e2e test [(#&#8203;11361)](https://redirect.github.com/k3s-io/k3s/pull/11361)\n-
          \  Bump Trivy version [(#&#8203;11360)](https://redirect.github.com/k3s-io/k3s/pull/11360)\n-
          \  Bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 [(#&#8203;11364)](https://redirect.github.com/k3s-io/k3s/pull/11364)\n-
          \  Convert legacy docker tests from bash to golang [(#&#8203;11357)](https://redirect.github.com/k3s-io/k3s/pull/11357)\n-
          \  Update Kubernetes to v1.31.3-k3s1 [(#&#8203;11373)](https://redirect.github.com/k3s-io/k3s/pull/11373)\n-
          \  Fix Branch Name logic for Dependabot and UpdateCLI pushes to k3s-io [(#&#8203;11376)](https://redirect.github.com/k3s-io/k3s/pull/11376)\n-
          \  Fix INSTALL_K3S_PR support [(#&#8203;11383)](https://redirect.github.com/k3s-io/k3s/pull/11383)\n-
          \  Fix etcd backup/restore test and add guardrail for etcd-snapshot [(#&#8203;11314)](https://redirect.github.com/k3s-io/k3s/pull/11314)\n-
          \  Bump containerd to -k3s2 to fix rewrites [(#&#8203;11401)](https://redirect.github.com/k3s-io/k3s/pull/11401)\n-
          \  Fix opensuse-leap install test [(#&#8203;11379)](https://redirect.github.com/k3s-io/k3s/pull/11379)\n-
          \  Fix secrets-encrypt reencrypt timeout error [(#&#8203;11385)](https://redirect.github.com/k3s-io/k3s/pull/11385)\n-
          \  Rework loadbalancer server selection logic [(#&#8203;11329)](https://redirect.github.com/k3s-io/k3s/pull/11329)\n-
          \  Remove experimental from embedded-registry flag [(#&#8203;11443)](https://redirect.github.com/k3s-io/k3s/pull/11443)\n-
          \  Update stable channel to v1.31.3+k3s1 [(#&#8203;11436)](https://redirect.github.com/k3s-io/k3s/pull/11436)\n-
          \  Fix agent tunnel address with dedicated supervisor port [(#&#8203;11427)](https://redirect.github.com/k3s-io/k3s/pull/11427)\n-
          \  Update coredns to 1.12.0 [(#&#8203;11387)](https://redirect.github.com/k3s-io/k3s/pull/11387)\n-
          \  Bump Trivy version [(#&#8203;11430)](https://redirect.github.com/k3s-io/k3s/pull/11430)\n-
          \  Update to v1.31.4-k3s1 and Go 1.22.9 [(#&#8203;11463)](https://redirect.github.com/k3s-io/k3s/pull/11463)\n-
          \  Bump alpine from 3.20 to 3.21 in /conformance [(#&#8203;11433)](https://redirect.github.com/k3s-io/k3s/pull/11433)\n-
          \  Fix docker check warnings [(#&#8203;11474)](https://redirect.github.com/k3s-io/k3s/pull/11474)\n-
          \  Update stable channel to v1.31.4+k3s1 [(#&#8203;11483)](https://redirect.github.com/k3s-io/k3s/pull/11483)\n-
          \  V1.32.0+k3s1 [(#&#8203;11478)](https://redirect.github.com/k3s-io/k3s/pull/11478)\n-
          \  Switch to using kubelet config file for all supported flags [(#&#8203;10433)](https://redirect.github.com/k3s-io/k3s/pull/10433)\n-
          \  Load kernel modules for nft in agent setup [(#&#8203;11527)](https://redirect.github.com/k3s-io/k3s/pull/11527)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.32.0](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1320)
          |\n| Kine | [v0.13.5](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.5)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.16-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.16-k3s1)
          |\n| Containerd | [v1.7.23-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v1.7.23-k3s2)
          |\n| Runc | [v1.2.1-k3s1](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.1-k3s1)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.10](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.10)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.5](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.5)
          |\n| Local-path-provisioner | [v0.0.30](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.30)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.31.9+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.9%2Bk3s1):
          v1.31.9+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.8+k3s1...v1.31.9+k3s1)\n\n<!--
          v1.31.9+k3s1 -->\n\nThis release updates Kubernetes to v1.31.9, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1318).\n\n####
          Changes since v1.31.8+k3s1:\n\n-   Testing backports for 2025 May [(#&#8203;12234)](https://redirect.github.com/k3s-io/k3s/pull/12234)\n-
          \  Backports for May [(#&#8203;12317)](https://redirect.github.com/k3s-io/k3s/pull/12317)\n-
          \  Backports for 2025-05 [(#&#8203;12328)](https://redirect.github.com/k3s-io/k3s/pull/12328)\n-
          \  Fix authorization-config/authentication-config handling [(#&#8203;12346)](https://redirect.github.com/k3s-io/k3s/pull/12346)\n-
          \  Fix secretsencrypt race conditions [(#&#8203;12357)](https://redirect.github.com/k3s-io/k3s/pull/12357)\n-
          \  Update to v1.31.9-k3s1 and Go 1.23.8 [(#&#8203;12363)](https://redirect.github.com/k3s-io/k3s/pull/12363)\n-
          \  Fix startup e2e test [(#&#8203;12371)](https://redirect.github.com/k3s-io/k3s/pull/12371)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.31.9](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1319)
          |\n| Kine | [v0.13.15](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.15)
          |\n| SQLite | [3.49.1](https://sqlite.org/releaselog/3\\_49\\_1.html) |\n|
          Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
          |\n| Containerd | [v2.0.5-k3s1.32](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.5-k3s1.32)
          |\n| Runc | [v1.2.6](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.6)
          |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.24](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.24)
          |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
          |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.31.8+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.8%2Bk3s1):
          v1.31.8+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.7+k3s1...v1.31.8+k3s1)\n\n<!--
          v1.31.8+k3s1 -->\n\nThis release updates Kubernetes to v1.31.8, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1317).\n\n####
          Changes since v1.31.7+k3s1:\n\n-   Migrate to UrfaveCLI v2 [(#&#8203;12030)](https://redirect.github.com/k3s-io/k3s/pull/12030)\n-
          \  Improve readiness polling on node startup [(#&#8203;12037)](https://redirect.github.com/k3s-io/k3s/pull/12037)\n-
          \  Fix issue caused by default authorization-mode apiserver arg [(#&#8203;12044)](https://redirect.github.com/k3s-io/k3s/pull/12044)\n-
          \  Cleanup anonymous and named volumes for docker tests ([#&#8203;12069](https://redirect.github.com/k3s-io/k3s/issues/12069))
          [(#&#8203;12076)](https://redirect.github.com/k3s-io/k3s/pull/12076)\n-
          \  Add support for secretbox encryption provider with the `k3s secrets-encrypt`
          command [(#&#8203;12066)](https://redirect.github.com/k3s-io/k3s/pull/12066)\n
          \   -   Users can now configure secrets encryption to use `secretbox` provider
          by setting the `secrets-encryption-provider` flag.\n-   Add error in certificate
          check [(#&#8203;12097)](https://redirect.github.com/k3s-io/k3s/pull/12097)\n-
          \  Backports for 2025-04 [(#&#8203;12105)](https://redirect.github.com/k3s-io/k3s/pull/12105)\n-
          \  Bump kine for nats-server/v2 CVE-2025-30215 [(#&#8203;12142)](https://redirect.github.com/k3s-io/k3s/pull/12142)\n-
          \  Drone Test Split and Reduction [(#&#8203;12150)](https://redirect.github.com/k3s-io/k3s/pull/12150)\n-
          \  More backports for 2025-04 [(#&#8203;12168)](https://redirect.github.com/k3s-io/k3s/pull/12168)\n-
          \  Fix handler panic when bootstrapper returns empty peer list [(#&#8203;12179)](https://redirect.github.com/k3s-io/k3s/pull/12179)\n-
          \  Bump traefik to v2.11.24 [(#&#8203;12190)](https://redirect.github.com/k3s-io/k3s/pull/12190)\n-
          \  Update to v1.31.8-k3s1 and Go 1.23.6 [(#&#8203;12207)](https://redirect.github.com/k3s-io/k3s/pull/12207)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.31.8](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1318)
          |\n| Kine | [v0.13.14](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.14)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.21-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.21-k3s1)
          |\n| Containerd | [v2.0.4-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s2)
          |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
          |\n| Flannel | [v0.26.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.26.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.24](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.24)
          |\n| CoreDNS | [v1.12.1](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.1)
          |\n| Helm-controller | [v0.16.10](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.10)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.31.7+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.7%2Bk3s1):
          v1.31.7+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.6+k3s1...v1.31.7+k3s1)\n\n<!--
          v1.31.7+k3s1 -->\n\nThis release updates Kubernetes to v1.31.7, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1316).\n\n####
          Changes since v1.31.6+k3s1:\n\n-   Revert \"Add ability to pass configuration
          options to flannel backend\" [(#&#8203;11868)](https://redirect.github.com/k3s-io/k3s/pull/11868)\n-
          \  Backport Docker + E2E testing PRs for 2025 March [(#&#8203;11887)](https://redirect.github.com/k3s-io/k3s/pull/11887)\n-
          \  Backports for 2025-03 [(#&#8203;11920)](https://redirect.github.com/k3s-io/k3s/pull/11920)\n-
          \  Bump klipper-lb to v0.4.13 [(#&#8203;11927)](https://redirect.github.com/k3s-io/k3s/pull/11927)\n-
          \  Fix syncing empty list of apiserver addresses during initial startup
          [(#&#8203;11954)](https://redirect.github.com/k3s-io/k3s/pull/11954)\n-
          \  Update to v1.31.7-k3s1 [(#&#8203;11958)](https://redirect.github.com/k3s-io/k3s/pull/11958)\n-
          \  Fix skew test for release candidates [(#&#8203;11990)](https://redirect.github.com/k3s-io/k3s/pull/11990)\n-
          \  Bump to containerd v2.0.4 [(#&#8203;12004)](https://redirect.github.com/k3s-io/k3s/pull/12004)\n-
          \  Fix upgrade test container version [(#&#8203;11999)](https://redirect.github.com/k3s-io/k3s/pull/11999)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.31.7](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1317)
          |\n| Kine | [v0.13.9](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.9)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.19-k3s1.30](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.19-k3s1.30)
          |\n| Containerd | [v2.0.4-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.4-k3s2)
          |\n| Runc | [v1.2.5](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.5)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.20](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.20)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.6](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.6)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.31.6+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.6%2Bk3s1):
          v1.31.6+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.5+k3s1...v1.31.6+k3s1)\n\n<!--
          v1.31.6+k3s1 -->\n\nThis release updates Kubernetes to v1.31.6, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1315).\n\n####
          Changes since v1.31.5+k3s1:\n\n-   Correct the k3s token command help [(#&#8203;11685)](https://redirect.github.com/k3s-io/k3s/pull/11685)\n-
          \  Jan 2025 Testing Overhaul, E2E to Docker Migration, [(#&#8203;11724)](https://redirect.github.com/k3s-io/k3s/pull/11724)\n-
          \  Backports for 2025-02 [(#&#8203;11732)](https://redirect.github.com/k3s-io/k3s/pull/11732)\n
          \   -   Align the CLI-reported default `--etcd-snapshot-dir` value with
          the actual one (`server`, `etcd-snapshot` commands).\n    -   Disable s3
          transport transparent compression/decompression\n    -   Etcd snapshot backup/restore
          now supports loading s3 credentials from an AWS SDK shared credentials file.\n
          \   -   Bump klipper-helm to v0.9.4\n    -   Bump klipper-lb to v0.4.10\n
          \   -   Bump spegel to v0.0.30\n    -   Bump local-path-provisioner to v0.0.31\n
          \   -   Bump kine to v0.13.8\n    -   Bump etcd to v3.5.18\n    -   Bump
          traefik to 2.11.20\n    -   Containerd has been bumped to version 2.0.\n
          \   -   The containerd config templates for linux and windows have been
          consolidated and are no longer os-specific.\n    -   Containerd 2.0 uses
          a new config file schema. If you are using a custom containerd config template,
          you should migrate your template to `config-v3.toml.tmpl` to switch to the
          new version. See the [upstream documentation](https://redirect.github.com/containerd/containerd/blob/release/2.0/docs/cri/config.md)
          for more information.\n-   Bump traefik to v2.11.20 [(#&#8203;11763)](https://redirect.github.com/k3s-io/k3s/pull/11763)\n-
          \  Update to v1.31.6-k3s1 and Go 1.22.12 [(#&#8203;11787)](https://redirect.github.com/k3s-io/k3s/pull/11787)\n-
          \  Render CNI dir config whenever vars are set [(#&#8203;11820)](https://redirect.github.com/k3s-io/k3s/pull/11820)\n-
          \  Bump containerd for go-cni deadlock fix [(#&#8203;11834)](https://redirect.github.com/k3s-io/k3s/pull/11834)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.31.6](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)
          |\n| Kine | [v0.13.9](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.9)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.18-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.18-k3s1)
          |\n| Containerd | [v2.0.2-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v2.0.2-k3s2)
          |\n| Runc | [v1.2.4-k3s2](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.4-k3s2)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.20](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.20)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.6](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.6)
          |\n| Local-path-provisioner | [v0.0.31](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.31)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n###
          [`v1.31.5+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.5%2Bk3s1):
          v1.31.5+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.4+k3s1...v1.31.5+k3s1)\n\n<!--
          v1.31.5+k3s1 -->\n\nThis release updates Kubernetes to v1.31.5, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1314).\n\n####
          Changes since v1.31.4+k3s1:\n\n-   Add guardrail for etcd-snapshot [(#&#8203;11393)](https://redirect.github.com/k3s-io/k3s/pull/11393)\n-
          \  Backports for 2025-01 [(#&#8203;11566)](https://redirect.github.com/k3s-io/k3s/pull/11566)\n-
          \  Add auto import images for containerd image store [(#&#8203;11562)](https://redirect.github.com/k3s-io/k3s/pull/11562)\n-
          \  2025 January Backports [(#&#8203;11588)](https://redirect.github.com/k3s-io/k3s/pull/11588)\n-
          \  Load kernel modules for nft in agent setup [(#&#8203;11596)](https://redirect.github.com/k3s-io/k3s/pull/11596)\n-
          \  Fix local password validation when bind-address is set [(#&#8203;11611)](https://redirect.github.com/k3s-io/k3s/pull/11611)\n-
          \  Update to v1.31.5-k3s1 and Go 1.22.10 [(#&#8203;11621)](https://redirect.github.com/k3s-io/k3s/pull/11621)\n-
          \  Remove local restriction for deferred node password validation [(#&#8203;11649)](https://redirect.github.com/k3s-io/k3s/pull/11649)\n\n####
          Embedded Component Versions\n\n| Component | Version |\n|---|---|\n| Kubernetes
          | [v1.31.5](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)
          |\n| Kine | [v0.13.5](https://redirect.github.com/k3s-io/kine/releases/tag/v0.13.5)
          |\n| SQLite | [3.46.1](https://sqlite.org/releaselog/3\\_46\\_1.html) |\n|
          Etcd | [v3.5.16-k3s1](https://redirect.github.com/k3s-io/etcd/releases/tag/v3.5.16-k3s1)
          |\n| Containerd | [v1.7.23-k3s2](https://redirect.github.com/k3s-io/containerd/releases/tag/v1.7.23-k3s2)
          |\n| Runc | [v1.2.4-k3s1](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.4-k3s1)
          |\n| Flannel | [v0.25.7](https://redirect.github.com/flannel-io/flannel/releases/tag/v0.25.7)
          |\n| Metrics-server | [v0.7.2](https://redirect.github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.2)
          |\n| Traefik | [v2.11.18](https://redirect.github.com/traefik/traefik/releases/tag/v2.11.18)
          |\n| CoreDNS | [v1.12.0](https://redirect.github.com/coredns/coredns/releases/tag/v1.12.0)
          |\n| Helm-controller | [v0.16.5](https://redirect.github.com/k3s-io/helm-controller/releases/tag/v0.16.5)
          |\n| Local-path-provisioner | [v0.0.30](https://redirect.github.com/rancher/local-path-provisioner/releases/tag/v0.0.30)
          |\n\n#### Helpful Links\n\nAs always, we welcome and appreciate feedback
          from our community of users. Please feel free to:\n\n-   [Open issues here](https://redirect.github.com/rancher/k3s/issues/new/choose)\n-
          \  [Join our Slack channel](https://slack.rancher.io/)\n-   [Check out our
          documentation](https://rancher.com/docs/k3s/latest/en/) for guidance on
          how to get started or to dive deep into K3s.\n-   [Read how you can contribute
          here](https://redirect.github.com/rancher/k3s/blob/master/CONTRIBUTING.md)\n\n####
          What's Changed\n\n-   \\[release-1.31] Remove local restriction for deferred
          node password validation by [@&#8203;brandond](https://redirect.github.com/brandond)
          in [https://github.com/k3s-io/k3s/pull/11649](https://redirect.github.com/k3s-io/k3s/pull/11649)\n\n**Full
          Changelog**: https://github.com/k3s-io/k3s/compare/v1.31.5-rc1+k3s1...v1.31.5+k3s1\n\n###
          [`v1.31.4+k3s1`](https://redirect.github.com/k3s-io/k3s/releases/tag/v1.31.4%2Bk3s1):
          v1.31.4+k3s1\n\n[Compare Source](https://redirect.github.com/k3s-io/k3s/compare/v1.31.3+k3s1...v1.31.4+k3s1)\n\n<!--
          v1.31.4+k3s1 -->\n\nThis release updates Kubernetes to v1.31.4, and fixes
          a number of issues.\n\nFor more details on what's new, see the [Kubernetes
          release notes](https://redirect.github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#changelog-since-v1313).\n\n#####
          Changes since v1.31.3+k3s1\n\n</details>\n\n---\n\n### Configuration\n\n\U0001F4C5
          **Schedule**: Branch creation - At any time (no schedule defined), Automerge
          - At any time (no schedule defined).\n\n\U0001F6A6 **Automerge**: Disabled
          by config. Please merge this manually once you are satisfied.\n\n\u267B
          **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry
          checkbox.\n\n\U0001F515 **Ignore**: Close this PR and you won't be reminded
          about this update again.\n\n---\n\n - [ ] <!-- rebase-check -->If you want
          to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated
          by [Mend Renovate](https://mend.io/renovate/). View the [repository job
          log](https://developer.mend.io/github/osism/release).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjcuMyIsInVwZGF0ZWRJblZlciI6IjQwLjE2LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/osism/release/pull/1884
        commit_id: 91662de9fc2c9ddf675d28e41dd1344ae719fa8d
        patchset: 91662de9fc2c9ddf675d28e41dd1344ae719fa8d
        project:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          name: osism/release
          short_name: release
          src_dir: src/github.com/osism/release
        topic: null
      job: yamllint
      jobtags: []
      max_attempts: 3
      message: Y2hvcmUoZGVwcyk6IHVwZGF0ZSBkZXBlbmRlbmN5IGszcy1pby9rM3MgdG8gdjEuMzMuMStrM3MxCgpUaGlzIFBSIGNvbnRhaW5zIHRoZSBmb2xsb3dpbmcgdXBkYXRlczoKCnwgUGFja2FnZSB8IFVwZGF0ZSB8IENoYW5nZSB8CnwtLS18LS0tfC0tLXwKfCBbazNzLWlvL2szc10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MpIHwgbWlub3IgfCBgdjEuMzAuMTArazNzMWAgLT4gYHYxLjMzLjErazNzMWAgfAoKLS0tCgojIyMgUmVsZWFzZSBOb3RlcwoKPGRldGFpbHM+CjxzdW1tYXJ5Pmszcy1pby9rM3MgKGszcy1pby9rM3MpPC9zdW1tYXJ5PgoKIyMjIFtgdjEuMzMuMStrM3MxYF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcmVsZWFzZXMvdGFnL3YxLjMzLjElMkJrM3MxKTogdjEuMzMuMStrM3MxCgpbQ29tcGFyZSBTb3VyY2VdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL2NvbXBhcmUvdjEuMzMuMCtrM3MxLi4udjEuMzMuMStrM3MxKQoKPCEtLSB2MS4zMy4xK2szczEgLS0+CgpUaGlzIHJlbGVhc2UgdXBkYXRlcyBLdWJlcm5ldGVzIHRvIHYxLjMzLjEsIGFuZCBmaXhlcyBhIG51bWJlciBvZiBpc3N1ZXMuCgpGb3IgbW9yZSBkZXRhaWxzIG9uIHdoYXQncyBuZXcsIHNlZSB0aGUgW0t1YmVybmV0ZXMgcmVsZWFzZSBub3Rlc10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9ibG9iL21hc3Rlci9DSEFOR0VMT0cvQ0hBTkdFTE9HLTEuMzMubWQjY2hhbmdlbG9nLXNpbmNlLXYxMzMwKS4KCiMjIyMgQ2hhbmdlcyBzaW5jZSB2MS4zMy4wK2szczE6CgotICAgQmFja3BvcnRzIGZvciBNYXkgWygjJiM4MjAzOzEyMzE5KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMjMxOSkKLSAgIEJhY2twb3J0cyBmb3IgMjAyNS0wNSBbKCMmIzgyMDM7MTIzMjUpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEyMzI1KQotICAgRml4IGF1dGhvcml6YXRpb24tY29uZmlnL2F1dGhlbnRpY2F0aW9uLWNvbmZpZyBoYW5kbGluZyBbKCMmIzgyMDM7MTIzNDQpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEyMzQ0KQotICAgRml4IHNlY3JldHNlbmNyeXB0IHJhY2UgY29uZGl0aW9ucyBbKCMmIzgyMDM7MTIzNTUpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEyMzU1KQotICAgVXBkYXRlIHRvIHYxLjMzLjEtazNzMSBbKCMmIzgyMDM7MTIzNjApXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEyMzYwKQotICAgRml4IHN0YXJ0dXAgZTJlIHRlc3QgWygjJiM4MjAzOzEyMzcwKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMjM3MCkKCiMjIyMgRW1iZWRkZWQgQ29tcG9uZW50IFZlcnNpb25zCgp8IENvbXBvbmVudCB8IFZlcnNpb24gfAp8LS0tfC0tLXwKfCBLdWJlcm5ldGVzIHwgW3YxLjMzLjFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvYmxvYi9tYXN0ZXIvQ0hBTkdFTE9HL0NIQU5HRUxPRy0xLjMzLm1kI3YxMzMxKSB8CnwgS2luZSB8IFt2MC4xMy4xNV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9raW5lL3JlbGVhc2VzL3RhZy92MC4xMy4xNSkgfAp8IFNRTGl0ZSB8IFszLjQ5LjFdKGh0dHBzOi8vc3FsaXRlLm9yZy9yZWxlYXNlbG9nLzNcXzQ5XF8xLmh0bWwpIHwKfCBFdGNkIHwgW3YzLjUuMjEtazNzMV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9ldGNkL3JlbGVhc2VzL3RhZy92My41LjIxLWszczEpIHwKfCBDb250YWluZXJkIHwgW3YyLjAuNS1rM3MxXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2NvbnRhaW5lcmQvcmVsZWFzZXMvdGFnL3YyLjAuNS1rM3MxKSB8CnwgUnVuYyB8IFt2MS4yLjZdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9vcGVuY29udGFpbmVycy9ydW5jL3JlbGVhc2VzL3RhZy92MS4yLjYpIHwKfCBGbGFubmVsIHwgW3YwLjI2LjddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9mbGFubmVsLWlvL2ZsYW5uZWwvcmVsZWFzZXMvdGFnL3YwLjI2LjcpIHwKfCBNZXRyaWNzLXNlcnZlciB8IFt2MC43LjJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzLXNpZ3MvbWV0cmljcy1zZXJ2ZXIvcmVsZWFzZXMvdGFnL3YwLjcuMikgfAp8IFRyYWVmaWsgfCBbdjMuMy42XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vdHJhZWZpay90cmFlZmlrL3JlbGVhc2VzL3RhZy92My4zLjYpIHwKfCBDb3JlRE5TIHwgW3YxLjEyLjFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jb3JlZG5zL2NvcmVkbnMvcmVsZWFzZXMvdGFnL3YxLjEyLjEpIHwKfCBIZWxtLWNvbnRyb2xsZXIgfCBbdjAuMTYuMTBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vaGVsbS1jb250cm9sbGVyL3JlbGVhc2VzL3RhZy92MC4xNi4xMCkgfAp8IExvY2FsLXBhdGgtcHJvdmlzaW9uZXIgfCBbdjAuMC4zMV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3JhbmNoZXIvbG9jYWwtcGF0aC1wcm92aXNpb25lci9yZWxlYXNlcy90YWcvdjAuMC4zMSkgfAoKIyMjIyBIZWxwZnVsIExpbmtzCgpBcyBhbHdheXMsIHdlIHdlbGNvbWUgYW5kIGFwcHJlY2lhdGUgZmVlZGJhY2sgZnJvbSBvdXIgY29tbXVuaXR5IG9mIHVzZXJzLiBQbGVhc2UgZmVlbCBmcmVlIHRvOgoKLSAgIFtPcGVuIGlzc3VlcyBoZXJlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcmFuY2hlci9rM3MvaXNzdWVzL25ldy9jaG9vc2UpCi0gICBbSm9pbiBvdXIgU2xhY2sgY2hhbm5lbF0oaHR0cHM6Ly9zbGFjay5yYW5jaGVyLmlvLykKLSAgIFtDaGVjayBvdXQgb3VyIGRvY3VtZW50YXRpb25dKGh0dHBzOi8vcmFuY2hlci5jb20vZG9jcy9rM3MvbGF0ZXN0L2VuLykgZm9yIGd1aWRhbmNlIG9uIGhvdyB0byBnZXQgc3RhcnRlZCBvciB0byBkaXZlIGRlZXAgaW50byBLM3MuCi0gICBbUmVhZCBob3cgeW91IGNhbiBjb250cmlidXRlIGhlcmVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yYW5jaGVyL2szcy9ibG9iL21hc3Rlci9DT05UUklCVVRJTkcubWQpCgojIyMgW2B2MS4zMy4wK2szczFgXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9yZWxlYXNlcy90YWcvdjEuMzMuMCUyQmszczEpOiB2MS4zMy4wK2szczEKCltDb21wYXJlIFNvdXJjZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvY29tcGFyZS92MS4zMi41K2szczEuLi52MS4zMy4wK2szczEpCgo8IS0tIHYxLjMzLjArazNzMSAtLT4KClRoaXMgcmVsZWFzZSB1cGRhdGVzIEt1YmVybmV0ZXMgdG8gdjEuMzMuMCwgYW5kIGZpeGVzIGEgbnVtYmVyIG9mIGlzc3Vlcy4KCkZvciBtb3JlIGRldGFpbHMgb24gd2hhdCdzIG5ldywgc2VlIHRoZSBbS3ViZXJuZXRlcyByZWxlYXNlIG5vdGVzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL2Jsb2IvbWFzdGVyL0NIQU5HRUxPRy9DSEFOR0VMT0ctMS4zMy5tZCNjaGFuZ2Vsb2ctc2luY2UtdjEzMjQpLgoKIyMjIyMgQ2hhbmdlcyBzaW5jZSB2MS4zMi40K2szczEKCi0gICBCdWlsZCBrM3Mgb3ZlcmhhdWwgWygjJiM4MjAzOzEyMjAwKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMjIwMCkKLSAgIEZpeCBzb25vYnVveSBjb25mb3JtYW5jZSB0ZXN0aW5nIFsoIyYjODIwMzsxMjIxNCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIyMTQpCi0gICBVcGRhdGUgazhzIHZlcnNpb24gdG8gMS4zMyBbKCMmIzgyMDM7MTIyMjEpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEyMjIxKQotICAgUmVtb3ZlIGdoY3IgZnJvbSBkcm9uZSBbKCMmIzgyMDM7MTIyMjkpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEyMjI5KQoKIyMjIyMgRW1iZWRkZWQgQ29tcG9uZW50IFZlcnNpb25zCgp8IENvbXBvbmVudCB8IFZlcnNpb24gfAp8LS0tfC0tLXwKfCBLdWJlcm5ldGVzIHwgW3YxLjMzLjBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvYmxvYi9tYXN0ZXIvQ0hBTkdFTE9HL0NIQU5HRUxPRy0xLjMzLm1kI3YxMzMwKSB8CnwgS2luZSB8IFt2MC4xMy4xNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9raW5lL3JlbGVhc2VzL3RhZy92MC4xMy4xNCkgfAp8IFNRTGl0ZSB8IFt2My40OS4yXShodHRwczovL3NxbGl0ZS5vcmcvcmVsZWFzZWxvZy8zXF80OVxfMi5odG1sKSB8CnwgRXRjZCB8IFt2My41LjIxLWszczFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vZXRjZC9yZWxlYXNlcy90YWcvdjMuNS4yMS1rM3MxKSB8CnwgQ29udGFpbmVyZCB8IFt2Mi4wLjQtazNzNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9jb250YWluZXJkL3JlbGVhc2VzL3RhZy92Mi4wLjQtazNzNCkgfAp8IFJ1bmMgfCBbdjEuMi41XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vb3BlbmNvbnRhaW5lcnMvcnVuYy9yZWxlYXNlcy90YWcvdjEuMi41KSB8CnwgRmxhbm5lbCB8IFt2MC4yNi43XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZmxhbm5lbC1pby9mbGFubmVsL3JlbGVhc2VzL3RhZy92MC4yNi43KSB8CnwgTWV0cmljcy1zZXJ2ZXIgfCBbdjAuNy4yXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy1zaWdzL21ldHJpY3Mtc2VydmVyL3JlbGVhc2VzL3RhZy92MC43LjIpIHwKfCBUcmFlZmlrIHwgW3YzLjMuNl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3RyYWVmaWsvdHJhZWZpay9yZWxlYXNlcy90YWcvdjMuMy42KSB8CnwgQ29yZUROUyB8IFt2MS4xMi4xXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY29yZWRucy9jb3JlZG5zL3JlbGVhc2VzL3RhZy92MS4xMi4xKSB8CnwgSGVsbS1jb250cm9sbGVyIHwgW3YwLjE2LjEwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2hlbG0tY29udHJvbGxlci9yZWxlYXNlcy90YWcvdjAuMTYuMTApIHwKfCBMb2NhbC1wYXRoLXByb3Zpc2lvbmVyIHwgW3YwLjAuMzFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yYW5jaGVyL2xvY2FsLXBhdGgtcHJvdmlzaW9uZXIvcmVsZWFzZXMvdGFnL3YwLjAuMzEpIHwKCiMjIyMjIEhlbHBmdWwgTGlua3MKCkFzIGFsd2F5cywgd2Ugd2VsY29tZSBhbmQgYXBwcmVjaWF0ZSBmZWVkYmFjayBmcm9tIG91ciBjb21tdW5pdHkgb2YgdXNlcnMuIFBsZWFzZSBmZWVsIGZyZWUgdG86CgotICAgW09wZW4gaXNzdWVzIGhlcmVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yYW5jaGVyL2szcy9pc3N1ZXMvbmV3L2Nob29zZSkKLSAgIFtKb2luIG91ciBTbGFjayBjaGFubmVsXShodHRwczovL3NsYWNrLnJhbmNoZXIuaW8vKQotICAgW0NoZWNrIG91dCBvdXIgZG9jdW1lbnRhdGlvbl0oaHR0cHM6Ly9yYW5jaGVyLmNvbS9kb2NzL2szcy9sYXRlc3QvZW4vKSBmb3IgZ3VpZGFuY2Ugb24gaG93IHRvIGdldCBzdGFydGVkIG9yIHRvIGRpdmUgZGVlcCBpbnRvIEszcy4KLSAgIFtSZWFkIGhvdyB5b3UgY2FuIGNvbnRyaWJ1dGUgaGVyZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3JhbmNoZXIvazNzL2Jsb2IvbWFzdGVyL0NPTlRSSUJVVElORy5tZCkKCiMjIyBbYHYxLjMyLjUrazNzMWBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3JlbGVhc2VzL3RhZy92MS4zMi41JTJCazNzMSk6IHYxLjMyLjUrazNzMQoKW0NvbXBhcmUgU291cmNlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9jb21wYXJlL3YxLjMyLjQrazNzMS4uLnYxLjMyLjUrazNzMSkKCjwhLS0gdjEuMzIuNStrM3MxIC0tPgoKVGhpcyByZWxlYXNlIHVwZGF0ZXMgS3ViZXJuZXRlcyB0byB2MS4zMi41LCBhbmQgZml4ZXMgYSBudW1iZXIgb2YgaXNzdWVzLgoKRm9yIG1vcmUgZGV0YWlscyBvbiB3aGF0J3MgbmV3LCBzZWUgdGhlIFtLdWJlcm5ldGVzIHJlbGVhc2Ugbm90ZXNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvYmxvYi9tYXN0ZXIvQ0hBTkdFTE9HL0NIQU5HRUxPRy0xLjMyLm1kI2NoYW5nZWxvZy1zaW5jZS12MTMyNCkuCgojIyMjIyBDaGFuZ2VzIHNpbmNlIHYxLjMyLjQrazNzMToKCi0gICBUZXN0aW5nIGJhY2twb3J0cyBmb3IgMjAyNSBNYXkgWygjJiM4MjAzOzEyMjMzKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMjIzMykKLSAgIEJhY2twb3J0cyBmb3IgTWF5IFsoIyYjODIwMzsxMjMxOCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIzMTgpCi0gICBCYWNrcG9ydHMgZm9yIDIwMjUtMDUgWygjJiM4MjAzOzEyMzI3KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMjMyNykKLSAgIEZpeCBhdXRob3JpemF0aW9uLWNvbmZpZy9hdXRoZW50aWNhdGlvbi1jb25maWcgaGFuZGxpbmcgWygjJiM4MjAzOzEyMzQ1KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMjM0NSkKLSAgIEZpeCBzZWNyZXRzZW5jcnlwdCByYWNlIGNvbmRpdGlvbnMgWygjJiM4MjAzOzEyMzU2KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMjM1NikKLSAgIEZpeCBzdGFydHVwIGUyZSB0ZXN0IFsoIyYjODIwMzsxMjM1OSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIzNTkpCi0gICBVcGRhdGUgdG8gdjEuMzIuNS1rM3MxIGFuZCBHbyAxLjIzLjggWygjJiM4MjAzOzEyMzYxKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMjM2MSkKCiMjIyMjIEVtYmVkZGVkIENvbXBvbmVudCBWZXJzaW9ucwoKfCBDb21wb25lbnQgfCBWZXJzaW9uIHwKfC0tLXwtLS18CnwgS3ViZXJuZXRlcyB8IFt2MS4zMi41XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL2Jsb2IvbWFzdGVyL0NIQU5HRUxPRy9DSEFOR0VMT0ctMS4zMi5tZCN2MTMyNSkgfAp8IEtpbmUgfCBbdjAuMTMuMTVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8va2luZS9yZWxlYXNlcy90YWcvdjAuMTMuMTUpIHwKfCBTUUxpdGUgfCBbMy40OS4xXShodHRwczovL3NxbGl0ZS5vcmcvcmVsZWFzZWxvZy8zXF80OVxfMS5odG1sKSB8CnwgRXRjZCB8IFt2My41LjIxLWszczFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vZXRjZC9yZWxlYXNlcy90YWcvdjMuNS4yMS1rM3MxKSB8CnwgQ29udGFpbmVyZCB8IFt2Mi4wLjUtazNzMS4zMl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9jb250YWluZXJkL3JlbGVhc2VzL3RhZy92Mi4wLjUtazNzMS4zMikgfAp8IFJ1bmMgfCBbdjEuMi42XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vb3BlbmNvbnRhaW5lcnMvcnVuYy9yZWxlYXNlcy90YWcvdjEuMi42KSB8CnwgRmxhbm5lbCB8IFt2MC4yNi43XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZmxhbm5lbC1pby9mbGFubmVsL3JlbGVhc2VzL3RhZy92MC4yNi43KSB8CnwgTWV0cmljcy1zZXJ2ZXIgfCBbdjAuNy4yXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy1zaWdzL21ldHJpY3Mtc2VydmVyL3JlbGVhc2VzL3RhZy92MC43LjIpIHwKfCBUcmFlZmlrIHwgW3YzLjMuNl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3RyYWVmaWsvdHJhZWZpay9yZWxlYXNlcy90YWcvdjMuMy42KSB8CnwgQ29yZUROUyB8IFt2MS4xMi4xXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY29yZWRucy9jb3JlZG5zL3JlbGVhc2VzL3RhZy92MS4xMi4xKSB8CnwgSGVsbS1jb250cm9sbGVyIHwgW3YwLjE2LjEwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2hlbG0tY29udHJvbGxlci9yZWxlYXNlcy90YWcvdjAuMTYuMTApIHwKfCBMb2NhbC1wYXRoLXByb3Zpc2lvbmVyIHwgW3YwLjAuMzFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yYW5jaGVyL2xvY2FsLXBhdGgtcHJvdmlzaW9uZXIvcmVsZWFzZXMvdGFnL3YwLjAuMzEpIHwKCiMjIyMjIEhlbHBmdWwgTGlua3MKCkFzIGFsd2F5cywgd2Ugd2VsY29tZSBhbmQgYXBwcmVjaWF0ZSBmZWVkYmFjayBmcm9tIG91ciBjb21tdW5pdHkgb2YgdXNlcnMuIFBsZWFzZSBmZWVsIGZyZWUgdG86CgotICAgW09wZW4gaXNzdWVzIGhlcmVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yYW5jaGVyL2szcy9pc3N1ZXMvbmV3L2Nob29zZSkKLSAgIFtKb2luIG91ciBTbGFjayBjaGFubmVsXShodHRwczovL3NsYWNrLnJhbmNoZXIuaW8vKQotICAgW0NoZWNrIG91dCBvdXIgZG9jdW1lbnRhdGlvbl0oaHR0cHM6Ly9yYW5jaGVyLmNvbS9kb2NzL2szcy9sYXRlc3QvZW4vKSBmb3IgZ3VpZGFuY2Ugb24gaG93IHRvIGdldCBzdGFydGVkIG9yIHRvIGRpdmUgZGVlcCBpbnRvIEszcy4KLSAgIFtSZWFkIGhvdyB5b3UgY2FuIGNvbnRyaWJ1dGUgaGVyZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3JhbmNoZXIvazNzL2Jsb2IvbWFzdGVyL0NPTlRSSUJVVElORy5tZCkKCiMjIyBbYHYxLjMyLjQrazNzMWBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3JlbGVhc2VzL3RhZy92MS4zMi40JTJCazNzMSk6IHYxLjMyLjQrazNzMQoKW0NvbXBhcmUgU291cmNlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9jb21wYXJlL3YxLjMyLjMrazNzMS4uLnYxLjMyLjQrazNzMSkKCjwhLS0gdjEuMzIuNCtrM3MxIC0tPgoKVGhpcyByZWxlYXNlIHVwZGF0ZXMgS3ViZXJuZXRlcyB0byB2MS4zMi40LCBhbmQgZml4ZXMgYSBudW1iZXIgb2YgaXNzdWVzLgoKRm9yIG1vcmUgZGV0YWlscyBvbiB3aGF0J3MgbmV3LCBzZWUgdGhlIFtLdWJlcm5ldGVzIHJlbGVhc2Ugbm90ZXNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvYmxvYi9tYXN0ZXIvQ0hBTkdFTE9HL0NIQU5HRUxPRy0xLjMyLm1kI2NoYW5nZWxvZy1zaW5jZS12MTMyMykuCgojIyMjIENoYW5nZXMgc2luY2UgdjEuMzIuMytrM3MxOgoKLSAgIE1pZ3JhdGUgdG8gVXJmYXZlQ0xJIHYyIFsoIyYjODIwMzsxMjAzMSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIwMzEpCi0gICBJbXByb3ZlIHJlYWRpbmVzcyBwb2xsaW5nIG9uIG5vZGUgc3RhcnR1cCBbKCMmIzgyMDM7MTIwMzgpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEyMDM4KQotICAgRml4IGlzc3VlIGNhdXNlZCBieSBkZWZhdWx0IGF1dGhvcml6YXRpb24tbW9kZSBhcGlzZXJ2ZXIgYXJnIFsoIyYjODIwMzsxMjA0MildKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIwNDIpCi0gICBGaXggZmxha2V5IGV0Y2Qgc3RhcnR1cCB0ZXN0cyBbKCMmIzgyMDM7MTIwNTApXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEyMDUwKQotICAgQ2xlYW51cCBhbm9ueW1vdXMgYW5kIG5hbWVkIHZvbHVtZXMgZm9yIGRvY2tlciB0ZXN0cyBbKCMmIzgyMDM7MTIwNzkpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEyMDc5KQotICAgQWRkIHN1cHBvcnQgZm9yIHNlY3JldGJveCBlbmNyeXB0aW9uIHByb3ZpZGVyIHdpdGggdGhlIGBrM3Mgc2VjcmV0cy1lbmNyeXB0YCBjb21tYW5kIFsoIyYjODIwMzsxMjA2NyldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIwNjcpCiAgICAtICAgVXNlcnMgY2FuIG5vdyBjb25maWd1cmUgc2VjcmV0cyBlbmNyeXB0aW9uIHRvIHVzZSBgc2VjcmV0Ym94YCBwcm92aWRlciBieSBzZXR0aW5nIHRoZSBgc2VjcmV0cy1lbmNyeXB0aW9uLXByb3ZpZGVyYCBmbGFnLgotICAgQWRkIGVycm9yIGluIGNlcnRpZmljYXRlIGNoZWNrIFsoIyYjODIwMzsxMjA5OCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIwOTgpCi0gICBCYWNrcG9ydHMgZm9yIDIwMjUtMDQgWygjJiM4MjAzOzEyMTA0KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMjEwNCkKLSAgIEJ1bXAga2luZSBmb3IgbmF0cy1zZXJ2ZXIvdjIgQ1ZFLTIwMjUtMzAyMTUgWygjJiM4MjAzOzEyMTQxKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMjE0MSkKLSAgIERyb25lIFRlc3QgU3BsaXQgYW5kIFJlZHVjdGlvbiBbKCMmIzgyMDM7MTIxNTEpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEyMTUxKQotICAgTW9yZSBiYWNrcG9ydHMgZm9yIDIwMjUtMDQgWygjJiM4MjAzOzEyMTY3KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMjE2NykKLSAgIEZpeCBoYW5kbGVyIHBhbmljIHdoZW4gYm9vdHN0cmFwcGVyIHJldHVybnMgZW1wdHkgcGVlciBsaXN0IFsoIyYjODIwMzsxMjE3OCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIxNzgpCi0gICBCdW1wIHRyYWVmaWsgdG8gdjMuMy42IFsoIyYjODIwMzsxMjE4OSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIxODkpCi0gICBVcGRhdGUgdG8gdjEuMzIuNC1rM3MxIGFuZCBHbyAxLjIzLjYgWygjJiM4MjAzOzEyMjA5KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMjIwOSkKCiMjIyMgRW1iZWRkZWQgQ29tcG9uZW50IFZlcnNpb25zCgp8IENvbXBvbmVudCB8IFZlcnNpb24gfAp8LS0tfC0tLXwKfCBLdWJlcm5ldGVzIHwgW3YxLjMyLjRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvYmxvYi9tYXN0ZXIvQ0hBTkdFTE9HL0NIQU5HRUxPRy0xLjMyLm1kI3YxMzI0KSB8CnwgS2luZSB8IFt2MC4xMy4xNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9raW5lL3JlbGVhc2VzL3RhZy92MC4xMy4xNCkgfAp8IFNRTGl0ZSB8IFszLjQ2LjFdKGh0dHBzOi8vc3FsaXRlLm9yZy9yZWxlYXNlbG9nLzNcXzQ2XF8xLmh0bWwpIHwKfCBFdGNkIHwgW3YzLjUuMjEtazNzMV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9ldGNkL3JlbGVhc2VzL3RhZy92My41LjIxLWszczEpIHwKfCBDb250YWluZXJkIHwgW3YyLjAuNC1rM3MyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2NvbnRhaW5lcmQvcmVsZWFzZXMvdGFnL3YyLjAuNC1rM3MyKSB8CnwgUnVuYyB8IFt2MS4yLjVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9vcGVuY29udGFpbmVycy9ydW5jL3JlbGVhc2VzL3RhZy92MS4yLjUpIHwKfCBGbGFubmVsIHwgW3YwLjI2LjddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9mbGFubmVsLWlvL2ZsYW5uZWwvcmVsZWFzZXMvdGFnL3YwLjI2LjcpIHwKfCBNZXRyaWNzLXNlcnZlciB8IFt2MC43LjJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzLXNpZ3MvbWV0cmljcy1zZXJ2ZXIvcmVsZWFzZXMvdGFnL3YwLjcuMikgfAp8IFRyYWVmaWsgfCBbdjMuMy42XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vdHJhZWZpay90cmFlZmlrL3JlbGVhc2VzL3RhZy92My4zLjYpIHwKfCBDb3JlRE5TIHwgW3YxLjEyLjFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jb3JlZG5zL2NvcmVkbnMvcmVsZWFzZXMvdGFnL3YxLjEyLjEpIHwKfCBIZWxtLWNvbnRyb2xsZXIgfCBbdjAuMTYuMTBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vaGVsbS1jb250cm9sbGVyL3JlbGVhc2VzL3RhZy92MC4xNi4xMCkgfAp8IExvY2FsLXBhdGgtcHJvdmlzaW9uZXIgfCBbdjAuMC4zMV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3JhbmNoZXIvbG9jYWwtcGF0aC1wcm92aXNpb25lci9yZWxlYXNlcy90YWcvdjAuMC4zMSkgfAoKIyMjIyBIZWxwZnVsIExpbmtzCgpBcyBhbHdheXMsIHdlIHdlbGNvbWUgYW5kIGFwcHJlY2lhdGUgZmVlZGJhY2sgZnJvbSBvdXIgY29tbXVuaXR5IG9mIHVzZXJzLiBQbGVhc2UgZmVlbCBmcmVlIHRvOgoKLSAgIFtPcGVuIGlzc3VlcyBoZXJlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcmFuY2hlci9rM3MvaXNzdWVzL25ldy9jaG9vc2UpCi0gICBbSm9pbiBvdXIgU2xhY2sgY2hhbm5lbF0oaHR0cHM6Ly9zbGFjay5yYW5jaGVyLmlvLykKLSAgIFtDaGVjayBvdXQgb3VyIGRvY3VtZW50YXRpb25dKGh0dHBzOi8vcmFuY2hlci5jb20vZG9jcy9rM3MvbGF0ZXN0L2VuLykgZm9yIGd1aWRhbmNlIG9uIGhvdyB0byBnZXQgc3RhcnRlZCBvciB0byBkaXZlIGRlZXAgaW50byBLM3MuCi0gICBbUmVhZCBob3cgeW91IGNhbiBjb250cmlidXRlIGhlcmVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yYW5jaGVyL2szcy9ibG9iL21hc3Rlci9DT05UUklCVVRJTkcubWQpCgojIyMgW2B2MS4zMi4zK2szczFgXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9yZWxlYXNlcy90YWcvdjEuMzIuMyUyQmszczEpOiB2MS4zMi4zK2szczEKCltDb21wYXJlIFNvdXJjZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvY29tcGFyZS92MS4zMi4yK2szczEuLi52MS4zMi4zK2szczEpCgo8IS0tIHYxLjMyLjMrazNzMSAtLT4KClRoaXMgcmVsZWFzZSB1cGRhdGVzIEt1YmVybmV0ZXMgdG8gdjEuMzIuMywgYW5kIGZpeGVzIGEgbnVtYmVyIG9mIGlzc3Vlcy4KCkZvciBtb3JlIGRldGFpbHMgb24gd2hhdCdzIG5ldywgc2VlIHRoZSBbS3ViZXJuZXRlcyByZWxlYXNlIG5vdGVzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL2Jsb2IvbWFzdGVyL0NIQU5HRUxPRy9DSEFOR0VMT0ctMS4zMi5tZCNjaGFuZ2Vsb2ctc2luY2UtdjEzMjIpLgoKIyMjIyBDaGFuZ2VzIHNpbmNlIHYxLjMyLjIrazNzMToKCi0gICBSZXZlcnQgIkFkZCBhYmlsaXR5IHRvIHBhc3MgY29uZmlndXJhdGlvbiBvcHRpb25zIHRvIGZsYW5uZWwgYmFja2VuZCIgWygjJiM4MjAzOzExODY3KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTg2NykKLSAgIEJhY2twb3J0IERvY2tlciArIEUyRSB0ZXN0aW5nIFBScyBmb3IgMjAyNSBNYXJjaCBbKCMmIzgyMDM7MTE4ODgpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExODg4KQotICAgQmFja3BvcnRzIGZvciAyMDI1LTAzIFsoIyYjODIwMzsxMTkxOSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE5MTkpCi0gICBCdW1wIGtsaXBwZXItbGIgaW1hZ2UgdG8gdjAuNC4xMyBbKCMmIzgyMDM7MTE5MzApXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExOTMwKQotICAgRml4IHN5bmNpbmcgZW1wdHkgbGlzdCBvZiBhcGlzZXJ2ZXIgYWRkcmVzc2VzIGR1cmluZyBpbml0aWFsIHN0YXJ0dXAgWygjJiM4MjAzOzExOTUzKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTk1MykKLSAgIFVwZGF0ZSB0byB2MS4zMi4zLWszczEgWygjJiM4MjAzOzExOTYwKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTk2MCkKLSAgIFVwZGF0ZSBLdWJlcm5ldGVzIHRvIHYxLjMyLjMtazNzMiBbKCMmIzgyMDM7MTE5NjgpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExOTY4KQotICAgRml4IHNrZXcgdGVzdCBmb3IgcmVsZWFzZSBjYW5kaWRhdGVzIFsoIyYjODIwMzsxMTk5MSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE5OTEpCi0gICBCdW1wIHRvIGNvbnRhaW5lcmQgdjIuMC40IFsoIyYjODIwMzsxMjAwMyldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIwMDMpCi0gICBGaXggdXBncmFkZSB0ZXN0IGNvbnRhaW5lciB2ZXJzaW9uIFsoIyYjODIwMzsxMjAwMCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIwMDApCgojIyMjIEVtYmVkZGVkIENvbXBvbmVudCBWZXJzaW9ucwoKfCBDb21wb25lbnQgfCBWZXJzaW9uIHwKfC0tLXwtLS18CnwgS3ViZXJuZXRlcyB8IFt2MS4zMi4zXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL2Jsb2IvbWFzdGVyL0NIQU5HRUxPRy9DSEFOR0VMT0ctMS4zMi5tZCN2MTMyMykgfAp8IEtpbmUgfCBbdjAuMTMuOV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9raW5lL3JlbGVhc2VzL3RhZy92MC4xMy45KSB8CnwgU1FMaXRlIHwgWzMuNDYuMV0oaHR0cHM6Ly9zcWxpdGUub3JnL3JlbGVhc2Vsb2cvM1xfNDZcXzEuaHRtbCkgfAp8IEV0Y2QgfCBbdjMuNS4xOS1rM3MxXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2V0Y2QvcmVsZWFzZXMvdGFnL3YzLjUuMTktazNzMSkgfAp8IENvbnRhaW5lcmQgfCBbdjIuMC40LWszczJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vY29udGFpbmVyZC9yZWxlYXNlcy90YWcvdjIuMC40LWszczIpIHwKfCBSdW5jIHwgW3YxLjIuNV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL29wZW5jb250YWluZXJzL3J1bmMvcmVsZWFzZXMvdGFnL3YxLjIuNSkgfAp8IEZsYW5uZWwgfCBbdjAuMjUuN10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2ZsYW5uZWwtaW8vZmxhbm5lbC9yZWxlYXNlcy90YWcvdjAuMjUuNykgfAp8IE1ldHJpY3Mtc2VydmVyIHwgW3YwLjcuMl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMtc2lncy9tZXRyaWNzLXNlcnZlci9yZWxlYXNlcy90YWcvdjAuNy4yKSB8CnwgVHJhZWZpayB8IFt2My4zLjJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS90cmFlZmlrL3RyYWVmaWsvcmVsZWFzZXMvdGFnL3YzLjMuMikgfAp8IENvcmVETlMgfCBbdjEuMTIuMF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NvcmVkbnMvY29yZWRucy9yZWxlYXNlcy90YWcvdjEuMTIuMCkgfAp8IEhlbG0tY29udHJvbGxlciB8IFt2MC4xNi42XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2hlbG0tY29udHJvbGxlci9yZWxlYXNlcy90YWcvdjAuMTYuNikgfAp8IExvY2FsLXBhdGgtcHJvdmlzaW9uZXIgfCBbdjAuMC4zMV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3JhbmNoZXIvbG9jYWwtcGF0aC1wcm92aXNpb25lci9yZWxlYXNlcy90YWcvdjAuMC4zMSkgfAoKIyMjIyBIZWxwZnVsIExpbmtzCgpBcyBhbHdheXMsIHdlIHdlbGNvbWUgYW5kIGFwcHJlY2lhdGUgZmVlZGJhY2sgZnJvbSBvdXIgY29tbXVuaXR5IG9mIHVzZXJzLiBQbGVhc2UgZmVlbCBmcmVlIHRvOgoKLSAgIFtPcGVuIGlzc3VlcyBoZXJlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcmFuY2hlci9rM3MvaXNzdWVzL25ldy9jaG9vc2UpCi0gICBbSm9pbiBvdXIgU2xhY2sgY2hhbm5lbF0oaHR0cHM6Ly9zbGFjay5yYW5jaGVyLmlvLykKLSAgIFtDaGVjayBvdXQgb3VyIGRvY3VtZW50YXRpb25dKGh0dHBzOi8vcmFuY2hlci5jb20vZG9jcy9rM3MvbGF0ZXN0L2VuLykgZm9yIGd1aWRhbmNlIG9uIGhvdyB0byBnZXQgc3RhcnRlZCBvciB0byBkaXZlIGRlZXAgaW50byBLM3MuCi0gICBbUmVhZCBob3cgeW91IGNhbiBjb250cmlidXRlIGhlcmVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yYW5jaGVyL2szcy9ibG9iL21hc3Rlci9DT05UUklCVVRJTkcubWQpCgojIyMgW2B2MS4zMi4yK2szczFgXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9yZWxlYXNlcy90YWcvdjEuMzIuMiUyQmszczEpOiB2MS4zMi4yK2szczEKCltDb21wYXJlIFNvdXJjZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvY29tcGFyZS92MS4zMi4xK2szczEuLi52MS4zMi4yK2szczEpCgo8IS0tIHYxLjMyLjIrazNzMSAtLT4KClRoaXMgcmVsZWFzZSB1cGRhdGVzIEt1YmVybmV0ZXMgdG8gdjEuMzIuMiwgYW5kIGZpeGVzIGEgbnVtYmVyIG9mIGlzc3Vlcy4KCkZvciBtb3JlIGRldGFpbHMgb24gd2hhdCdzIG5ldywgc2VlIHRoZSBbS3ViZXJuZXRlcyByZWxlYXNlIG5vdGVzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL2Jsb2IvbWFzdGVyL0NIQU5HRUxPRy9DSEFOR0VMT0ctMS4zMi5tZCNjaGFuZ2Vsb2ctc2luY2UtdjEzMjEpLgoKIyMjIyBDaGFuZ2VzIHNpbmNlIHYxLjMyLjErazNzMToKCi0gICBDb3JyZWN0IHRoZSBrM3MgdG9rZW4gY29tbWFuZCBoZWxwIFsoIyYjODIwMzsxMTY4NildKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE2ODYpCi0gICBKYW4gMjAyNSBUZXN0aW5nIE92ZXJoYXVsLCBFMkUgdG8gRG9ja2VyIE1pZ3JhdGlvbiwgWygjJiM4MjAzOzExNzIzKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTcyMykKLSAgIEJhY2twb3J0cyBmb3IgMjAyNS0wMiBbKCMmIzgyMDM7MTE3MzApXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExNzMwKQogICAgLSAgIEFsaWduIHRoZSBDTEktcmVwb3J0ZWQgZGVmYXVsdCBgLS1ldGNkLXNuYXBzaG90LWRpcmAgdmFsdWUgd2l0aCB0aGUgYWN0dWFsIG9uZSAoYHNlcnZlcmAsIGBldGNkLXNuYXBzaG90YCBjb21tYW5kcykuCiAgICAtICAgRGlzYWJsZSBzMyB0cmFuc3BvcnQgdHJhbnNwYXJlbnQgY29tcHJlc3Npb24vZGVjb21wcmVzc2lvbgogICAgLSAgIEV0Y2Qgc25hcHNob3QgYmFja3VwL3Jlc3RvcmUgbm93IHN1cHBvcnRzIGxvYWRpbmcgczMgY3JlZGVudGlhbHMgZnJvbSBhbiBBV1MgU0RLIHNoYXJlZCBjcmVkZW50aWFscyBmaWxlLgogICAgLSAgIEJ1bXAga2xpcHBlci1oZWxtIHRvIHYwLjkuNAogICAgLSAgIEJ1bXAga2xpcHBlci1sYiB0byB2MC40LjEwCiAgICAtICAgQnVtcCBzcGVnZWwgdG8gdjAuMC4zMAogICAgLSAgIEJ1bXAgbG9jYWwtcGF0aC1wcm92aXNpb25lciB0byB2MC4wLjMxCiAgICAtICAgQnVtcCBraW5lIHRvIHYwLjEzLjgKICAgIC0gICBCdW1wIGV0Y2QgdG8gdjMuNS4xOAogICAgLSAgIEJ1bXAgdHJhZWZpayB0byAzLjMuMgogICAgLSAgIENvbnRhaW5lcmQgaGFzIGJlZW4gYnVtcGVkIHRvIHZlcnNpb24gMi4wLgogICAgLSAgIFRoZSBjb250YWluZXJkIGNvbmZpZyB0ZW1wbGF0ZXMgZm9yIGxpbnV4IGFuZCB3aW5kb3dzIGhhdmUgYmVlbiBjb25zb2xpZGF0ZWQgYW5kIGFyZSBubyBsb25nZXIgb3Mtc3BlY2lmaWMuCiAgICAtICAgQ29udGFpbmVyZCAyLjAgdXNlcyBhIG5ldyBjb25maWcgZmlsZSBzY2hlbWEuIElmIHlvdSBhcmUgdXNpbmcgYSBjdXN0b20gY29udGFpbmVyZCBjb25maWcgdGVtcGxhdGUsIHlvdSBzaG91bGQgbWlncmF0ZSB5b3VyIHRlbXBsYXRlIHRvIGBjb25maWctdjMudG9tbC50bXBsYCB0byBzd2l0Y2ggdG8gdGhlIG5ldyB2ZXJzaW9uLiBTZWUgdGhlIFt1cHN0cmVhbSBkb2N1bWVudGF0aW9uXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY29udGFpbmVyZC9jb250YWluZXJkL2Jsb2IvcmVsZWFzZS8yLjAvZG9jcy9jcmkvY29uZmlnLm1kKSBmb3IgbW9yZSBpbmZvcm1hdGlvbi4KLSAgIFVwZGF0ZSB0byB2MS4zMi4yLWszczEgYW5kIEdvIDEuMjMuNiBbKCMmIzgyMDM7MTE3ODgpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExNzg4KQotICAgUmVuZGVyIENOSSBkaXIgY29uZmlnIHdoZW5ldmVyIHZhcnMgYXJlIHNldCBbKCMmIzgyMDM7MTE4MTkpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExODE5KQotICAgQnVtcCBjb250YWluZXJkIGZvciBnby1jbmkgZGVhZGxvY2sgZml4IFsoIyYjODIwMzsxMTgzMyldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE4MzMpCgojIyMjIEVtYmVkZGVkIENvbXBvbmVudCBWZXJzaW9ucwoKfCBDb21wb25lbnQgfCBWZXJzaW9uIHwKfC0tLXwtLS18CnwgS3ViZXJuZXRlcyB8IFt2MS4zMi4yXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL2Jsb2IvbWFzdGVyL0NIQU5HRUxPRy9DSEFOR0VMT0ctMS4zMi5tZCN2MTMyMikgfAp8IEtpbmUgfCBbdjAuMTMuOV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9raW5lL3JlbGVhc2VzL3RhZy92MC4xMy45KSB8CnwgU1FMaXRlIHwgWzMuNDYuMV0oaHR0cHM6Ly9zcWxpdGUub3JnL3JlbGVhc2Vsb2cvM1xfNDZcXzEuaHRtbCkgfAp8IEV0Y2QgfCBbdjMuNS4xOC1rM3MxXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2V0Y2QvcmVsZWFzZXMvdGFnL3YzLjUuMTgtazNzMSkgfAp8IENvbnRhaW5lcmQgfCBbdjIuMC4yLWszczJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vY29udGFpbmVyZC9yZWxlYXNlcy90YWcvdjIuMC4yLWszczIpIHwKfCBSdW5jIHwgW3YxLjIuNC1rM3MxXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vb3BlbmNvbnRhaW5lcnMvcnVuYy9yZWxlYXNlcy90YWcvdjEuMi40LWszczEpIHwKfCBGbGFubmVsIHwgW3YwLjI1LjddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9mbGFubmVsLWlvL2ZsYW5uZWwvcmVsZWFzZXMvdGFnL3YwLjI1LjcpIHwKfCBNZXRyaWNzLXNlcnZlciB8IFt2MC43LjJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzLXNpZ3MvbWV0cmljcy1zZXJ2ZXIvcmVsZWFzZXMvdGFnL3YwLjcuMikgfAp8IFRyYWVmaWsgfCBbdjMuMy4yXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vdHJhZWZpay90cmFlZmlrL3JlbGVhc2VzL3RhZy92My4zLjIpIHwKfCBDb3JlRE5TIHwgW3YxLjEyLjBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jb3JlZG5zL2NvcmVkbnMvcmVsZWFzZXMvdGFnL3YxLjEyLjApIHwKfCBIZWxtLWNvbnRyb2xsZXIgfCBbdjAuMTYuNl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9oZWxtLWNvbnRyb2xsZXIvcmVsZWFzZXMvdGFnL3YwLjE2LjYpIHwKfCBMb2NhbC1wYXRoLXByb3Zpc2lvbmVyIHwgW3YwLjAuMzFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yYW5jaGVyL2xvY2FsLXBhdGgtcHJvdmlzaW9uZXIvcmVsZWFzZXMvdGFnL3YwLjAuMzEpIHwKCiMjIyMgSGVscGZ1bCBMaW5rcwoKQXMgYWx3YXlzLCB3ZSB3ZWxjb21lIGFuZCBhcHByZWNpYXRlIGZlZWRiYWNrIGZyb20gb3VyIGNvbW11bml0eSBvZiB1c2Vycy4gUGxlYXNlIGZlZWwgZnJlZSB0bzoKCi0gICBbT3BlbiBpc3N1ZXMgaGVyZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3JhbmNoZXIvazNzL2lzc3Vlcy9uZXcvY2hvb3NlKQotICAgW0pvaW4gb3VyIFNsYWNrIGNoYW5uZWxdKGh0dHBzOi8vc2xhY2sucmFuY2hlci5pby8pCi0gICBbQ2hlY2sgb3V0IG91ciBkb2N1bWVudGF0aW9uXShodHRwczovL3JhbmNoZXIuY29tL2RvY3MvazNzL2xhdGVzdC9lbi8pIGZvciBndWlkYW5jZSBvbiBob3cgdG8gZ2V0IHN0YXJ0ZWQgb3IgdG8gZGl2ZSBkZWVwIGludG8gSzNzLgotICAgW1JlYWQgaG93IHlvdSBjYW4gY29udHJpYnV0ZSBoZXJlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcmFuY2hlci9rM3MvYmxvYi9tYXN0ZXIvQ09OVFJJQlVUSU5HLm1kKQoKIyMjIFtgdjEuMzIuMStrM3MxYF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcmVsZWFzZXMvdGFnL3YxLjMyLjElMkJrM3MxKTogdjEuMzIuMStrM3MxCgpbQ29tcGFyZSBTb3VyY2VdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL2NvbXBhcmUvdjEuMzIuMCtrM3MxLi4udjEuMzIuMStrM3MxKQoKPCEtLSB2MS4zMi4xK2szczEgLS0+CgpUaGlzIHJlbGVhc2UgdXBkYXRlcyBLdWJlcm5ldGVzIHRvIHYxLjMyLjEsIGFuZCBmaXhlcyBhIG51bWJlciBvZiBpc3N1ZXMuCgpGb3IgbW9yZSBkZXRhaWxzIG9uIHdoYXQncyBuZXcsIHNlZSB0aGUgW0t1YmVybmV0ZXMgcmVsZWFzZSBub3Rlc10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9ibG9iL21hc3Rlci9DSEFOR0VMT0cvQ0hBTkdFTE9HLTEuMzIubWQjY2hhbmdlbG9nLXNpbmNlLXYxMzIwKS4KCiMjIyMgQ2hhbmdlcyBzaW5jZSB2MS4zMi4wK2szczE6CgotICAgQmFja3BvcnRzIGZvciAyMDI1LTAxIFsoIyYjODIwMzsxMTU2NSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE1NjUpCi0gICBBZGQgYXV0byBpbXBvcnQgaW1hZ2VzIGZvciBjb250YWluZXJkIGltYWdlIHN0b3JlIFsoIyYjODIwMzsxMTU2MyldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE1NjMpCi0gICAyMDI1IEphbnVhcnkgQmFja3BvcnRzIFsoIyYjODIwMzsxMTU4MyldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE1ODMpCi0gICBGaXggbG9jYWwgcGFzc3dvcmQgdmFsaWRhdGlvbiB3aGVuIGJpbmQtYWRkcmVzcyBpcyBzZXQgWygjJiM4MjAzOzExNjEwKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTYxMCkKLSAgIFVwZGF0ZSB0byB2MS4zMi4xLWszczEgYW5kIEdvIDEuMjMuNCBbKCMmIzgyMDM7MTE2MjApXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExNjIwKQotICAgUmVtb3ZlIGxvY2FsIHJlc3RyaWN0aW9uIGZvciBkZWZlcnJlZCBub2RlIHBhc3N3b3JkIHZhbGlkYXRpb24gWygjJiM4MjAzOzExNjQ4KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTY0OCkKCiMjIyMgRW1iZWRkZWQgQ29tcG9uZW50IFZlcnNpb25zCgp8IENvbXBvbmVudCB8IFZlcnNpb24gfAp8LS0tfC0tLXwKfCBLdWJlcm5ldGVzIHwgW3YxLjMyLjFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvYmxvYi9tYXN0ZXIvQ0hBTkdFTE9HL0NIQU5HRUxPRy0xLjMyLm1kI3YxMzIxKSB8CnwgS2luZSB8IFt2MC4xMy41XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2tpbmUvcmVsZWFzZXMvdGFnL3YwLjEzLjUpIHwKfCBTUUxpdGUgfCBbMy40Ni4xXShodHRwczovL3NxbGl0ZS5vcmcvcmVsZWFzZWxvZy8zXF80NlxfMS5odG1sKSB8CnwgRXRjZCB8IFt2My41LjE2LWszczFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vZXRjZC9yZWxlYXNlcy90YWcvdjMuNS4xNi1rM3MxKSB8CnwgQ29udGFpbmVyZCB8IFt2MS43LjIzLWszczJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vY29udGFpbmVyZC9yZWxlYXNlcy90YWcvdjEuNy4yMy1rM3MyKSB8CnwgUnVuYyB8IFt2MS4yLjQtazNzMV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL29wZW5jb250YWluZXJzL3J1bmMvcmVsZWFzZXMvdGFnL3YxLjIuNC1rM3MxKSB8CnwgRmxhbm5lbCB8IFt2MC4yNS43XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZmxhbm5lbC1pby9mbGFubmVsL3JlbGVhc2VzL3RhZy92MC4yNS43KSB8CnwgTWV0cmljcy1zZXJ2ZXIgfCBbdjAuNy4yXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy1zaWdzL21ldHJpY3Mtc2VydmVyL3JlbGVhc2VzL3RhZy92MC43LjIpIHwKfCBUcmFlZmlrIHwgW3YyLjExLjE4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vdHJhZWZpay90cmFlZmlrL3JlbGVhc2VzL3RhZy92Mi4xMS4xOCkgfAp8IENvcmVETlMgfCBbdjEuMTIuMF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NvcmVkbnMvY29yZWRucy9yZWxlYXNlcy90YWcvdjEuMTIuMCkgfAp8IEhlbG0tY29udHJvbGxlciB8IFt2MC4xNi41XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2hlbG0tY29udHJvbGxlci9yZWxlYXNlcy90YWcvdjAuMTYuNSkgfAp8IExvY2FsLXBhdGgtcHJvdmlzaW9uZXIgfCBbdjAuMC4zMF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3JhbmNoZXIvbG9jYWwtcGF0aC1wcm92aXNpb25lci9yZWxlYXNlcy90YWcvdjAuMC4zMCkgfAoKIyMjIyBIZWxwZnVsIExpbmtzCgpBcyBhbHdheXMsIHdlIHdlbGNvbWUgYW5kIGFwcHJlY2lhdGUgZmVlZGJhY2sgZnJvbSBvdXIgY29tbXVuaXR5IG9mIHVzZXJzLiBQbGVhc2UgZmVlbCBmcmVlIHRvOgoKLSAgIFtPcGVuIGlzc3VlcyBoZXJlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcmFuY2hlci9rM3MvaXNzdWVzL25ldy9jaG9vc2UpCi0gICBbSm9pbiBvdXIgU2xhY2sgY2hhbm5lbF0oaHR0cHM6Ly9zbGFjay5yYW5jaGVyLmlvLykKLSAgIFtDaGVjayBvdXQgb3VyIGRvY3VtZW50YXRpb25dKGh0dHBzOi8vcmFuY2hlci5jb20vZG9jcy9rM3MvbGF0ZXN0L2VuLykgZm9yIGd1aWRhbmNlIG9uIGhvdyB0byBnZXQgc3RhcnRlZCBvciB0byBkaXZlIGRlZXAgaW50byBLM3MuCi0gICBbUmVhZCBob3cgeW91IGNhbiBjb250cmlidXRlIGhlcmVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yYW5jaGVyL2szcy9ibG9iL21hc3Rlci9DT05UUklCVVRJTkcubWQpCgojIyMjIFdoYXQncyBDaGFuZ2VkCgotICAgXFtyZWxlYXNlLTEuMzJdIFJlbW92ZSBsb2NhbCByZXN0cmljdGlvbiBmb3IgZGVmZXJyZWQgbm9kZSBwYXNzd29yZCB2YWxpZGF0aW9uIGJ5IFtAJiM4MjAzO2JyYW5kb25kXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYnJhbmRvbmQpIGluIFtodHRwczovL2dpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExNjQ4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExNjQ4KQoKKipGdWxsIENoYW5nZWxvZyoqOiBodHRwczovL2dpdGh1Yi5jb20vazNzLWlvL2szcy9jb21wYXJlL3YxLjMyLjEtcmMxK2szczEuLi52MS4zMi4xK2szczEKCiMjIyBbYHYxLjMyLjArazNzMWBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3JlbGVhc2VzL3RhZy92MS4zMi4wJTJCazNzMSk6IHYxLjMyLjArazNzMQoKW0NvbXBhcmUgU291cmNlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9jb21wYXJlL3YxLjMxLjkrazNzMS4uLnYxLjMyLjArazNzMSkKCjwhLS0gdjEuMzIuMCtrM3MxIC0tPgoKVGhpcyByZWxlYXNlIGlzIEszUydzIGZpcnN0IGluIHRoZSB2MS4zMiBsaW5lLiBUaGlzIHJlbGVhc2UgdXBkYXRlcyBLdWJlcm5ldGVzIHRvIHYxLjMyLjAuCgpLdWJlcm5ldGVzIDEuMzIgbW92ZXMgdGhlIGBBdXRob3JpemVOb2RlV2l0aFNlbGVjdG9yc2AgZmVhdHVyZSBnYXRlIHRvIEJldGEgYW5kIG9uIGJ5IGRlZmF1bHQuIFNlZSBbS0VQLTQ2MDFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2VuaGFuY2VtZW50cy9ibG9iL21hc3Rlci9rZXBzL3NpZy1hdXRoLzQ2MDEtYXV0aG9yaXplLXdpdGgtc2VsZWN0b3JzL1JFQURNRS5tZCkgZm9yIG1vcmUgaW5mb3JtYXRpb24uCgpUaGlzIGZlYXR1cmUtZ2F0ZSBicmVha3Mgc29tZSBvZiB0aGUgUkJBQyB0aGF0IHByZXZpb3VzIHJlbGVhc2VzIG9mIEszcyByZWxpZWQgdXBvbi4gVGhlIEphbnVhcnkgcmVsZWFzZXMgb2YgSzNzIHYxLjI5LCB2MS4zMCwgYW5kIHYxLjMxIHdpbGwgY29udGFpbiBiYWNrcG9ydGVkIGZpeGVzLiBVbnRpbCB0aGVuLCB5b3UgbXVzdCBzZXQgYC0ta3ViZS1hcGlzZXJ2ZXItYXJnPWZlYXR1cmUtZ2F0ZXM9QXV0aG9yaXplTm9kZVdpdGhTZWxlY3RvcnM9ZmFsc2VgIG9uIHNlcnZlciBub2RlcywgaWYgeW91IHdhbnQgdG8gbWl4IEszcyB2MS4zMiBub2RlcyB3aXRoIG5vZGVzIG9mIG90aGVyIHZlcnNpb25zICh3aXRoaW4gdGhlIGxpbWl0cyBvZiB3aGF0IGlzIHN1cHBvcnRlZCBieSB0aGUgW0t1YmVybmV0ZXMgVmVyc2lvbiBTa2V3IFBvbGljeV0oaHR0cHM6Ly9rdWJlcm5ldGVzLmlvL3JlbGVhc2VzL3ZlcnNpb24tc2tldy1wb2xpY3kvKSkuCgpGb3IgbW9yZSBkZXRhaWxzIG9uIHdoYXQncyBuZXcsIHNlZSB0aGUgW0t1YmVybmV0ZXMgcmVsZWFzZSBub3Rlc10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9ibG9iL21hc3Rlci9DSEFOR0VMT0cvQ0hBTkdFTE9HLTEuMzIubWQjY2hhbmdlbG9nLXNpbmNlLXYxMzEwKS4KCiMjIyMgQ2hhbmdlcyBzaW5jZSB2MS4zMS40K2szczE6CgotICAgRml4IHJvdGF0ZWNhIHZhbGlkYXRpb24gZmFpbHVyZXMgd2hlbiBub3QgdG91Y2hpbmcgZGVmYXVsdCBzZWxmLXNpZ25lZCBDQXMgWygjJiM4MjAzOzEwNzEwKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMDcxMCkKLSAgIEJ1bXAgcnVuYyB0byB2MS4xLjEzIFsoIyYjODIwMzsxMDczNyldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA3MzcpCi0gICBVcGRhdGUgc3RhYmxlIGNoYW5uZWwgdG8gdjEuMzAuNCtrM3MxIFsoIyYjODIwMzsxMDczOSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA3MzkpCi0gICBGaXggZGVwbG95IGxhdGVzdCBjb21taXQgb24gRTJFIHRlc3RzIFsoIyYjODIwMzsxMDcyNSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA3MjUpCi0gICBSZW1vdmUgc2VjcmV0cyBlbmNyeXB0aW9uIGNvbnRyb2xsZXIgWygjJiM4MjAzOzEwNjEyKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMDYxMikKLSAgIFVwZGF0ZSBrdWJlcm5ldGVzIHRvIHYxLjMxLjAtazNzMyBbKCMmIzgyMDM7MTA3NjQpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEwNzY0KQotICAgQnVtcCB0cmFlZmlrIHRvIHYyLjExLjggWygjJiM4MjAzOzEwNzc5KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMDc3OSkKLSAgIFVwZGF0ZSBjb3JlZG5zIHRvIDEuMTEuMyBhbmQgbWV0cmljcy1zZXJ2ZXIgdG8gMC43LjIgWygjJiM4MjAzOzEwNzYwKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMDc2MCkKLSAgIEFkZCB0cml2eSBzY2FubmluZyB0byBQUiByZXBvcnRzIFsoIyYjODIwMzsxMDc1OCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA3NTgpCi0gICBDb3ZlciBlZGdlIGNhc2Ugd2hlbiBvbiBuZXcgbWlub3IgcmVsZWFzZSBmb3IgRTJFIHVwZ3JhZGUgdGVzdCBbKCMmIzgyMDM7MTA3ODEpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEwNzgxKQotICAgQnVtcCBhcXVhc2VjdXJpdHkvdHJpdnktYWN0aW9uIGZyb20gMC4yMC4wIHRvIDAuMjQuMCBbKCMmIzgyMDM7MTA3OTUpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEwNzk1KQotICAgVXBkYXRlIENOSSBwbHVnaW5zIHZlcnNpb24gWygjJiM4MjAzOzEwNzk4KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMDc5OCkKLSAgIEJ1bXAgU29ub2J1b3kgdmVyc2lvbiBbKCMmIzgyMDM7MTA3OTIpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEwNzkyKQotICAgRml4IC90cml2eSBhY3Rpb24gcnVubmluZyBhZ2FpbnN0IHRhcmdldCBicmFuY2ggaW5zdGVhZCBvZiBQUiBicmFuY2ggWygjJiM4MjAzOzEwODI0KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMDgyNCkKLSAgIExhdW5jaCBwcml2YXRlIHJlZ2lzdHJ5IHdpdGggaW5pdCBbKCMmIzgyMDM7MTA4MjIpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEwODIyKQotICAgQWRkIGNoYW5uZWwgZm9yIHYxLjMxIFsoIyYjODIwMzsxMDgyNildKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA4MjYpCi0gICBCdW1wIGNvbnRhaW5lcmQgdG8gdjEuNy4yMSwgcnVuYyB0byB2MS4xLjE0IFsoIyYjODIwMzsxMDgwNSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA4MDUpCi0gICBCdW1wIGhlbG0tY29udHJvbGxlciBmb3Igc2tpcC12ZXJpZnkvcGxhaW4taHR0cCBhbmQgdXBkYXRlZCB0b2xlcmF0aW9ucyBbKCMmIzgyMDM7MTA4MzIpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEwODMyKQotICAgVGFnIFBSIGltYWdlIGJ1aWxkIGFzIGxhdGVzdCBiZWZvcmUgc2Nhbm5pbmcgWygjJiM4MjAzOzEwODI1KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMDgyNSkKLSAgIE9ubHkgY2xlYW4gdXAgY29udGFpbmVyZCBob3N0cyBkaXJzIG1hbmFnZWQgYnkgazNzIFsoIyYjODIwMzsxMDgyMyldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA4MjMpCi0gICBSZW1vdmUgb3RlbGdycGMgcGlubmVkIGRlcGVuZGVuY3kgWygjJiM4MjAzOzEwNzk5KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMDc5OSkKLSAgIEFkZCBub2RlLWludGVybmFsLWRucy9ub2RlLWV4dGVybmFsLWRucyBhZGRyZXNzIHBhc3MtdGhyb3VnaCBzdXBwb3J0IFsoIyYjODIwMzsxMDg1MildKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA4NTIpCi0gICBHaXZlIGdvb2QgcmVwb3J0IGlmIG5vIENWRXMgZm91bmQgaW4gdHJpdnkgWygjJiM4MjAzOzEwODUzKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMDg1MykKLSAgIEZpeCBob3N0cy50b21sIGhlYWRlciB2YXIgWygjJiM4MjAzOzEwODcwKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMDg3MCkKLSAgIEJ1bXAgVHJpdnkgdmVyc2lvbiBbKCMmIzgyMDM7MTA4NjMpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEwODYzKQotICAgQWRkIGludCB0ZXN0IGZvciBmbGFubmVsLWlwdjZtYXNxIFsoIyYjODIwMzsxMDQ0MCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA0NDApCi0gICBCdW1wIFRyaXZ5IHZlcnNpb24gWygjJiM4MjAzOzEwODk5KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMDg5OSkKLSAgIFVwZGF0ZSBLdWJlcm5ldGVzIHRvIHYxLjMxLjEtazNzMyBbKCMmIzgyMDM7MTA5MTEpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEwOTExKQotICAgQWRkIE1hcmlhREIgdG8gQ0kgWygjJiM4MjAzOzEwNzI0KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMDcyNCkKLSAgIFVwZGF0ZSBzdGFibGUgY2hhbm5lbCB0b3YxLjMwLjUrazNzMSBbKCMmIzgyMDM7MTA5MjEpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEwOTIxKQotICAgVXNlIHN0YXRpYyBDTkkgYmluIGRpciBbKCMmIzgyMDM7MTA4NjgpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEwODY4KQogICAgLSAgIEszcyBub3cgdXNlcyBhIHN0YWJsZSBkaXJlY3RvcnkgZm9yIENOSSBiaW5hcmllcywgd2hpY2ggc2ltcGxpZmllcyB0aGUgaW5zdGFsbGF0aW9uIG9mIGFkZGl0aW9uYWwgQ05JIHBsdWdpbnMuCi0gICBCcmVha3VwIHRyaXZ5IHNjYW4gYW5kIGNoZWNrIGNvbW1lbnQgYXV0aG9yIFsoIyYjODIwMzsxMDkzNSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA5MzUpCi0gICBGaXggZ2V0TWVtYmVyc2hpcEZvclVzZXJJbk9yZyBjYWxsIFsoIyYjODIwMzsxMDkzNyldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA5MzcpCi0gICBDaGVjayBrM3MtaW8gb3JnYW5pemF0aW9uIG1lbWJlcnNoaXAgbm90IHRlYW0gbWVtYmVyc2hpcCBmb3IgdHJpdnkgc2NhbnMgWygjJiM4MjAzOzEwOTQwKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMDk0MCkKLSAgIEJ1bXAga2luZSB0byB2MC4xMy4wIFsoIyYjODIwMzsxMDkzMildKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA5MzIpCiAgICAtICAgS2luZSBoYXMgYmVlbiBidW1wZWQgdG8gdjAuMTMuMC4gVGhpcyByZWxlYXNlIGluY2x1ZGVzIGNoYW5nZXMgdGhhdCBzaG91bGQgZW5oYW5jZSBwZXJmb3JtYW5jZSB3aGVuIHVzaW5nIHBvc3RncmVzIGFzIGFuIGV4dGVybmFsIERCLiBUaGUgdXBkYXRlZCBzY2hlbWEgd2lsbCBiZSBhdXRvbWF0aWNhbGx5IHVzZWQgZm9yIG5ldyBkYXRhYmFzZXM7IHRvIG1pZ3JhdGUgdG8gdGhlIG5ldyBzY2hlbWEgb24gZXhpc3RpbmcgZGF0YWJhc2VzLCBLM3MgY2FuIGJlIHN0YXJ0ZWQgd2l0aCB0aGUgYEtJTkVfU0NIRU1BX01JR1JBVElPTj0yYCBlbnZpcm9ubWVudCB2YXJpYWJsZSBzZXQuCi0gICBGaXggdHJpdnkgcmVwb3J0IGRvd25sb2FkIFsoIyYjODIwMzsxMDk0MyldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA5NDMpCi0gICBUcml2eSB3b3JrZmxvdzogU3BlY2lmeSBHSF9SRVBPIGVudiB0byB1c2UgZ2ggY2xpIFsoIyYjODIwMzsxMDk0OSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA5NDkpCi0gICBCdW1wIFRyaXZ5IHZlcnNpb24gWygjJiM4MjAzOzEwOTI0KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMDkyNCkKLSAgIEJ1bXAgdHJhZWZpayB0byBjaGFydCAyNy4wLjIgWygjJiM4MjAzOzEwOTM5KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMDkzOSkKLSAgIFBhc3MgUmFuY2hlcidzIFZFWCByZXBvcnQgdG8gVHJpdnkgdG8gcmVtb3ZlIGtub3duIGZhbHNlLXBvc2l0aXZlcyBDVkVzIFsoIyYjODIwMzsxMDk1NildKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA5NTYpCi0gICBGaXggdHJpdnkgdmV4IGxpbmUgWygjJiM4MjAzOzEwOTcwKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMDk3MCkKLSAgIEFkZCB1c2VyIHBhdGggdG8gcnVudGltZXMgc2VhcmNoIFsoIyYjODIwMzsxMDk1MyldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA5NTMpCiAgICAtICAgUnVudGltZXMgZGV0ZWN0aW9uIHdpbGwgbm93IHVzZSAkUEFUSAotICAgQnVtcCB0byBuZXcgd2hhcmZpZSB2ZXJzaW9uIFsoIyYjODIwMzsxMDk3MSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA5NzEpCi0gICBVcGRhdGUgUkVBRE1FLm1kIFsoIyYjODIwMzsxMDUyMyldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA1MjMpCi0gICBSZW1vdmUgdHJhaWxpbmcgd2hpdGVzcGFjZSBbKCMmIzgyMDM7OTM2MildKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvOTM2MikKLSAgIEJ1bXAga2luZSB0byB2MC4xMy4yIFsoIyYjODIwMzsxMDk3OCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA5NzgpCi0gICBBbGxvdyBjb25maWd1cmF0aW9uIG9mIFJvb3RsZXNza2l0J3MgQ29weVVwRGlycyB0aHJvdWdoIGFuIGVudmlyb25tZW50IHZhcmlhYmxlIFsoIyYjODIwMzsxMDM4NildKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTAzODYpCiAgICAtICAgQWRkIG5ldyBlbnZpcm9ubWVudCB2YXJpYWJsZSAiSzNTX1JPT1RMRVNTX0NPUFlVUERJUlMiIHRvIGFkZCBmb2xkZXJzIHRvIHRoZSBSb290bGVzc2tpdCBjb25maWd1cmF0aW9uLgotICAgRml4IHJhY2UgY29uZGl0aW9uIHdoZW4gbXVsdGlwbGUgbm9kZXMgcmVjb25jaWxlIFMzIHNuYXBzaG90cyBbKCMmIzgyMDM7MTA5NzkpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEwOTc5KQotICAgQnVtcCBUcml2eSB2ZXJzaW9uIFsoIyYjODIwMzsxMDk5NildKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA5OTYpCi0gICBBZGQgY2EtY2VydCByb3RhdGlvbiBpbnRlZ3JhdGlvbiB0ZXN0LCBhbmQgZml4IGNhLWNlcnQgcm90YXRpb24gWygjJiM4MjAzOzExMDEzKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTAxMykKLSAgIEFkZCBlMmUgdGVzdCB3aGljaCB2ZXJpZmllcyB0cmFmZmljIHBvbGljaWVzIGFuZCBmaXJld2FsbCBpbiBzZXJ2aWNlcyBbKCMmIzgyMDM7MTA5NzIpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEwOTcyKQotICAgVXBkYXRlIHRjcHByb3h5IGZvciBpbXBvcnQgcGF0aCBjaGFuZ2UgWygjJiM4MjAzOzExMDI5KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTAyOSkKLSAgIEJ1bXAgTG9jYWwgUGF0aCBQcm92aXNpb25lciB2ZXJzaW9uIFsoIyYjODIwMzsxMDg2MildKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTA4NjIpCi0gICBCdW1wIGxvY2FsLXBhdGgtcHJvdmlzaW9uZXIgdG8gdjAuMC4zMCBbKCMmIzgyMDM7MTEwNDkpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExMDQ5KQotICAgQnVtcCBoZWxtLWNvbnRyb2xsZXIgYW5kIGtsaXBwZXItaGVsbSBbKCMmIzgyMDM7MTEwNjApXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExMDYwKQotICAgQnVtcCBjb250YWluZXJkIHRvIHYxLjcuMjIgWygjJiM4MjAzOzExMDY3KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTA2NykKLSAgIFNpbXBsaWZ5IHN2Y2xiIGRhZW1vbnNldCBbKCMmIzgyMDM7MTA5NTQpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEwOTU0KQogICAgLSAgIFN0b3AgdXNpbmcga2xpcHBlci1sYiBhcyB0aGUgaW1hZ2UgZm9yIHN2Y2xiLiBSZXBsYWNlIGl0IHdpdGggYSBzaW1wbGUgYnVzeWJveCB3aGljaCBqdXN0IHNsZWVwcwotICAgQWRkIHRoZSBudmlkaWEgcnVudGltZSBjZGkgWygjJiM4MjAzOzExMDY1KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTA2NSkKICAgIC0gICBBZGQgbnZpZGlhIGNkaSBydW50aW1lIHRvIHRoZSBsaXN0IG9mIHN1cHBvcnRlZCBhbmQgZGlzY292ZXJhYmxlIHJ1bnRpbWVzCi0gICBCdW1wIFRyaXZ5IHZlcnNpb24gWygjJiM4MjAzOzExMTAzKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTEwMykKLSAgIFJvbGxiYWNrIEdIQSB0byBVYnVudHUgMjIuMDQgWygjJiM4MjAzOzExMTExKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTExMSkKLSAgIFJldmVydCAiTWFrZSBzdmNsYiBhcyBzaW1wbGUgYXMgcG9zc2libGUiIFsoIyYjODIwMzsxMTEwOSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTExMDkpCi0gICBGaXggR2l0aHViIEFjdGlvbnMgZm9yIFVidW50dS0yNC4wNCBbKCMmIzgyMDM7MTExMTIpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExMTEyKQotICAgQnVtcCBhcXVhc2VjdXJpdHkvdHJpdnktYWN0aW9uIGZyb20gMC4yNC4wIHRvIDAuMjcuMCBbKCMmIzgyMDM7MTExMDUpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExMTA1KQotICAgQ2hlY2sgdGhlIGxhc3QgMTAgY29tbWl0cyBmb3IgdXBncmFkZSBFMkUgdGVzdCBbKCMmIzgyMDM7MTEwODYpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExMDg2KQotICAgQnVtcCBhcXVhc2VjdXJpdHkvdHJpdnktYWN0aW9uIGZyb20gMC4yNy4wIHRvIDAuMjguMCBbKCMmIzgyMDM7MTExMzgpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExMTM4KQotICAgRml4ZXMgImZpbGUgZXhpc3RzIiBlcnJvciBmcm9tIENOSSBiaW5zIHdoZW4gdXBncmFkaW5nIGszcyBbKCMmIzgyMDM7MTExMjMpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExMTIzKQotICAgUmVkdWNlIHRoZSBudW1iZXIgb2YgR0ggYXBpIHJlcXVlc3QgZm9yIEUyRSBuaWdodGx5IFsoIyYjODIwMzsxMTE0OCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTExNDgpCi0gICBVcGRhdGUgS3ViZXJuZXRlcyB0byB2MS4zMS4yLWszczEgYW5kIEdvIDEuMjIuOCBbKCMmIzgyMDM7MTExNjMpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExMTYzKQotICAgVXBkYXRlIHN0YWJsZSBjaGFubmVsIHRvIHYxLjMwLjYrazNzMSBbKCMmIzgyMDM7MTExODYpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExMTg2KQotICAgRml4IHRpbWVvdXQgd2hlbiBkZWZyYWdtZW50aW5nIGV0Y2Qgb24gc3RhcnR1cCBbKCMmIzgyMDM7MTExNjQpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExMTY0KQotICAgQ2FwdHVyZSBhbGwgZmVkb3JhIGF0b21pYyB2YXJpYW50cyBpbiBpbnN0YWxsIHNjcmlwdCBbKCMmIzgyMDM7MTExNzApXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExMTcwKQogICAgLSAgIEFsbG93IGVhc2llciBpbnN0YWxsYXRpb24gb2YgazNzIG9uIGFsbCB2YXJpYW50cyBvZiBmZWRvcmEgYXRvbWljIHRoYXQgdXNlIHJwbS1vc3RyZWUKLSAgIFR5cG8gZml4ZXMgaW4gY29udHJpYnV0aW5nLm1kIFsoIyYjODIwMzsxMTIwMSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTEyMDEpCi0gICBCdW1wIFRyaXZ5IHZlcnNpb24gWygjJiM4MjAzOzExMjA2KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTIwNikKLSAgIFBpbiB2YWdyYW50IHRvIG9sZGVyIHZlcnNpb24gdG8gYXZvaWQga25vd24gaXNzdWUgMTM1MjcgWygjJiM4MjAzOzExMjI2KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTIyNikKLSAgIFNldCBraW5lIEVtdWxhdGVkRVRDRFZlcnNpb24gZnJvbSBlbWJlZGRlZCBldGNkIHZlcnNpb24gWygjJiM4MjAzOzExMjIxKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTIyMSkKLSAgIEFkZCBub25yb290LWRldmljZXMgZmxhZyB0byBhZ2VudCBDTEkgWygjJiM4MjAzOzExMjAwKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTIwMCkKICAgIC0gICBgRGV2aWNlX293bmVyc2hpcF9mcm9tX3NlY3VyaXR5X2NvbnRleHRgIGNhbiBub3cgYmUgZW5hYmxlZCBpbiB0aGUgY29udGFpbmVyZCBDUkkgY29uZmlnIGJ5IHNldHRpbmcgdGhlIGAtLW5vbnJvb3QtZGV2aWNlc2AgZmxhZyBvciBjb25maWcga2V5LgotICAgQnVtcCBydW5jIHRvIHYxLjIgWygjJiM4MjAzOzEwODk2KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMDg5NikKLSAgIFVwZGF0ZSBmbGFubmVsIGFuZCBiYXNlIGNuaSBwbHVnaW5zIHZlcnNpb24gWygjJiM4MjAzOzExMTg4KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTE4OCkKLSAgIEJ1bXAgZ2l0aHViLmNvbS9nb2xhbmctand0L2p3dC92NCBmcm9tIDQuNS4wIHRvIDQuNS4xIFsoIyYjODIwMzsxMTIzNildKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTEyMzYpCi0gICBGaXggTXVzdEZpbmRTdHJpbmcgcmV0dXJuaW5nIG92ZXJyaWRlIGZsYWdzIG9uIGV4dGVybmFsIENMSSBjb21tYW5kcyBbKCMmIzgyMDM7MTEyMzcpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExMjM3KQotICAgQnVtcCBjb250YWluZXJkIHRvIHYxLjcuMjMtazNzMSB0byBmaXggcmVnaXN0cnkgcmV3cml0ZSB0b2tlbiBzY29wZXMgWygjJiM4MjAzOzExMjM4KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTIzOCkKLSAgIEZpeCB0aGUgIlN0YW5kYWxvbmUiLW1vZGUgb2Ygb2lkYy1sb2dpbiBpbiB0aGUgd3JhcHBlZCBrdWJlY3RsIGxpYnJhcnkgWygjJiM4MjAzOzExMjY2KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTI2NikKICAgIC0gICBGaXhlcyAnbm8gQXV0aCBQcm92aWRlciBmb3VuZCBmb3IgbmFtZSAib2lkYyInIHdoZW4gdXNpbmcgb2lkYy1sb2dpbiBpbiBzdGFuZGFsb25lIG1vZGUuCi0gICBCdW1wIEszcy1yb290IHZlcnNpb24gdG8gdjAuMTQuMSBbKCMmIzgyMDM7MTEyODIpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExMjgyKQotICAgQnVtcCBraW5lIFsoIyYjODIwMzsxMTI3NyldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTEyNzcpCi0gICBCdW1wIGtpbmUgZm9yIG15c3FsIGNvbm5lY3Rpb24gY2xvc2UgZml4IFsoIyYjODIwMzsxMTMwNSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTEzMDUpCi0gICBGaXggaGFuZGxpbmcgb2Ygd3JhcHBlZCBzdWJjb21tYW5kcyB3aGVuIHJ1biB3aXRoIGEgcGF0aCBbKCMmIzgyMDM7MTEzMDYpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExMzA2KQotICAgRml4IHVwZGF0ZWNsaSBjb25maWcgZm9yIGtsaXBwZXIgYW5kIGhlbG0tY29udHJvbGxlciBbKCMmIzgyMDM7MTEyOTApXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExMjkwKQotICAgRml4IGlzc3VlIHdpdGggbG9hZGJhbGFuY2VyIGZhaWxvdmVyIHRvIGRlZmF1bHQgc2VydmVyIFsoIyYjODIwMzsxMTMxOSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTEzMTkpCi0gICBVcGRhdGUgYGxvY2Fsc3RvcmFnZV9pbnRfdGVzdC5nb2AgcmVmZXJlbmNlIFsoIyYjODIwMzsxMTMzOSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTEzMzkpCiAgICAtICAgVXBkYXRlIGBsb2NhbHN0b3JhZ2VfaW50X3Rlc3QuZ29gIHJlZmVyZW5jZSBpbiBgdGVzdHMvaW50ZWdyYXRpb24vUkVBRE1FLm1kYAotICAgQWRkICB0byB0aGUgb3V0cHV0IGNvbW1hbmQgdG8gYmUgY29uc2lzdGVudCB3aXRoIHRoZSBwcm9kdWN0IGNvbW1hbmQgWygjJiM4MjAzOzExMzQ1KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTM0NSkKLSAgIEFsbG93IGluc3RhbGwgc2NyaXB0IHRvIHByaW50IGVycm9yIG9uIGZhaWxlZCBiaW5hcnkgZG93bmxvYWQgWygjJiM4MjAzOzExMzM1KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTMzNSkKLSAgIFJlbW92ZSB0aGUgZ28gdG9vbGNoYWluIGxpbmUgWygjJiM4MjAzOzExMzU4KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTM1OCkKLSAgIEFkZCB1YnVudHUgMjQuMDQgYXB0IGNvbW1hbmQgZm9yIGUyZSB0ZXN0IFsoIyYjODIwMzsxMTM2MSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTEzNjEpCi0gICBCdW1wIFRyaXZ5IHZlcnNpb24gWygjJiM4MjAzOzExMzYwKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTM2MCkKLSAgIEJ1bXAgYXF1YXNlY3VyaXR5L3RyaXZ5LWFjdGlvbiBmcm9tIDAuMjguMCB0byAwLjI5LjAgWygjJiM4MjAzOzExMzY0KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTM2NCkKLSAgIENvbnZlcnQgbGVnYWN5IGRvY2tlciB0ZXN0cyBmcm9tIGJhc2ggdG8gZ29sYW5nIFsoIyYjODIwMzsxMTM1NyldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTEzNTcpCi0gICBVcGRhdGUgS3ViZXJuZXRlcyB0byB2MS4zMS4zLWszczEgWygjJiM4MjAzOzExMzczKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTM3MykKLSAgIEZpeCBCcmFuY2ggTmFtZSBsb2dpYyBmb3IgRGVwZW5kYWJvdCBhbmQgVXBkYXRlQ0xJIHB1c2hlcyB0byBrM3MtaW8gWygjJiM4MjAzOzExMzc2KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTM3NikKLSAgIEZpeCBJTlNUQUxMX0szU19QUiBzdXBwb3J0IFsoIyYjODIwMzsxMTM4MyldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTEzODMpCi0gICBGaXggZXRjZCBiYWNrdXAvcmVzdG9yZSB0ZXN0IGFuZCBhZGQgZ3VhcmRyYWlsIGZvciBldGNkLXNuYXBzaG90IFsoIyYjODIwMzsxMTMxNCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTEzMTQpCi0gICBCdW1wIGNvbnRhaW5lcmQgdG8gLWszczIgdG8gZml4IHJld3JpdGVzIFsoIyYjODIwMzsxMTQwMSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE0MDEpCi0gICBGaXggb3BlbnN1c2UtbGVhcCBpbnN0YWxsIHRlc3QgWygjJiM4MjAzOzExMzc5KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTM3OSkKLSAgIEZpeCBzZWNyZXRzLWVuY3J5cHQgcmVlbmNyeXB0IHRpbWVvdXQgZXJyb3IgWygjJiM4MjAzOzExMzg1KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTM4NSkKLSAgIFJld29yayBsb2FkYmFsYW5jZXIgc2VydmVyIHNlbGVjdGlvbiBsb2dpYyBbKCMmIzgyMDM7MTEzMjkpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExMzI5KQotICAgUmVtb3ZlIGV4cGVyaW1lbnRhbCBmcm9tIGVtYmVkZGVkLXJlZ2lzdHJ5IGZsYWcgWygjJiM4MjAzOzExNDQzKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTQ0MykKLSAgIFVwZGF0ZSBzdGFibGUgY2hhbm5lbCB0byB2MS4zMS4zK2szczEgWygjJiM4MjAzOzExNDM2KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTQzNikKLSAgIEZpeCBhZ2VudCB0dW5uZWwgYWRkcmVzcyB3aXRoIGRlZGljYXRlZCBzdXBlcnZpc29yIHBvcnQgWygjJiM4MjAzOzExNDI3KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTQyNykKLSAgIFVwZGF0ZSBjb3JlZG5zIHRvIDEuMTIuMCBbKCMmIzgyMDM7MTEzODcpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExMzg3KQotICAgQnVtcCBUcml2eSB2ZXJzaW9uIFsoIyYjODIwMzsxMTQzMCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE0MzApCi0gICBVcGRhdGUgdG8gdjEuMzEuNC1rM3MxIGFuZCBHbyAxLjIyLjkgWygjJiM4MjAzOzExNDYzKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTQ2MykKLSAgIEJ1bXAgYWxwaW5lIGZyb20gMy4yMCB0byAzLjIxIGluIC9jb25mb3JtYW5jZSBbKCMmIzgyMDM7MTE0MzMpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExNDMzKQotICAgRml4IGRvY2tlciBjaGVjayB3YXJuaW5ncyBbKCMmIzgyMDM7MTE0NzQpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExNDc0KQotICAgVXBkYXRlIHN0YWJsZSBjaGFubmVsIHRvIHYxLjMxLjQrazNzMSBbKCMmIzgyMDM7MTE0ODMpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExNDgzKQotICAgVjEuMzIuMCtrM3MxIFsoIyYjODIwMzsxMTQ3OCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE0NzgpCi0gICBTd2l0Y2ggdG8gdXNpbmcga3ViZWxldCBjb25maWcgZmlsZSBmb3IgYWxsIHN1cHBvcnRlZCBmbGFncyBbKCMmIzgyMDM7MTA0MzMpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEwNDMzKQotICAgTG9hZCBrZXJuZWwgbW9kdWxlcyBmb3IgbmZ0IGluIGFnZW50IHNldHVwIFsoIyYjODIwMzsxMTUyNyldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE1MjcpCgojIyMjIEVtYmVkZGVkIENvbXBvbmVudCBWZXJzaW9ucwoKfCBDb21wb25lbnQgfCBWZXJzaW9uIHwKfC0tLXwtLS18CnwgS3ViZXJuZXRlcyB8IFt2MS4zMi4wXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL2Jsb2IvbWFzdGVyL0NIQU5HRUxPRy9DSEFOR0VMT0ctMS4zMi5tZCN2MTMyMCkgfAp8IEtpbmUgfCBbdjAuMTMuNV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9raW5lL3JlbGVhc2VzL3RhZy92MC4xMy41KSB8CnwgU1FMaXRlIHwgWzMuNDYuMV0oaHR0cHM6Ly9zcWxpdGUub3JnL3JlbGVhc2Vsb2cvM1xfNDZcXzEuaHRtbCkgfAp8IEV0Y2QgfCBbdjMuNS4xNi1rM3MxXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2V0Y2QvcmVsZWFzZXMvdGFnL3YzLjUuMTYtazNzMSkgfAp8IENvbnRhaW5lcmQgfCBbdjEuNy4yMy1rM3MyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2NvbnRhaW5lcmQvcmVsZWFzZXMvdGFnL3YxLjcuMjMtazNzMikgfAp8IFJ1bmMgfCBbdjEuMi4xLWszczFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9vcGVuY29udGFpbmVycy9ydW5jL3JlbGVhc2VzL3RhZy92MS4yLjEtazNzMSkgfAp8IEZsYW5uZWwgfCBbdjAuMjUuN10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2ZsYW5uZWwtaW8vZmxhbm5lbC9yZWxlYXNlcy90YWcvdjAuMjUuNykgfAp8IE1ldHJpY3Mtc2VydmVyIHwgW3YwLjcuMl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMtc2lncy9tZXRyaWNzLXNlcnZlci9yZWxlYXNlcy90YWcvdjAuNy4yKSB8CnwgVHJhZWZpayB8IFt2Mi4xMS4xMF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3RyYWVmaWsvdHJhZWZpay9yZWxlYXNlcy90YWcvdjIuMTEuMTApIHwKfCBDb3JlRE5TIHwgW3YxLjEyLjBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jb3JlZG5zL2NvcmVkbnMvcmVsZWFzZXMvdGFnL3YxLjEyLjApIHwKfCBIZWxtLWNvbnRyb2xsZXIgfCBbdjAuMTYuNV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9oZWxtLWNvbnRyb2xsZXIvcmVsZWFzZXMvdGFnL3YwLjE2LjUpIHwKfCBMb2NhbC1wYXRoLXByb3Zpc2lvbmVyIHwgW3YwLjAuMzBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yYW5jaGVyL2xvY2FsLXBhdGgtcHJvdmlzaW9uZXIvcmVsZWFzZXMvdGFnL3YwLjAuMzApIHwKCiMjIyMgSGVscGZ1bCBMaW5rcwoKQXMgYWx3YXlzLCB3ZSB3ZWxjb21lIGFuZCBhcHByZWNpYXRlIGZlZWRiYWNrIGZyb20gb3VyIGNvbW11bml0eSBvZiB1c2Vycy4gUGxlYXNlIGZlZWwgZnJlZSB0bzoKCi0gICBbT3BlbiBpc3N1ZXMgaGVyZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3JhbmNoZXIvazNzL2lzc3Vlcy9uZXcvY2hvb3NlKQotICAgW0pvaW4gb3VyIFNsYWNrIGNoYW5uZWxdKGh0dHBzOi8vc2xhY2sucmFuY2hlci5pby8pCi0gICBbQ2hlY2sgb3V0IG91ciBkb2N1bWVudGF0aW9uXShodHRwczovL3JhbmNoZXIuY29tL2RvY3MvazNzL2xhdGVzdC9lbi8pIGZvciBndWlkYW5jZSBvbiBob3cgdG8gZ2V0IHN0YXJ0ZWQgb3IgdG8gZGl2ZSBkZWVwIGludG8gSzNzLgotICAgW1JlYWQgaG93IHlvdSBjYW4gY29udHJpYnV0ZSBoZXJlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcmFuY2hlci9rM3MvYmxvYi9tYXN0ZXIvQ09OVFJJQlVUSU5HLm1kKQoKIyMjIFtgdjEuMzEuOStrM3MxYF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcmVsZWFzZXMvdGFnL3YxLjMxLjklMkJrM3MxKTogdjEuMzEuOStrM3MxCgpbQ29tcGFyZSBTb3VyY2VdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL2NvbXBhcmUvdjEuMzEuOCtrM3MxLi4udjEuMzEuOStrM3MxKQoKPCEtLSB2MS4zMS45K2szczEgLS0+CgpUaGlzIHJlbGVhc2UgdXBkYXRlcyBLdWJlcm5ldGVzIHRvIHYxLjMxLjksIGFuZCBmaXhlcyBhIG51bWJlciBvZiBpc3N1ZXMuCgpGb3IgbW9yZSBkZXRhaWxzIG9uIHdoYXQncyBuZXcsIHNlZSB0aGUgW0t1YmVybmV0ZXMgcmVsZWFzZSBub3Rlc10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9ibG9iL21hc3Rlci9DSEFOR0VMT0cvQ0hBTkdFTE9HLTEuMzEubWQjY2hhbmdlbG9nLXNpbmNlLXYxMzE4KS4KCiMjIyMgQ2hhbmdlcyBzaW5jZSB2MS4zMS44K2szczE6CgotICAgVGVzdGluZyBiYWNrcG9ydHMgZm9yIDIwMjUgTWF5IFsoIyYjODIwMzsxMjIzNCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIyMzQpCi0gICBCYWNrcG9ydHMgZm9yIE1heSBbKCMmIzgyMDM7MTIzMTcpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEyMzE3KQotICAgQmFja3BvcnRzIGZvciAyMDI1LTA1IFsoIyYjODIwMzsxMjMyOCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIzMjgpCi0gICBGaXggYXV0aG9yaXphdGlvbi1jb25maWcvYXV0aGVudGljYXRpb24tY29uZmlnIGhhbmRsaW5nIFsoIyYjODIwMzsxMjM0NildKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIzNDYpCi0gICBGaXggc2VjcmV0c2VuY3J5cHQgcmFjZSBjb25kaXRpb25zIFsoIyYjODIwMzsxMjM1NyldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIzNTcpCi0gICBVcGRhdGUgdG8gdjEuMzEuOS1rM3MxIGFuZCBHbyAxLjIzLjggWygjJiM4MjAzOzEyMzYzKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMjM2MykKLSAgIEZpeCBzdGFydHVwIGUyZSB0ZXN0IFsoIyYjODIwMzsxMjM3MSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIzNzEpCgojIyMjIEVtYmVkZGVkIENvbXBvbmVudCBWZXJzaW9ucwoKfCBDb21wb25lbnQgfCBWZXJzaW9uIHwKfC0tLXwtLS18CnwgS3ViZXJuZXRlcyB8IFt2MS4zMS45XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL2Jsb2IvbWFzdGVyL0NIQU5HRUxPRy9DSEFOR0VMT0ctMS4zMS5tZCN2MTMxOSkgfAp8IEtpbmUgfCBbdjAuMTMuMTVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8va2luZS9yZWxlYXNlcy90YWcvdjAuMTMuMTUpIHwKfCBTUUxpdGUgfCBbMy40OS4xXShodHRwczovL3NxbGl0ZS5vcmcvcmVsZWFzZWxvZy8zXF80OVxfMS5odG1sKSB8CnwgRXRjZCB8IFt2My41LjIxLWszczFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vZXRjZC9yZWxlYXNlcy90YWcvdjMuNS4yMS1rM3MxKSB8CnwgQ29udGFpbmVyZCB8IFt2Mi4wLjUtazNzMS4zMl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9jb250YWluZXJkL3JlbGVhc2VzL3RhZy92Mi4wLjUtazNzMS4zMikgfAp8IFJ1bmMgfCBbdjEuMi42XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vb3BlbmNvbnRhaW5lcnMvcnVuYy9yZWxlYXNlcy90YWcvdjEuMi42KSB8CnwgRmxhbm5lbCB8IFt2MC4yNi43XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZmxhbm5lbC1pby9mbGFubmVsL3JlbGVhc2VzL3RhZy92MC4yNi43KSB8CnwgTWV0cmljcy1zZXJ2ZXIgfCBbdjAuNy4yXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy1zaWdzL21ldHJpY3Mtc2VydmVyL3JlbGVhc2VzL3RhZy92MC43LjIpIHwKfCBUcmFlZmlrIHwgW3YyLjExLjI0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vdHJhZWZpay90cmFlZmlrL3JlbGVhc2VzL3RhZy92Mi4xMS4yNCkgfAp8IENvcmVETlMgfCBbdjEuMTIuMV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NvcmVkbnMvY29yZWRucy9yZWxlYXNlcy90YWcvdjEuMTIuMSkgfAp8IEhlbG0tY29udHJvbGxlciB8IFt2MC4xNi4xMF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9oZWxtLWNvbnRyb2xsZXIvcmVsZWFzZXMvdGFnL3YwLjE2LjEwKSB8CnwgTG9jYWwtcGF0aC1wcm92aXNpb25lciB8IFt2MC4wLjMxXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcmFuY2hlci9sb2NhbC1wYXRoLXByb3Zpc2lvbmVyL3JlbGVhc2VzL3RhZy92MC4wLjMxKSB8CgojIyMjIEhlbHBmdWwgTGlua3MKCkFzIGFsd2F5cywgd2Ugd2VsY29tZSBhbmQgYXBwcmVjaWF0ZSBmZWVkYmFjayBmcm9tIG91ciBjb21tdW5pdHkgb2YgdXNlcnMuIFBsZWFzZSBmZWVsIGZyZWUgdG86CgotICAgW09wZW4gaXNzdWVzIGhlcmVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yYW5jaGVyL2szcy9pc3N1ZXMvbmV3L2Nob29zZSkKLSAgIFtKb2luIG91ciBTbGFjayBjaGFubmVsXShodHRwczovL3NsYWNrLnJhbmNoZXIuaW8vKQotICAgW0NoZWNrIG91dCBvdXIgZG9jdW1lbnRhdGlvbl0oaHR0cHM6Ly9yYW5jaGVyLmNvbS9kb2NzL2szcy9sYXRlc3QvZW4vKSBmb3IgZ3VpZGFuY2Ugb24gaG93IHRvIGdldCBzdGFydGVkIG9yIHRvIGRpdmUgZGVlcCBpbnRvIEszcy4KLSAgIFtSZWFkIGhvdyB5b3UgY2FuIGNvbnRyaWJ1dGUgaGVyZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3JhbmNoZXIvazNzL2Jsb2IvbWFzdGVyL0NPTlRSSUJVVElORy5tZCkKCiMjIyBbYHYxLjMxLjgrazNzMWBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3JlbGVhc2VzL3RhZy92MS4zMS44JTJCazNzMSk6IHYxLjMxLjgrazNzMQoKW0NvbXBhcmUgU291cmNlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9jb21wYXJlL3YxLjMxLjcrazNzMS4uLnYxLjMxLjgrazNzMSkKCjwhLS0gdjEuMzEuOCtrM3MxIC0tPgoKVGhpcyByZWxlYXNlIHVwZGF0ZXMgS3ViZXJuZXRlcyB0byB2MS4zMS44LCBhbmQgZml4ZXMgYSBudW1iZXIgb2YgaXNzdWVzLgoKRm9yIG1vcmUgZGV0YWlscyBvbiB3aGF0J3MgbmV3LCBzZWUgdGhlIFtLdWJlcm5ldGVzIHJlbGVhc2Ugbm90ZXNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvYmxvYi9tYXN0ZXIvQ0hBTkdFTE9HL0NIQU5HRUxPRy0xLjMxLm1kI2NoYW5nZWxvZy1zaW5jZS12MTMxNykuCgojIyMjIENoYW5nZXMgc2luY2UgdjEuMzEuNytrM3MxOgoKLSAgIE1pZ3JhdGUgdG8gVXJmYXZlQ0xJIHYyIFsoIyYjODIwMzsxMjAzMCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIwMzApCi0gICBJbXByb3ZlIHJlYWRpbmVzcyBwb2xsaW5nIG9uIG5vZGUgc3RhcnR1cCBbKCMmIzgyMDM7MTIwMzcpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEyMDM3KQotICAgRml4IGlzc3VlIGNhdXNlZCBieSBkZWZhdWx0IGF1dGhvcml6YXRpb24tbW9kZSBhcGlzZXJ2ZXIgYXJnIFsoIyYjODIwMzsxMjA0NCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIwNDQpCi0gICBDbGVhbnVwIGFub255bW91cyBhbmQgbmFtZWQgdm9sdW1lcyBmb3IgZG9ja2VyIHRlc3RzIChbIyYjODIwMzsxMjA2OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvaXNzdWVzLzEyMDY5KSkgWygjJiM4MjAzOzEyMDc2KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMjA3NikKLSAgIEFkZCBzdXBwb3J0IGZvciBzZWNyZXRib3ggZW5jcnlwdGlvbiBwcm92aWRlciB3aXRoIHRoZSBgazNzIHNlY3JldHMtZW5jcnlwdGAgY29tbWFuZCBbKCMmIzgyMDM7MTIwNjYpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEyMDY2KQogICAgLSAgIFVzZXJzIGNhbiBub3cgY29uZmlndXJlIHNlY3JldHMgZW5jcnlwdGlvbiB0byB1c2UgYHNlY3JldGJveGAgcHJvdmlkZXIgYnkgc2V0dGluZyB0aGUgYHNlY3JldHMtZW5jcnlwdGlvbi1wcm92aWRlcmAgZmxhZy4KLSAgIEFkZCBlcnJvciBpbiBjZXJ0aWZpY2F0ZSBjaGVjayBbKCMmIzgyMDM7MTIwOTcpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEyMDk3KQotICAgQmFja3BvcnRzIGZvciAyMDI1LTA0IFsoIyYjODIwMzsxMjEwNSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIxMDUpCi0gICBCdW1wIGtpbmUgZm9yIG5hdHMtc2VydmVyL3YyIENWRS0yMDI1LTMwMjE1IFsoIyYjODIwMzsxMjE0MildKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIxNDIpCi0gICBEcm9uZSBUZXN0IFNwbGl0IGFuZCBSZWR1Y3Rpb24gWygjJiM4MjAzOzEyMTUwKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMjE1MCkKLSAgIE1vcmUgYmFja3BvcnRzIGZvciAyMDI1LTA0IFsoIyYjODIwMzsxMjE2OCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIxNjgpCi0gICBGaXggaGFuZGxlciBwYW5pYyB3aGVuIGJvb3RzdHJhcHBlciByZXR1cm5zIGVtcHR5IHBlZXIgbGlzdCBbKCMmIzgyMDM7MTIxNzkpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzEyMTc5KQotICAgQnVtcCB0cmFlZmlrIHRvIHYyLjExLjI0IFsoIyYjODIwMzsxMjE5MCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTIxOTApCi0gICBVcGRhdGUgdG8gdjEuMzEuOC1rM3MxIGFuZCBHbyAxLjIzLjYgWygjJiM4MjAzOzEyMjA3KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMjIwNykKCiMjIyMgRW1iZWRkZWQgQ29tcG9uZW50IFZlcnNpb25zCgp8IENvbXBvbmVudCB8IFZlcnNpb24gfAp8LS0tfC0tLXwKfCBLdWJlcm5ldGVzIHwgW3YxLjMxLjhdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvYmxvYi9tYXN0ZXIvQ0hBTkdFTE9HL0NIQU5HRUxPRy0xLjMxLm1kI3YxMzE4KSB8CnwgS2luZSB8IFt2MC4xMy4xNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9raW5lL3JlbGVhc2VzL3RhZy92MC4xMy4xNCkgfAp8IFNRTGl0ZSB8IFszLjQ2LjFdKGh0dHBzOi8vc3FsaXRlLm9yZy9yZWxlYXNlbG9nLzNcXzQ2XF8xLmh0bWwpIHwKfCBFdGNkIHwgW3YzLjUuMjEtazNzMV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9ldGNkL3JlbGVhc2VzL3RhZy92My41LjIxLWszczEpIHwKfCBDb250YWluZXJkIHwgW3YyLjAuNC1rM3MyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2NvbnRhaW5lcmQvcmVsZWFzZXMvdGFnL3YyLjAuNC1rM3MyKSB8CnwgUnVuYyB8IFt2MS4yLjVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9vcGVuY29udGFpbmVycy9ydW5jL3JlbGVhc2VzL3RhZy92MS4yLjUpIHwKfCBGbGFubmVsIHwgW3YwLjI2LjddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9mbGFubmVsLWlvL2ZsYW5uZWwvcmVsZWFzZXMvdGFnL3YwLjI2LjcpIHwKfCBNZXRyaWNzLXNlcnZlciB8IFt2MC43LjJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzLXNpZ3MvbWV0cmljcy1zZXJ2ZXIvcmVsZWFzZXMvdGFnL3YwLjcuMikgfAp8IFRyYWVmaWsgfCBbdjIuMTEuMjRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS90cmFlZmlrL3RyYWVmaWsvcmVsZWFzZXMvdGFnL3YyLjExLjI0KSB8CnwgQ29yZUROUyB8IFt2MS4xMi4xXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY29yZWRucy9jb3JlZG5zL3JlbGVhc2VzL3RhZy92MS4xMi4xKSB8CnwgSGVsbS1jb250cm9sbGVyIHwgW3YwLjE2LjEwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2hlbG0tY29udHJvbGxlci9yZWxlYXNlcy90YWcvdjAuMTYuMTApIHwKfCBMb2NhbC1wYXRoLXByb3Zpc2lvbmVyIHwgW3YwLjAuMzFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yYW5jaGVyL2xvY2FsLXBhdGgtcHJvdmlzaW9uZXIvcmVsZWFzZXMvdGFnL3YwLjAuMzEpIHwKCiMjIyMgSGVscGZ1bCBMaW5rcwoKQXMgYWx3YXlzLCB3ZSB3ZWxjb21lIGFuZCBhcHByZWNpYXRlIGZlZWRiYWNrIGZyb20gb3VyIGNvbW11bml0eSBvZiB1c2Vycy4gUGxlYXNlIGZlZWwgZnJlZSB0bzoKCi0gICBbT3BlbiBpc3N1ZXMgaGVyZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3JhbmNoZXIvazNzL2lzc3Vlcy9uZXcvY2hvb3NlKQotICAgW0pvaW4gb3VyIFNsYWNrIGNoYW5uZWxdKGh0dHBzOi8vc2xhY2sucmFuY2hlci5pby8pCi0gICBbQ2hlY2sgb3V0IG91ciBkb2N1bWVudGF0aW9uXShodHRwczovL3JhbmNoZXIuY29tL2RvY3MvazNzL2xhdGVzdC9lbi8pIGZvciBndWlkYW5jZSBvbiBob3cgdG8gZ2V0IHN0YXJ0ZWQgb3IgdG8gZGl2ZSBkZWVwIGludG8gSzNzLgotICAgW1JlYWQgaG93IHlvdSBjYW4gY29udHJpYnV0ZSBoZXJlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcmFuY2hlci9rM3MvYmxvYi9tYXN0ZXIvQ09OVFJJQlVUSU5HLm1kKQoKIyMjIFtgdjEuMzEuNytrM3MxYF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcmVsZWFzZXMvdGFnL3YxLjMxLjclMkJrM3MxKTogdjEuMzEuNytrM3MxCgpbQ29tcGFyZSBTb3VyY2VdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL2NvbXBhcmUvdjEuMzEuNitrM3MxLi4udjEuMzEuNytrM3MxKQoKPCEtLSB2MS4zMS43K2szczEgLS0+CgpUaGlzIHJlbGVhc2UgdXBkYXRlcyBLdWJlcm5ldGVzIHRvIHYxLjMxLjcsIGFuZCBmaXhlcyBhIG51bWJlciBvZiBpc3N1ZXMuCgpGb3IgbW9yZSBkZXRhaWxzIG9uIHdoYXQncyBuZXcsIHNlZSB0aGUgW0t1YmVybmV0ZXMgcmVsZWFzZSBub3Rlc10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9ibG9iL21hc3Rlci9DSEFOR0VMT0cvQ0hBTkdFTE9HLTEuMzEubWQjY2hhbmdlbG9nLXNpbmNlLXYxMzE2KS4KCiMjIyMgQ2hhbmdlcyBzaW5jZSB2MS4zMS42K2szczE6CgotICAgUmV2ZXJ0ICJBZGQgYWJpbGl0eSB0byBwYXNzIGNvbmZpZ3VyYXRpb24gb3B0aW9ucyB0byBmbGFubmVsIGJhY2tlbmQiIFsoIyYjODIwMzsxMTg2OCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE4NjgpCi0gICBCYWNrcG9ydCBEb2NrZXIgKyBFMkUgdGVzdGluZyBQUnMgZm9yIDIwMjUgTWFyY2ggWygjJiM4MjAzOzExODg3KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTg4NykKLSAgIEJhY2twb3J0cyBmb3IgMjAyNS0wMyBbKCMmIzgyMDM7MTE5MjApXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExOTIwKQotICAgQnVtcCBrbGlwcGVyLWxiIHRvIHYwLjQuMTMgWygjJiM4MjAzOzExOTI3KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTkyNykKLSAgIEZpeCBzeW5jaW5nIGVtcHR5IGxpc3Qgb2YgYXBpc2VydmVyIGFkZHJlc3NlcyBkdXJpbmcgaW5pdGlhbCBzdGFydHVwIFsoIyYjODIwMzsxMTk1NCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE5NTQpCi0gICBVcGRhdGUgdG8gdjEuMzEuNy1rM3MxIFsoIyYjODIwMzsxMTk1OCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE5NTgpCi0gICBGaXggc2tldyB0ZXN0IGZvciByZWxlYXNlIGNhbmRpZGF0ZXMgWygjJiM4MjAzOzExOTkwKV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTk5MCkKLSAgIEJ1bXAgdG8gY29udGFpbmVyZCB2Mi4wLjQgWygjJiM4MjAzOzEyMDA0KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMjAwNCkKLSAgIEZpeCB1cGdyYWRlIHRlc3QgY29udGFpbmVyIHZlcnNpb24gWygjJiM4MjAzOzExOTk5KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTk5OSkKCiMjIyMgRW1iZWRkZWQgQ29tcG9uZW50IFZlcnNpb25zCgp8IENvbXBvbmVudCB8IFZlcnNpb24gfAp8LS0tfC0tLXwKfCBLdWJlcm5ldGVzIHwgW3YxLjMxLjddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvYmxvYi9tYXN0ZXIvQ0hBTkdFTE9HL0NIQU5HRUxPRy0xLjMxLm1kI3YxMzE3KSB8CnwgS2luZSB8IFt2MC4xMy45XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2tpbmUvcmVsZWFzZXMvdGFnL3YwLjEzLjkpIHwKfCBTUUxpdGUgfCBbMy40Ni4xXShodHRwczovL3NxbGl0ZS5vcmcvcmVsZWFzZWxvZy8zXF80NlxfMS5odG1sKSB8CnwgRXRjZCB8IFt2My41LjE5LWszczEuMzBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vZXRjZC9yZWxlYXNlcy90YWcvdjMuNS4xOS1rM3MxLjMwKSB8CnwgQ29udGFpbmVyZCB8IFt2Mi4wLjQtazNzMl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9jb250YWluZXJkL3JlbGVhc2VzL3RhZy92Mi4wLjQtazNzMikgfAp8IFJ1bmMgfCBbdjEuMi41XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vb3BlbmNvbnRhaW5lcnMvcnVuYy9yZWxlYXNlcy90YWcvdjEuMi41KSB8CnwgRmxhbm5lbCB8IFt2MC4yNS43XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZmxhbm5lbC1pby9mbGFubmVsL3JlbGVhc2VzL3RhZy92MC4yNS43KSB8CnwgTWV0cmljcy1zZXJ2ZXIgfCBbdjAuNy4yXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy1zaWdzL21ldHJpY3Mtc2VydmVyL3JlbGVhc2VzL3RhZy92MC43LjIpIHwKfCBUcmFlZmlrIHwgW3YyLjExLjIwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vdHJhZWZpay90cmFlZmlrL3JlbGVhc2VzL3RhZy92Mi4xMS4yMCkgfAp8IENvcmVETlMgfCBbdjEuMTIuMF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NvcmVkbnMvY29yZWRucy9yZWxlYXNlcy90YWcvdjEuMTIuMCkgfAp8IEhlbG0tY29udHJvbGxlciB8IFt2MC4xNi42XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2hlbG0tY29udHJvbGxlci9yZWxlYXNlcy90YWcvdjAuMTYuNikgfAp8IExvY2FsLXBhdGgtcHJvdmlzaW9uZXIgfCBbdjAuMC4zMV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3JhbmNoZXIvbG9jYWwtcGF0aC1wcm92aXNpb25lci9yZWxlYXNlcy90YWcvdjAuMC4zMSkgfAoKIyMjIyBIZWxwZnVsIExpbmtzCgpBcyBhbHdheXMsIHdlIHdlbGNvbWUgYW5kIGFwcHJlY2lhdGUgZmVlZGJhY2sgZnJvbSBvdXIgY29tbXVuaXR5IG9mIHVzZXJzLiBQbGVhc2UgZmVlbCBmcmVlIHRvOgoKLSAgIFtPcGVuIGlzc3VlcyBoZXJlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcmFuY2hlci9rM3MvaXNzdWVzL25ldy9jaG9vc2UpCi0gICBbSm9pbiBvdXIgU2xhY2sgY2hhbm5lbF0oaHR0cHM6Ly9zbGFjay5yYW5jaGVyLmlvLykKLSAgIFtDaGVjayBvdXQgb3VyIGRvY3VtZW50YXRpb25dKGh0dHBzOi8vcmFuY2hlci5jb20vZG9jcy9rM3MvbGF0ZXN0L2VuLykgZm9yIGd1aWRhbmNlIG9uIGhvdyB0byBnZXQgc3RhcnRlZCBvciB0byBkaXZlIGRlZXAgaW50byBLM3MuCi0gICBbUmVhZCBob3cgeW91IGNhbiBjb250cmlidXRlIGhlcmVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yYW5jaGVyL2szcy9ibG9iL21hc3Rlci9DT05UUklCVVRJTkcubWQpCgojIyMgW2B2MS4zMS42K2szczFgXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9yZWxlYXNlcy90YWcvdjEuMzEuNiUyQmszczEpOiB2MS4zMS42K2szczEKCltDb21wYXJlIFNvdXJjZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvY29tcGFyZS92MS4zMS41K2szczEuLi52MS4zMS42K2szczEpCgo8IS0tIHYxLjMxLjYrazNzMSAtLT4KClRoaXMgcmVsZWFzZSB1cGRhdGVzIEt1YmVybmV0ZXMgdG8gdjEuMzEuNiwgYW5kIGZpeGVzIGEgbnVtYmVyIG9mIGlzc3Vlcy4KCkZvciBtb3JlIGRldGFpbHMgb24gd2hhdCdzIG5ldywgc2VlIHRoZSBbS3ViZXJuZXRlcyByZWxlYXNlIG5vdGVzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy9rdWJlcm5ldGVzL2Jsb2IvbWFzdGVyL0NIQU5HRUxPRy9DSEFOR0VMT0ctMS4zMS5tZCNjaGFuZ2Vsb2ctc2luY2UtdjEzMTUpLgoKIyMjIyBDaGFuZ2VzIHNpbmNlIHYxLjMxLjUrazNzMToKCi0gICBDb3JyZWN0IHRoZSBrM3MgdG9rZW4gY29tbWFuZCBoZWxwIFsoIyYjODIwMzsxMTY4NSldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE2ODUpCi0gICBKYW4gMjAyNSBUZXN0aW5nIE92ZXJoYXVsLCBFMkUgdG8gRG9ja2VyIE1pZ3JhdGlvbiwgWygjJiM4MjAzOzExNzI0KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTcyNCkKLSAgIEJhY2twb3J0cyBmb3IgMjAyNS0wMiBbKCMmIzgyMDM7MTE3MzIpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExNzMyKQogICAgLSAgIEFsaWduIHRoZSBDTEktcmVwb3J0ZWQgZGVmYXVsdCBgLS1ldGNkLXNuYXBzaG90LWRpcmAgdmFsdWUgd2l0aCB0aGUgYWN0dWFsIG9uZSAoYHNlcnZlcmAsIGBldGNkLXNuYXBzaG90YCBjb21tYW5kcykuCiAgICAtICAgRGlzYWJsZSBzMyB0cmFuc3BvcnQgdHJhbnNwYXJlbnQgY29tcHJlc3Npb24vZGVjb21wcmVzc2lvbgogICAgLSAgIEV0Y2Qgc25hcHNob3QgYmFja3VwL3Jlc3RvcmUgbm93IHN1cHBvcnRzIGxvYWRpbmcgczMgY3JlZGVudGlhbHMgZnJvbSBhbiBBV1MgU0RLIHNoYXJlZCBjcmVkZW50aWFscyBmaWxlLgogICAgLSAgIEJ1bXAga2xpcHBlci1oZWxtIHRvIHYwLjkuNAogICAgLSAgIEJ1bXAga2xpcHBlci1sYiB0byB2MC40LjEwCiAgICAtICAgQnVtcCBzcGVnZWwgdG8gdjAuMC4zMAogICAgLSAgIEJ1bXAgbG9jYWwtcGF0aC1wcm92aXNpb25lciB0byB2MC4wLjMxCiAgICAtICAgQnVtcCBraW5lIHRvIHYwLjEzLjgKICAgIC0gICBCdW1wIGV0Y2QgdG8gdjMuNS4xOAogICAgLSAgIEJ1bXAgdHJhZWZpayB0byAyLjExLjIwCiAgICAtICAgQ29udGFpbmVyZCBoYXMgYmVlbiBidW1wZWQgdG8gdmVyc2lvbiAyLjAuCiAgICAtICAgVGhlIGNvbnRhaW5lcmQgY29uZmlnIHRlbXBsYXRlcyBmb3IgbGludXggYW5kIHdpbmRvd3MgaGF2ZSBiZWVuIGNvbnNvbGlkYXRlZCBhbmQgYXJlIG5vIGxvbmdlciBvcy1zcGVjaWZpYy4KICAgIC0gICBDb250YWluZXJkIDIuMCB1c2VzIGEgbmV3IGNvbmZpZyBmaWxlIHNjaGVtYS4gSWYgeW91IGFyZSB1c2luZyBhIGN1c3RvbSBjb250YWluZXJkIGNvbmZpZyB0ZW1wbGF0ZSwgeW91IHNob3VsZCBtaWdyYXRlIHlvdXIgdGVtcGxhdGUgdG8gYGNvbmZpZy12My50b21sLnRtcGxgIHRvIHN3aXRjaCB0byB0aGUgbmV3IHZlcnNpb24uIFNlZSB0aGUgW3Vwc3RyZWFtIGRvY3VtZW50YXRpb25dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jb250YWluZXJkL2NvbnRhaW5lcmQvYmxvYi9yZWxlYXNlLzIuMC9kb2NzL2NyaS9jb25maWcubWQpIGZvciBtb3JlIGluZm9ybWF0aW9uLgotICAgQnVtcCB0cmFlZmlrIHRvIHYyLjExLjIwIFsoIyYjODIwMzsxMTc2MyldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE3NjMpCi0gICBVcGRhdGUgdG8gdjEuMzEuNi1rM3MxIGFuZCBHbyAxLjIyLjEyIFsoIyYjODIwMzsxMTc4NyldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE3ODcpCi0gICBSZW5kZXIgQ05JIGRpciBjb25maWcgd2hlbmV2ZXIgdmFycyBhcmUgc2V0IFsoIyYjODIwMzsxMTgyMCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE4MjApCi0gICBCdW1wIGNvbnRhaW5lcmQgZm9yIGdvLWNuaSBkZWFkbG9jayBmaXggWygjJiM4MjAzOzExODM0KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTgzNCkKCiMjIyMgRW1iZWRkZWQgQ29tcG9uZW50IFZlcnNpb25zCgp8IENvbXBvbmVudCB8IFZlcnNpb24gfAp8LS0tfC0tLXwKfCBLdWJlcm5ldGVzIHwgW3YxLjMxLjZdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvYmxvYi9tYXN0ZXIvQ0hBTkdFTE9HL0NIQU5HRUxPRy0xLjMxLm1kI3YxMzE2KSB8CnwgS2luZSB8IFt2MC4xMy45XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2tpbmUvcmVsZWFzZXMvdGFnL3YwLjEzLjkpIHwKfCBTUUxpdGUgfCBbMy40Ni4xXShodHRwczovL3NxbGl0ZS5vcmcvcmVsZWFzZWxvZy8zXF80NlxfMS5odG1sKSB8CnwgRXRjZCB8IFt2My41LjE4LWszczFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vZXRjZC9yZWxlYXNlcy90YWcvdjMuNS4xOC1rM3MxKSB8CnwgQ29udGFpbmVyZCB8IFt2Mi4wLjItazNzMl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9jb250YWluZXJkL3JlbGVhc2VzL3RhZy92Mi4wLjItazNzMikgfAp8IFJ1bmMgfCBbdjEuMi40LWszczJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9vcGVuY29udGFpbmVycy9ydW5jL3JlbGVhc2VzL3RhZy92MS4yLjQtazNzMikgfAp8IEZsYW5uZWwgfCBbdjAuMjUuN10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2ZsYW5uZWwtaW8vZmxhbm5lbC9yZWxlYXNlcy90YWcvdjAuMjUuNykgfAp8IE1ldHJpY3Mtc2VydmVyIHwgW3YwLjcuMl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMtc2lncy9tZXRyaWNzLXNlcnZlci9yZWxlYXNlcy90YWcvdjAuNy4yKSB8CnwgVHJhZWZpayB8IFt2Mi4xMS4yMF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3RyYWVmaWsvdHJhZWZpay9yZWxlYXNlcy90YWcvdjIuMTEuMjApIHwKfCBDb3JlRE5TIHwgW3YxLjEyLjBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jb3JlZG5zL2NvcmVkbnMvcmVsZWFzZXMvdGFnL3YxLjEyLjApIHwKfCBIZWxtLWNvbnRyb2xsZXIgfCBbdjAuMTYuNl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9oZWxtLWNvbnRyb2xsZXIvcmVsZWFzZXMvdGFnL3YwLjE2LjYpIHwKfCBMb2NhbC1wYXRoLXByb3Zpc2lvbmVyIHwgW3YwLjAuMzFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yYW5jaGVyL2xvY2FsLXBhdGgtcHJvdmlzaW9uZXIvcmVsZWFzZXMvdGFnL3YwLjAuMzEpIHwKCiMjIyMgSGVscGZ1bCBMaW5rcwoKQXMgYWx3YXlzLCB3ZSB3ZWxjb21lIGFuZCBhcHByZWNpYXRlIGZlZWRiYWNrIGZyb20gb3VyIGNvbW11bml0eSBvZiB1c2Vycy4gUGxlYXNlIGZlZWwgZnJlZSB0bzoKCi0gICBbT3BlbiBpc3N1ZXMgaGVyZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3JhbmNoZXIvazNzL2lzc3Vlcy9uZXcvY2hvb3NlKQotICAgW0pvaW4gb3VyIFNsYWNrIGNoYW5uZWxdKGh0dHBzOi8vc2xhY2sucmFuY2hlci5pby8pCi0gICBbQ2hlY2sgb3V0IG91ciBkb2N1bWVudGF0aW9uXShodHRwczovL3JhbmNoZXIuY29tL2RvY3MvazNzL2xhdGVzdC9lbi8pIGZvciBndWlkYW5jZSBvbiBob3cgdG8gZ2V0IHN0YXJ0ZWQgb3IgdG8gZGl2ZSBkZWVwIGludG8gSzNzLgotICAgW1JlYWQgaG93IHlvdSBjYW4gY29udHJpYnV0ZSBoZXJlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcmFuY2hlci9rM3MvYmxvYi9tYXN0ZXIvQ09OVFJJQlVUSU5HLm1kKQoKIyMjIFtgdjEuMzEuNStrM3MxYF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcmVsZWFzZXMvdGFnL3YxLjMxLjUlMkJrM3MxKTogdjEuMzEuNStrM3MxCgpbQ29tcGFyZSBTb3VyY2VdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL2NvbXBhcmUvdjEuMzEuNCtrM3MxLi4udjEuMzEuNStrM3MxKQoKPCEtLSB2MS4zMS41K2szczEgLS0+CgpUaGlzIHJlbGVhc2UgdXBkYXRlcyBLdWJlcm5ldGVzIHRvIHYxLjMxLjUsIGFuZCBmaXhlcyBhIG51bWJlciBvZiBpc3N1ZXMuCgpGb3IgbW9yZSBkZXRhaWxzIG9uIHdoYXQncyBuZXcsIHNlZSB0aGUgW0t1YmVybmV0ZXMgcmVsZWFzZSBub3Rlc10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2t1YmVybmV0ZXMva3ViZXJuZXRlcy9ibG9iL21hc3Rlci9DSEFOR0VMT0cvQ0hBTkdFTE9HLTEuMzEubWQjY2hhbmdlbG9nLXNpbmNlLXYxMzE0KS4KCiMjIyMgQ2hhbmdlcyBzaW5jZSB2MS4zMS40K2szczE6CgotICAgQWRkIGd1YXJkcmFpbCBmb3IgZXRjZC1zbmFwc2hvdCBbKCMmIzgyMDM7MTEzOTMpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExMzkzKQotICAgQmFja3BvcnRzIGZvciAyMDI1LTAxIFsoIyYjODIwMzsxMTU2NildKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE1NjYpCi0gICBBZGQgYXV0byBpbXBvcnQgaW1hZ2VzIGZvciBjb250YWluZXJkIGltYWdlIHN0b3JlIFsoIyYjODIwMzsxMTU2MildKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE1NjIpCi0gICAyMDI1IEphbnVhcnkgQmFja3BvcnRzIFsoIyYjODIwMzsxMTU4OCldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3B1bGwvMTE1ODgpCi0gICBMb2FkIGtlcm5lbCBtb2R1bGVzIGZvciBuZnQgaW4gYWdlbnQgc2V0dXAgWygjJiM4MjAzOzExNTk2KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTU5NikKLSAgIEZpeCBsb2NhbCBwYXNzd29yZCB2YWxpZGF0aW9uIHdoZW4gYmluZC1hZGRyZXNzIGlzIHNldCBbKCMmIzgyMDM7MTE2MTEpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExNjExKQotICAgVXBkYXRlIHRvIHYxLjMxLjUtazNzMSBhbmQgR28gMS4yMi4xMCBbKCMmIzgyMDM7MTE2MjEpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExNjIxKQotICAgUmVtb3ZlIGxvY2FsIHJlc3RyaWN0aW9uIGZvciBkZWZlcnJlZCBub2RlIHBhc3N3b3JkIHZhbGlkYXRpb24gWygjJiM4MjAzOzExNjQ5KV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2szcy1pby9rM3MvcHVsbC8xMTY0OSkKCiMjIyMgRW1iZWRkZWQgQ29tcG9uZW50IFZlcnNpb25zCgp8IENvbXBvbmVudCB8IFZlcnNpb24gfAp8LS0tfC0tLXwKfCBLdWJlcm5ldGVzIHwgW3YxLjMxLjVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvYmxvYi9tYXN0ZXIvQ0hBTkdFTE9HL0NIQU5HRUxPRy0xLjMxLm1kI3YxMzE1KSB8CnwgS2luZSB8IFt2MC4xMy41XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2tpbmUvcmVsZWFzZXMvdGFnL3YwLjEzLjUpIHwKfCBTUUxpdGUgfCBbMy40Ni4xXShodHRwczovL3NxbGl0ZS5vcmcvcmVsZWFzZWxvZy8zXF80NlxfMS5odG1sKSB8CnwgRXRjZCB8IFt2My41LjE2LWszczFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vZXRjZC9yZWxlYXNlcy90YWcvdjMuNS4xNi1rM3MxKSB8CnwgQ29udGFpbmVyZCB8IFt2MS43LjIzLWszczJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vY29udGFpbmVyZC9yZWxlYXNlcy90YWcvdjEuNy4yMy1rM3MyKSB8CnwgUnVuYyB8IFt2MS4yLjQtazNzMV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL29wZW5jb250YWluZXJzL3J1bmMvcmVsZWFzZXMvdGFnL3YxLjIuNC1rM3MxKSB8CnwgRmxhbm5lbCB8IFt2MC4yNS43XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZmxhbm5lbC1pby9mbGFubmVsL3JlbGVhc2VzL3RhZy92MC4yNS43KSB8CnwgTWV0cmljcy1zZXJ2ZXIgfCBbdjAuNy4yXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va3ViZXJuZXRlcy1zaWdzL21ldHJpY3Mtc2VydmVyL3JlbGVhc2VzL3RhZy92MC43LjIpIHwKfCBUcmFlZmlrIHwgW3YyLjExLjE4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vdHJhZWZpay90cmFlZmlrL3JlbGVhc2VzL3RhZy92Mi4xMS4xOCkgfAp8IENvcmVETlMgfCBbdjEuMTIuMF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NvcmVkbnMvY29yZWRucy9yZWxlYXNlcy90YWcvdjEuMTIuMCkgfAp8IEhlbG0tY29udHJvbGxlciB8IFt2MC4xNi41XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2hlbG0tY29udHJvbGxlci9yZWxlYXNlcy90YWcvdjAuMTYuNSkgfAp8IExvY2FsLXBhdGgtcHJvdmlzaW9uZXIgfCBbdjAuMC4zMF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3JhbmNoZXIvbG9jYWwtcGF0aC1wcm92aXNpb25lci9yZWxlYXNlcy90YWcvdjAuMC4zMCkgfAoKIyMjIyBIZWxwZnVsIExpbmtzCgpBcyBhbHdheXMsIHdlIHdlbGNvbWUgYW5kIGFwcHJlY2lhdGUgZmVlZGJhY2sgZnJvbSBvdXIgY29tbXVuaXR5IG9mIHVzZXJzLiBQbGVhc2UgZmVlbCBmcmVlIHRvOgoKLSAgIFtPcGVuIGlzc3VlcyBoZXJlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcmFuY2hlci9rM3MvaXNzdWVzL25ldy9jaG9vc2UpCi0gICBbSm9pbiBvdXIgU2xhY2sgY2hhbm5lbF0oaHR0cHM6Ly9zbGFjay5yYW5jaGVyLmlvLykKLSAgIFtDaGVjayBvdXQgb3VyIGRvY3VtZW50YXRpb25dKGh0dHBzOi8vcmFuY2hlci5jb20vZG9jcy9rM3MvbGF0ZXN0L2VuLykgZm9yIGd1aWRhbmNlIG9uIGhvdyB0byBnZXQgc3RhcnRlZCBvciB0byBkaXZlIGRlZXAgaW50byBLM3MuCi0gICBbUmVhZCBob3cgeW91IGNhbiBjb250cmlidXRlIGhlcmVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yYW5jaGVyL2szcy9ibG9iL21hc3Rlci9DT05UUklCVVRJTkcubWQpCgojIyMjIFdoYXQncyBDaGFuZ2VkCgotICAgXFtyZWxlYXNlLTEuMzFdIFJlbW92ZSBsb2NhbCByZXN0cmljdGlvbiBmb3IgZGVmZXJyZWQgbm9kZSBwYXNzd29yZCB2YWxpZGF0aW9uIGJ5IFtAJiM4MjAzO2JyYW5kb25kXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYnJhbmRvbmQpIGluIFtodHRwczovL2dpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExNjQ5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9wdWxsLzExNjQ5KQoKKipGdWxsIENoYW5nZWxvZyoqOiBodHRwczovL2dpdGh1Yi5jb20vazNzLWlvL2szcy9jb21wYXJlL3YxLjMxLjUtcmMxK2szczEuLi52MS4zMS41K2szczEKCiMjIyBbYHYxLjMxLjQrazNzMWBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rM3MtaW8vazNzL3JlbGVhc2VzL3RhZy92MS4zMS40JTJCazNzMSk6IHYxLjMxLjQrazNzMQoKW0NvbXBhcmUgU291cmNlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vazNzLWlvL2szcy9jb21wYXJlL3YxLjMxLjMrazNzMS4uLnYxLjMxLjQrazNzMSkKCjwhLS0gdjEuMzEuNCtrM3MxIC0tPgoKVGhpcyByZWxlYXNlIHVwZGF0ZXMgS3ViZXJuZXRlcyB0byB2MS4zMS40LCBhbmQgZml4ZXMgYSBudW1iZXIgb2YgaXNzdWVzLgoKRm9yIG1vcmUgZGV0YWlscyBvbiB3aGF0J3MgbmV3LCBzZWUgdGhlIFtLdWJlcm5ldGVzIHJlbGVhc2Ugbm90ZXNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rdWJlcm5ldGVzL2t1YmVybmV0ZXMvYmxvYi9tYXN0ZXIvQ0hBTkdFTE9HL0NIQU5HRUxPRy0xLjMxLm1kI2NoYW5nZWxvZy1zaW5jZS12MTMxMykuCgojIyMjIyBDaGFuZ2VzIHNpbmNlIHYxLjMxLjMrazNzMQoKPC9kZXRhaWxzPgoKLS0tCgojIyMgQ29uZmlndXJhdGlvbgoK8J+ThSAqKlNjaGVkdWxlKio6IEJyYW5jaCBjcmVhdGlvbiAtIEF0IGFueSB0aW1lIChubyBzY2hlZHVsZSBkZWZpbmVkKSwgQXV0b21lcmdlIC0gQXQgYW55IHRpbWUgKG5vIHNjaGVkdWxlIGRlZmluZWQpLgoK8J+apiAqKkF1dG9tZXJnZSoqOiBEaXNhYmxlZCBieSBjb25maWcuIFBsZWFzZSBtZXJnZSB0aGlzIG1hbnVhbGx5IG9uY2UgeW91IGFyZSBzYXRpc2ZpZWQuCgrimbsgKipSZWJhc2luZyoqOiBXaGVuZXZlciBQUiBiZWNvbWVzIGNvbmZsaWN0ZWQsIG9yIHlvdSB0aWNrIHRoZSByZWJhc2UvcmV0cnkgY2hlY2tib3guCgrwn5SVICoqSWdub3JlKio6IENsb3NlIHRoaXMgUFIgYW5kIHlvdSB3b24ndCBiZSByZW1pbmRlZCBhYm91dCB0aGlzIHVwZGF0ZSBhZ2Fpbi4KCi0tLQoKIC0gWyBdIDwhLS0gcmViYXNlLWNoZWNrIC0tPklmIHlvdSB3YW50IHRvIHJlYmFzZS9yZXRyeSB0aGlzIFBSLCBjaGVjayB0aGlzIGJveAoKLS0tCgpUaGlzIFBSIHdhcyBnZW5lcmF0ZWQgYnkgW01lbmQgUmVub3ZhdGVdKGh0dHBzOi8vbWVuZC5pby9yZW5vdmF0ZS8pLiBWaWV3IHRoZSBbcmVwb3NpdG9yeSBqb2IgbG9nXShodHRwczovL2RldmVsb3Blci5tZW5kLmlvL2dpdGh1Yi9vc2lzbS9yZWxlYXNlKS4KPCEtLXJlbm92YXRlLWRlYnVnOmV5SmpjbVZoZEdWa1NXNVdaWElpT2lJek9TNHlNamN1TXlJc0luVndaR0YwWldSSmJsWmxjaUk2SWpRd0xqRTJMakFpTENKMFlYSm5aWFJDY21GdVkyZ2lPaUp0WVdsdUlpd2liR0ZpWld4eklqcGJJbkpsYm05MllYUmxJbDE5LS0+Cg==
      patchset: 91662de9fc2c9ddf675d28e41dd1344ae719fa8d
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: caa0df55ed55158f32903d317317ac95db4da6ce
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: bf7b7dc34a5e494fa043dc2f23e4626bf96f5aac
          untrusted/project_1/github.com/osism/zuul-config:
            canonical_name: github.com/osism/zuul-config
            checkout: main
            commit: caa0df55ed55158f32903d317317ac95db4da6ce
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/yamllint/run.yaml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_0/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_0/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_1/github.com/osism/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/osism/release
        name: osism/release
        short_name: release
        src_dir: src/github.com/osism/release
      projects:
        github.com/osism/release:
          canonical_hostname: github.com
          canonical_name: github.com/osism/release
          checkout: main
          checkout_description: zuul branch
          commit: 4c703ec9bfe3b30fa9bbc2c7a15f52fcae2b742c
          name: osism/release
          required: false
          short_name: release
          src_dir: src/github.com/osism/release
      ref: refs/pull/1884/head
      resources: {}
      tenant: osism
      timeout: 1800
      topic: null
      voting: true
