all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    ubuntu-jammy:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fe8e:783
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: eebed598-e23c-4ed2-b68b-a328b5df3e20
        host_id: 9a3b43c52073b98876da7433cf53a5f9772104a91b94e1d0ef2a8e4f
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fe8e:783
        label: ubuntu-jammy
        node_properties: {}
        private_ipv4: 10.128.7.150
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.192.211
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fe8e:783
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: YAKEcloud/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job python-black explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#54>'
      - '<Job python-black explicit: None implied: None source: YAKEcloud/yake-ansible/.zuul.yaml@main#82>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: d9e6d5a359f9436fadda11ae6c85bff7
      build_refs:
      - branch: main
        change: '247'
        change_message: "chore(deps): update dependency cilium/cilium to v1.18.1\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [cilium/cilium](https://redirect.github.com/cilium/cilium) | minor | `1.17.4`
          -> `1.18.1` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>cilium/cilium
          (cilium/cilium)</summary>\n\n### [`v1.18.1`](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.1):
          1.18.1\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.18.0...1.18.1)\n\n##
          Summary of Changes\n\n**Minor Changes:**\n\n- Add `kernel_version`, `endpoint_routes_enabled`,
          `strict_mode_enabled` and `kubernetes_version` feature metrics. (Backport
          PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;41003](https://redirect.github.com/cilium/cilium/issues/41003),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- eni: improve logging
          and speed up ipam reconciliation in case of node scale-downs (Backport PR
          [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40852](https://redirect.github.com/cilium/cilium/issues/40852),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n- kvstore: Cilium
          Agent no longer fails health-check if operator is unavailable (Backport
          PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40920](https://redirect.github.com/cilium/cilium/issues/40920),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n- operator: CRDs
          are updated in series instead of in parallel now during Cilium upgrades.
          This should lower the pressure on the k8s control plane (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40322](https://redirect.github.com/cilium/cilium/issues/40322),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n\n**Bugfixes:**\n\n-
          Add missing safeguards to topology-aware routing: use all backends when
          no suitable one matching the zone hints are found or a backend exists without
          a zone hint. ([#&#8203;41116](https://redirect.github.com/cilium/cilium/issues/41116),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- aws/eni: Don't
          use subnet tags to filter ENIs for GC (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40656](https://redirect.github.com/cilium/cilium/issues/40656),
          [@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))\n- clustermesh:
          fix regression possibly causing cross-cluster connections disruption if
          the clustermesh-apiserver is restarted at the same time as Cilium agents.
          (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40786](https://redirect.github.com/cilium/cilium/issues/40786),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- clustermesh:
          fix regression preventing global services with unnamed ports from including
          remote backends (Backport PR [#&#8203;40865](https://redirect.github.com/cilium/cilium/issues/40865),
          Upstream PR [#&#8203;40848](https://redirect.github.com/cilium/cilium/issues/40848),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- Fix bug where
          the presence of a label called \"ingress\" causes incorrect assignment of
          identities to workloads, affecting policy enforcement. (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40791](https://redirect.github.com/cilium/cilium/issues/40791),
          [@&#8203;christarazi](https://redirect.github.com/christarazi))\n- Fix skipping
          of LoadBalancer services when IPMode is not set to VIP (KEP-1860) (Backport
          PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40915](https://redirect.github.com/cilium/cilium/issues/40915),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- fix([GH-37724](https://redirect.github.com/cilium/cilium/issues/37724)):
          Sync policies on startup (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40357](https://redirect.github.com/cilium/cilium/issues/40357),
          [@&#8203;anubhabMajumdar](https://redirect.github.com/anubhabMajumdar))\n-
          fix: create policy snapshot only for sdp (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40785](https://redirect.github.com/cilium/cilium/issues/40785),
          [@&#8203;vipul-21](https://redirect.github.com/vipul-21))\n- Fixes a bug
          where the Cilium agent may segfault when starting. (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40824](https://redirect.github.com/cilium/cilium/issues/40824),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- Fixes an error
          where the Ingress controller, when run in host network, created an invalid
          Service. (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;40232](https://redirect.github.com/cilium/cilium/issues/40232),
          [@&#8203;rtheobald](https://redirect.github.com/rtheobald))\n- helm: Create
          envoy-config ConfigMap for preflight (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;40875](https://redirect.github.com/cilium/cilium/issues/40875),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- install/kubernetes:
          fix clustermesh-apiserver extraEnv (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;41021](https://redirect.github.com/cilium/cilium/issues/41021),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- loadbalancer: Fix backend
          state in REST API (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40780](https://redirect.github.com/cilium/cilium/issues/40780),
          [@&#8203;mhofstetter](https://redirect.github.com/mhofstetter))\n\n**CI
          Changes:**\n\n- .github/actions: only upload files with features-tested
          prefix (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40975](https://redirect.github.com/cilium/cilium/issues/40975),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- Add TESTOWNERS file
          ([#&#8203;40864](https://redirect.github.com/cilium/cilium/issues/40864),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- ci: Add
          Cleanup Disk space step into conformance-runtime (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40973](https://redirect.github.com/cilium/cilium/issues/40973),
          [@&#8203;rastislavs](https://redirect.github.com/rastislavs))\n- ci: Fix
          CI-Fuzz Build failures (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40728](https://redirect.github.com/cilium/cilium/issues/40728),
          [@&#8203;lomackie](https://redirect.github.com/lomackie))\n- ci: Reuse connectivity
          test flags in proxy-embedded (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;41036](https://redirect.github.com/cilium/cilium/issues/41036),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- endpoint:
          Avoid unnecessarily logging a warning during endpoint deletion (Backport
          PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40927](https://redirect.github.com/cilium/cilium/issues/40927),
          [@&#8203;christarazi](https://redirect.github.com/christarazi))\n- Fix GKE
          cluster creation failures when branch names exceed 63-byte label limit by
          implementing automatic truncation with hash-based uniqueness preservation.
          (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40725](https://redirect.github.com/cilium/cilium/issues/40725),
          [@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))\n- Improved
          test failure attribution on stable branches by using TESTOWNERS files to
          route failures to appropriate code quality teams rather than generic CI
          infrastructure teams. (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40776](https://redirect.github.com/cilium/cilium/issues/40776),
          [@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))\n- ipsec:
          fix privileged tests (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;41006](https://redirect.github.com/cilium/cilium/issues/41006),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n- tools/testowners:
          de-duplicate error logs (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40778](https://redirect.github.com/cilium/cilium/issues/40778),
          [@&#8203;tklauser](https://redirect.github.com/tklauser))\n- workflows/ipsec:
          Fix leak detection for IPv6-only in e2e downgrade (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40881](https://redirect.github.com/cilium/cilium/issues/40881),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n\n**Misc
          Changes:**\n\n- .github/workflows: bump build-images-base timeout to 60
          minutes (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40919](https://redirect.github.com/cilium/cilium/issues/40919),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github/workflows:
          print open file descriptors (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40941](https://redirect.github.com/cilium/cilium/issues/40941),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: fix removal
          of all files in /mnt (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40818](https://redirect.github.com/cilium/cilium/issues/40818),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: remove all
          contents of /mnt in build images CI (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40814](https://redirect.github.com/cilium/cilium/issues/40814),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- chore(deps): update
          actions/download-artifact action to v5 (v1.18) ([#&#8203;41055](https://redirect.github.com/cilium/cilium/issues/41055),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all github action dependencies (v1.18) ([#&#8203;40901](https://redirect.github.com/cilium/cilium/issues/40901),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all github action dependencies (v1.18) ([#&#8203;41056](https://redirect.github.com/cilium/cilium/issues/41056),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.18) ([#&#8203;40900](https://redirect.github.com/cilium/cilium/issues/40900),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update dependency cilium/cilium-cli to v0.18.6 (v1.18) ([#&#8203;40898](https://redirect.github.com/cilium/cilium/issues/40898),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update go to v1.24.6 (v1.18) ([#&#8203;40993](https://redirect.github.com/cilium/cilium/issues/40993),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.18) (patch) ([#&#8203;40899](https://redirect.github.com/cilium/cilium/issues/40899),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.18) (patch) ([#&#8203;41054](https://redirect.github.com/cilium/cilium/issues/41054),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          ci: add/change runner labels (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40972](https://redirect.github.com/cilium/cilium/issues/40972),
          [@&#8203;Artyop](https://redirect.github.com/Artyop))\n- daemon/test: explicitly
          wait for identities synchronization (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40811](https://redirect.github.com/cilium/cilium/issues/40811),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- docs: Remove
          references to v1.15 (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;41033](https://redirect.github.com/cilium/cilium/issues/41033),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Fix loadbalancer
          handling of backends with ClusterID set (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;40968](https://redirect.github.com/cilium/cilium/issues/40968),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- Fix race condition
          issues (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40949](https://redirect.github.com/cilium/cilium/issues/40949),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- fix(deps): update module
          github.com/docker/docker to v28.3.3+incompatible \\[security] (v1.18) ([#&#8203;40793](https://redirect.github.com/cilium/cilium/issues/40793),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          loadbalancer: Raise default retry duration to 1 second (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;40997](https://redirect.github.com/cilium/cilium/issues/40997),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- loadbalancer:
          Use unique for L3n4Addr (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40633](https://redirect.github.com/cilium/cilium/issues/40633),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- Makefile: Fix
          multi codeowner detection (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40923](https://redirect.github.com/cilium/cilium/issues/40923),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Reduced
          memory usage by roughly 10% for large EndpointSlices by sharing identical
          objects. (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;40987](https://redirect.github.com/cilium/cilium/issues/40987),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- values(.yaml.tmpl):
          Add Geneve (Class Option) to dsrDispatch paramater (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40625](https://redirect.github.com/cilium/cilium/issues/40625),
          [@&#8203;alagoutte](https://redirect.github.com/alagoutte))\n- vendor: Bump
          to StateDB v0.4.5 (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40783](https://redirect.github.com/cilium/cilium/issues/40783),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n\n**Other Changes:**\n\n-
          ci: reduce gke failures ([#&#8203;41070](https://redirect.github.com/cilium/cilium/issues/41070),
          [@&#8203;brlbil](https://redirect.github.com/brlbil))\n- install: Update
          image digests for v1.18.0 ([#&#8203;40782](https://redirect.github.com/cilium/cilium/issues/40782),
          [@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\\[bot])\n\n####
          Docker Manifests\n\n##### cilium\n\n`quay.io/cilium/cilium:v1.18.1@&#8203;sha256:65ab17c052d8758b2ad157ce766285e04173722df59bdee1ea6d5fda7149f0e9`\n`quay.io/cilium/cilium:stable@sha256:65ab17c052d8758b2ad157ce766285e04173722df59bdee1ea6d5fda7149f0e9`\n\n#####
          clustermesh-apiserver\n\n`quay.io/cilium/clustermesh-apiserver:v1.18.1@&#8203;sha256:87ab85f33dc7e895ed6257564bf1a255d12399d9e8a075a8fc400910ff94cbeb`\n`quay.io/cilium/clustermesh-apiserver:stable@sha256:87ab85f33dc7e895ed6257564bf1a255d12399d9e8a075a8fc400910ff94cbeb`\n\n#####
          docker-plugin\n\n`quay.io/cilium/docker-plugin:v1.18.1@&#8203;sha256:fb1c6ecb6dc180c97488b8ea45d81275237db14d50e22a1eff3dbfaf9f6f93f3`\n`quay.io/cilium/docker-plugin:stable@sha256:fb1c6ecb6dc180c97488b8ea45d81275237db14d50e22a1eff3dbfaf9f6f93f3`\n\n#####
          hubble-relay\n\n`quay.io/cilium/hubble-relay:v1.18.1@&#8203;sha256:7e2fd4877387c7e112689db7c2b153a4d5c77d125b8d50d472dbe81fc1b139b0`\n`quay.io/cilium/hubble-relay:stable@sha256:7e2fd4877387c7e112689db7c2b153a4d5c77d125b8d50d472dbe81fc1b139b0`\n\n#####
          operator-alibabacloud\n\n`quay.io/cilium/operator-alibabacloud:v1.18.1@&#8203;sha256:e2bdc8236acec0d1ef1552c831a7cd2277624031066fbdfac884a31a4126a32a`\n`quay.io/cilium/operator-alibabacloud:stable@sha256:e2bdc8236acec0d1ef1552c831a7cd2277624031066fbdfac884a31a4126a32a`\n\n#####
          operator-aws\n\n`quay.io/cilium/operator-aws:v1.18.1@&#8203;sha256:de522223ecd73bc06b48042fa59f78f7b3b8f2fff4f8f30a61687516798c5042`\n`quay.io/cilium/operator-aws:stable@sha256:de522223ecd73bc06b48042fa59f78f7b3b8f2fff4f8f30a61687516798c5042`\n\n#####
          operator-azure\n\n`quay.io/cilium/operator-azure:v1.18.1@&#8203;sha256:682058e6734e397e7939e92bb463da3c1b5d8b7a7ce408c3b7a62aadb9ce4f06`\n`quay.io/cilium/operator-azure:stable@sha256:682058e6734e397e7939e92bb463da3c1b5d8b7a7ce408c3b7a62aadb9ce4f06`\n\n#####
          operator-generic\n\n`quay.io/cilium/operator-generic:v1.18.1@&#8203;sha256:97f4553afa443465bdfbc1cc4927c93f16ac5d78e4dd2706736e7395382201bc`\n`quay.io/cilium/operator-generic:stable@sha256:97f4553afa443465bdfbc1cc4927c93f16ac5d78e4dd2706736e7395382201bc`\n\n#####
          operator\n\n`quay.io/cilium/operator:v1.18.1@&#8203;sha256:f3b8d90f945167c1ac4324a0f02a9d381f83076d5ce828fab452014f9335a47e`\n`quay.io/cilium/operator:stable@sha256:f3b8d90f945167c1ac4324a0f02a9d381f83076d5ce828fab452014f9335a47e`\n\n###
          [`v1.18.0`](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0):
          1.18.0\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.7...1.18.0)\n\nWe
          are excited to announce the **[Cilium 1.18.0](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0)**
          release!\n\nA total of **3298 new commits** have been contributed to this
          release by a growing community of over **955 developers** and over **22,000
          GitHub stars**! \u2B50\n\nTo keep up to date with all the latest Cilium
          releases, see [Announcements](https://redirect.github.com/cilium/cilium/discussions/categories/announcements)\n\nHere's
          what's new in [v1.18.0](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0):\n\n####
          \U0001F6A0 Networking\n\n- **\u2696\uFE0F Load Balancing Redesign**: The
          service load-balancing control-plane in the Cilium agent has been redesigned
          to reduce memory usage and improve future extensibility of load-balancing
          features ([cilium/cilium#38469](https://redirect.github.com/cilium/cilium/pull/38469),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- **\U0001F50C
          Virtual Network Devices**: Added support for new virtual network device
          configurations such as VXLAN in IPsec (VinE) and IPIP tunnels ([cilium/cilium#37723](https://redirect.github.com/cilium/cilium/pull/37723),
          [@&#8203;ldelossa](https://redirect.github.com/ldelossa); [cilium/cilium#37346](https://redirect.github.com/cilium/cilium/pull/37346),
          [@&#8203;gyutaeb](https://redirect.github.com/gyutaeb))\n- **\u24C2\uFE0F
          Multiple Egress Gateways**: Egress Gateways policies can now direct traffic
          towards multiple gateway nodes ([cilium/cilium#39304](https://redirect.github.com/cilium/cilium/pull/39304),
          [@&#8203;carlos-abad](https://redirect.github.com/carlos-abad))\n- **\U0001F6A6
          Ingress Rate Limiting**: The bandwidth manager now supports ingress rate
          limiting ([cilium/cilium#36351](https://redirect.github.com/cilium/cilium/pull/36351),
          [@&#8203;l1b0k](https://redirect.github.com/l1b0k))\n- **\U0001F4E2 Multi-Device
          L2 Announcements**: The L2 pod announcement feature now supports multiple
          devices ([cilium/cilium#38198](https://redirect.github.com/cilium/cilium/pull/38198),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          **\U0001F3E2 Neighbor Subsystem Rework**: The neighbor subsystem was made
          more resilient through a new system that reconciles desired neighbor entries
          with the kernel state ([cilium/cilium#39987](https://redirect.github.com/cilium/cilium/pull/39987),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n\n####
          \U0001F310 IPv6\n\n- **\U0001F687 Tunneling Underlay**: The tunneling datapath
          mode now supports using an IPv6 network underlay, including when configured
          with IPsec transparent encryption ([cilium/cilium#38296](https://redirect.github.com/cilium/cilium/pull/38296),
          [cilium/cilium#39497](https://redirect.github.com/cilium/cilium/pull/39497),
          [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- **\U0001F4AC
          Kube Proxy Replacement**: Cilium now implements service translation when
          running on an IPv6 underlay ([cilium/cilium#39074](https://redirect.github.com/cilium/cilium/pull/39074),
          [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- **\U0001F4CB
          Delegated IPAM**: When delegating IP address management to a third party
          plugin, Cilium now configures IPv6 routes for connectivity if the plugin
          supports IPv6 ([cilium/cilium#38249](https://redirect.github.com/cilium/cilium/pull/38249),
          [@&#8203;caorui-io](https://redirect.github.com/caorui-io), [@&#8203;kadevu](https://redirect.github.com/kadevu))\n-
          **\U0001F4E6 IP Fragment Support**: Cilium now processes ordered IPv6 fragments
          to apply policy and routing functionality ([cilium/cilium#38110](https://redirect.github.com/cilium/cilium/pull/38110),
          [@&#8203;gentoo-root](https://redirect.github.com/gentoo-root))\n- **\U0001F6AA
          Egress gateway policies** can now match IPv6 address ranges ([cilium/cilium#38452](https://redirect.github.com/cilium/cilium/pull/38452),
          [@&#8203;rgo3](https://redirect.github.com/rgo3))\n\n#### \U0001F6E1\uFE0F
          Policy & Observability\n\n- **\U0001F3F7\uFE0F Policy Names in Hubble-CLI**:
          Show the names of (C)CNPs that allowed or denied traffic when monitoring
          flows in Hubble ([cilium/cilium#39453](https://redirect.github.com/cilium/cilium/pull/39453),
          [@&#8203;antonipp](https://redirect.github.com/antonipp))\n- **\U0001F4DD
          Policy Log Fields**: A new free-text log field is added to policies, which
          is exposed in Hubble flows for easy correlation and searching ([cilium/cilium#39902](https://redirect.github.com/cilium/cilium/pull/39902),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F6F0\uFE0F
          Encapsulated Traffic Decoding**: Hubble decodes encapsulated traffic for
          deeper introspection into traffic flows ([cilium/cilium#37634](https://redirect.github.com/cilium/cilium/pull/37634),
          [@&#8203;kaworu](https://redirect.github.com/kaworu))\n- **\U0001F3F0 ClusterMesh
          Policy Restriction**: A new option allows the **cluster** entity to apply
          only to the local cluster in ClusterMesh environment ([cilium/cilium#39338](https://redirect.github.com/cilium/cilium/pull/39338),
          [@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))\n- **\u2728
          Enhanced Policy Dashboard**: The Policy section of the Cilium Grafana dashboard
          has been improved to show more relevant graphs, including policy drops in
          both directions ([cilium/cilium#36492](https://redirect.github.com/cilium/cilium/pull/36492),
          [cilium/cilium#37445](https://redirect.github.com/cilium/cilium/pull/37445),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n\n#### \U0001F305
          Performance\n\n- **\U0001F4CA Scale Test Results**: Cilium implements policies
          and services up to 45% faster in higher scale environments (Various; [@&#8203;marseel](https://redirect.github.com/marseel),
          [cilium/cilium#40227](https://redirect.github.com/cilium/cilium/pull/40227))\n-
          **\U0001F4E6 Image Size Reduction**: Docker image sizes are reduced by 32%
          on arm64 architecture images ([cilium/cilium#40005](https://redirect.github.com/cilium/cilium/pull/40005),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n- **\u26A1 Improved
          Policy Performance**: The DNS proxy can process large numbers of IPs faster,
          and the EndpointSelector match implementation has been optimized ([cilium/cilium#39340](https://redirect.github.com/cilium/cilium/pull/39340),
          [@&#8203;squeed](https://redirect.github.com/squeed); [cilium/cilium#40414](https://redirect.github.com/cilium/cilium/pull/40414),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n- **\U0001FA9E
          EndpointSlice Mirroring for Multi-Cluster Services**: Clustermesh mirrors
          EndpointSlice from the local cluster instead of copying the Service selectors
          when using the MCS-API controller ([cilium/cilium#38596](https://redirect.github.com/cilium/cilium/pull/38596),
          [@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))\n- **\U0001F310
          KVStoreMesh Optimization**: Cross-cluster state distribution is optimized
          by only synchronizing identities keyed by ID, not by value ([cilium/cilium#36471](https://redirect.github.com/cilium/cilium/pull/36471),
          [@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))\n- **\U0001F9E0
          Egress Gateway Processing**: Egress gateway policy processing is significantly
          improved when matching a large number of pods ([cilium/cilium#37714](https://redirect.github.com/cilium/cilium/pull/37714),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- **\U0001F5D1\uFE0F
          Optimized Garbage Collection for Connection Tracking**: Cilium leverages
          batched iterators for CTMap GC ([cilium/cilium#36288](https://redirect.github.com/cilium/cilium/pull/36288),
          [@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))\n\n####
          \u2699\uFE0F Operations\n\n- **\U0001F4C8 API Server Connections at Scale**:
          Improve kube-apiserver connections behavior at scale through failover and
          setting better jitter and backoff configurations ([cilium/cilium#37601](https://redirect.github.com/cilium/cilium/pull/37601),
          [@&#8203;aditighag](https://redirect.github.com/aditighag); [cilium/cilium#38031](https://redirect.github.com/cilium/cilium/pull/38031),
          [@&#8203;orange30](https://redirect.github.com/orange30); [cilium/cilium#36648](https://redirect.github.com/cilium/cilium/pull/36648),
          [@&#8203;wedaly](https://redirect.github.com/wedaly))\n- **\U0001F504 ConfigMap
          Synchronization**: New option to automatically synchronize ConfigMap changes
          into the agent and report metrics for when the effective configuration is
          different from the desired configuration ([cilium/cilium#36510](https://redirect.github.com/cilium/cilium/pull/36510),
          [@&#8203;ovidiutirla](https://redirect.github.com/ovidiutirla))\n- **\U0001F393
          CRD Promotion to Stable**: Promote **CiliumCIDRGroup**, **CiliumLoadBalancerIPPool**
          and all **BGP** CRDs to stable API ([cilium/cilium#38940](https://redirect.github.com/cilium/cilium/pull/38940),
          [@&#8203;christarazi](https://redirect.github.com/christarazi); [cilium/cilium#39090](https://redirect.github.com/cilium/cilium/pull/39090),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84); [cilium/cilium#37765](https://redirect.github.com/cilium/cilium/pull/37765),
          [@&#8203;rastislavs](https://redirect.github.com/rastislavs))\n- **\u26D4
          Node Taints Handling**: The cilium-operator Deployment uses a new default
          set of taints which avoids deploying to a drained node ([cilium/cilium#40137](https://redirect.github.com/cilium/cilium/pull/40137),
          [@&#8203;Murat](https://redirect.github.com/Murat) Parlakisik)\n- **:wood:
          Migrate to Slog**: Cilium now uses slog as log library for all components
          ([cilium/cilium#39664](https://redirect.github.com/cilium/cilium/pull/39664),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- **\U0001F527 Cilium
          dependencies** were updated to Kubernetes v1.33, Envoy v1.34, LLVM 19.1,
          and CNI v1.1 ([cilium/cilium#39124](https://redirect.github.com/cilium/cilium/pull/39124),
          [cilium/cilium#40175](https://redirect.github.com/cilium/cilium/pull/40175),
          [cilium/cilium#39632](https://redirect.github.com/cilium/cilium/pull/39632),
          [@&#8203;sayboras](https://redirect.github.com/sayboras); [cilium/cilium#38868](https://redirect.github.com/cilium/cilium/pull/38868),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F427 Minimum
          Linux Requirements**: The minimum kernel version for this release series
          is Linux v5.10 or similar, such as RHEL 8.6 ([cilium/cilium#38308](https://redirect.github.com/cilium/cilium/pull/38308),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n\n####
          \U0001F578\uFE0F Service Mesh & Gateway API\n\n- **\u26E9\uFE0F Gateway
          API v1.3.0**: Gateway API support is bumped to v1.3.0 ([cilium/cilium#39590](https://redirect.github.com/cilium/cilium/pull/39590),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- **\U0001F517
          Improved GatewayClass Configuration**: The new CiliumGatewayClassConfig
          object adds service type validation allows the configuration of extra settings
          on a per-GatewayClass level: LoadBalancerSourceRangesPolicy, ParametersRef
          fields. This allows Cilium to reconcile multiple GatewayClasses with different
          configurations ([cilium/cilium#37792](https://redirect.github.com/cilium/cilium/pull/37792),
          [cilium/cilium#37402](https://redirect.github.com/cilium/cilium/pull/37402),
          [cilium/cilium#40138](https://redirect.github.com/cilium/cilium/pull/40138),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- **\U0001F68F
          Multiple HTTPRoutes**: GAMMA reconciler now supports attaching multiple
          HTTPRoutes to the same Service ([cilium/cilium#39922](https://redirect.github.com/cilium/cilium/pull/39922),
          [@&#8203;youngnick](https://redirect.github.com/youngnick))\n- **\U0001FA84
          Route Changes Reconciliation**: Reconcile Gateway API based on all changes
          to routes. This allows label updates to trigger reconciliation correctly,
          amongst other things ([cilium/cilium#37798](https://redirect.github.com/cilium/cilium/pull/37798),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n\n#### \U0001F3F7\uFE0F
          IP Address Management\n\n- **\u2601\uFE0F AWS Prefix Delegation**: Prefix
          delegation on AWS bare metal instances is now supported natively in Cilium's
          AWS ENI IPAM mode ([cilium/cilium#39678](https://redirect.github.com/cilium/cilium/pull/39678),
          [@&#8203;41ks](https://redirect.github.com/41ks))\n- **\U0001F3EC Multi-Pool
          IPAM with KVStore**: Add support for Multi-Pool IPAM in external KVstore
          mode ([cilium/cilium#39638](https://redirect.github.com/cilium/cilium/pull/39638),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- **\U0001F510
          Multi-Pool IPAM with IPSec**: Add support for Multi-Pool IPAM mode with
          IPSec transparent encryption in tunnel routing mode ([cilium/cilium#39442](https://redirect.github.com/cilium/cilium/pull/39442),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- **\u21AA\uFE0F
          Multi-Pool Tunnel Routing**: Add support for tunnel routing in multi-pool
          IPAM mode ([cilium/cilium#38483](https://redirect.github.com/cilium/cilium/pull/38483),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n\n#### \U0001F6E3\uFE0F
          BGP\n\n- **\U0001F4C7 Route Aggregation**: Add support for BGP route aggregation
          in the control plane ([cilium/cilium#37275](https://redirect.github.com/cilium/cilium/pull/37275),
          [@&#8203;romanspb80](https://redirect.github.com/romanspb80))\n- **\U0001F3AF
          Overlapping Selector Matches**: Support overlapping selector matches in
          **CiliumBGPAdvertisement** resources ([cilium/cilium#36414](https://redirect.github.com/cilium/cilium/pull/36414),
          [@&#8203;dswaffordcw](https://redirect.github.com/dswaffordcw))\n- **\U0001F194
          New Router ID generation modes**: Generate router-id based on MAC addresses,
          or from an IP address pool ([cilium/cilium#36451](https://redirect.github.com/cilium/cilium/pull/36451),
          [@&#8203;yushoyamaguchi](https://redirect.github.com/yushoyamaguchi); [cilium/cilium#38300](https://redirect.github.com/cilium/cilium/pull/38300),
          [@&#8203;liyihuang](https://redirect.github.com/liyihuang))\n\n#### \U0001F9D1\u200D\U0001F4BB
          Development Experience\n\n- **\U0001F9EA Test attribution**: Identify owners
          of test in GitHub workflow results to make it easier to connect with other
          developers on tricky problems ([cilium/cilium#37027](https://redirect.github.com/cilium/cilium/pull/37027),
          [@&#8203;Joe](https://redirect.github.com/Joe) Stringer)\n- **\U0001F6CF\uFE0F
          Policy REST API**: The Cilium policy API exposed over a local unix socket
          is deprecated. The other mechanisms to configure policy via Kubernetes resources
          or the local filesystem are preferred ([cilium/cilium#40212](https://redirect.github.com/cilium/cilium/pull/40212),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F3D7\uFE0F
          Feature Deprecation**: Deprecate underused features like Custom Calls, Recorder
          API and External Workloads ([cilium/cilium#38480](https://redirect.github.com/cilium/cilium/pull/38480),
          [cilium/cilium#39642](https://redirect.github.com/cilium/cilium/pull/39642),
          [cilium/cilium#37418](https://redirect.github.com/cilium/cilium/pull/37418),
          [@&#8203;brb](https://redirect.github.com/brb))\n\n#### \U0001F3E2 Community\n\n-
          **\u2764\uFE0F Production Case Studies**: Many end-users have stepped forward
          to tell their stories running Cilium in production. If your company wants
          to submit their case studies let us know. We would love to hear your feedback!\n
          \ - [ByteDance](https://www.youtube.com/watch?v=cKPW67D7X10), [Canopus Networks](https://www.youtube.com/watch?v=YXl9xuIxylY),
          [Corner Banca](https://www.youtube.com/watch?v=HVPKSefazl4), [DB Schenker](https://www.cncf.io/case-studies/db-schenker/),
          [eBay](https://www.youtube.com/watch?v=xEa4KFf5FzY), [ECCO](https://www.cncf.io/case-studies/ecco/),
          [G-Research](https://www.youtube.com/watch?v=kjSFN34dROQ), [Social Network
          Company](https://cilium.io/blog/2025/04/15/tetragon-social-networking-user-story/),
          and [Preferred Networks](https://www.youtube.com/watch?v=n7_I4zu6f_M)\n-
          **\U0001F1EC\U0001F1E7 London Events**: The community gathered at [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/co-located-events/ciliumcon/)
          and the [Cilium Developer Summit](https://redirect.github.com/cilium/dev-summits/tree/main/2025-EU)
          in London\n- **\U0001F1FA\U0001F1F8 Atlanta Events**: Meet us at the upcoming
          [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/co-located-events/ciliumcon/)
          and Cilium Developers Summit in Atlanta, Georgia\n- **\U0001F465 SIG Community
          Meetings**: [SIG Community](https://redirect.github.com/cilium/community/tree/main/sig-community)
          now meets every first and third Thursday to foster, grow, and sustain the
          Cilium open source community\n\n#### \U0001F4D4 Full CHANGELOG\n\n- Full
          CHANGELOG.md can be found [here](https://redirect.github.com/cilium/cilium/blob/v1.18.0/CHANGELOG.md).\n\nAnd
          finally, we would like to thank you to all contributors of Cilium that helped
          directly and indirectly with the project. The success of Cilium could not
          happen without all of you. \u2764\uFE0F :people\\_holding\\_hands:  \u2764\uFE0F\n\n###
          [`v1.17.7`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.7):
          1.17.7\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.6...1.17.7)\n\n##
          Summary of Changes\n\n**Minor Changes:**\n\n- Add `kernel_version`, `endpoint_routes_enabled`,
          `strict_mode_enabled` and `kubernetes_version` feature metrics. (Backport
          PR [#&#8203;41074](https://redirect.github.com/cilium/cilium/issues/41074),
          Upstream PR [#&#8203;41003](https://redirect.github.com/cilium/cilium/issues/41003),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n\n**Bugfixes:**\n\n-
          Added cleanup of deprecated cilium\\_policy\\_v1 maps (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;39400](https://redirect.github.com/cilium/cilium/issues/39400),
          [@&#8203;pasteley](https://redirect.github.com/pasteley))\n- bgp: Use private
          fork of the GoBGP to fix BGP MD5 auth (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40566](https://redirect.github.com/cilium/cilium/issues/40566),
          [@&#8203;YutaroHayakawa](https://redirect.github.com/YutaroHayakawa))\n-
          bpf/nat: fix header offset while reverse nat-ing icmp6 pkt too big. (Backport
          PR [#&#8203;40387](https://redirect.github.com/cilium/cilium/issues/40387),
          Upstream PR [#&#8203;40002](https://redirect.github.com/cilium/cilium/issues/40002),
          [@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))\n- Enable
          protocol differentiation by default on the operator, matching the agent
          ([#&#8203;40643](https://redirect.github.com/cilium/cilium/issues/40643),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          Fix a bug where Cilium leaks stale routes when IPsec is enabled. (Backport
          PR [#&#8203;40664](https://redirect.github.com/cilium/cilium/issues/40664),
          Upstream PR [#&#8203;40653](https://redirect.github.com/cilium/cilium/issues/40653),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- fix(helm):
          fix values.schema.json types for bpf.events.default.{rateLimit,burstLimit}
          (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40543](https://redirect.github.com/cilium/cilium/issues/40543),
          [@&#8203;vchirikov](https://redirect.github.com/vchirikov))\n- fix: kube-proxy
          healthz panic on port 10256 ([#&#8203;40590](https://redirect.github.com/cilium/cilium/issues/40590),
          [@&#8203;tamilmani1989](https://redirect.github.com/tamilmani1989))\n- Helm:
          Correct seccompProfile for cilium-agent pods (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40476](https://redirect.github.com/cilium/cilium/issues/40476),
          [@&#8203;jcpunk](https://redirect.github.com/jcpunk))\n- install/kubernetes:
          fix clustermesh-apiserver extraEnv (Backport PR [#&#8203;41074](https://redirect.github.com/cilium/cilium/issues/41074),
          Upstream PR [#&#8203;41021](https://redirect.github.com/cilium/cilium/issues/41021),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- pkg/ipam: fix multi-pool
          allocator not releasing un-used /32 and /128 CIDRs (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40393](https://redirect.github.com/cilium/cilium/issues/40393),
          [@&#8203;alimehrabikoshki](https://redirect.github.com/alimehrabikoshki))\n-
          service: Only set algorithm annotation when requested ([#&#8203;40845](https://redirect.github.com/cilium/cilium/issues/40845),
          [@&#8203;tsotne95](https://redirect.github.com/tsotne95))\n\n**CI Changes:**\n\n-
          .github/actions: only upload files with features-tested prefix (Backport
          PR [#&#8203;40988](https://redirect.github.com/cilium/cilium/issues/40988),
          Upstream PR [#&#8203;40975](https://redirect.github.com/cilium/cilium/issues/40975),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: Don't overwrite
          junit results (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;39159](https://redirect.github.com/cilium/cilium/issues/39159),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- .github:
          Run final steps when tests aren't skipped (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;40180](https://redirect.github.com/cilium/cilium/issues/40180),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- \\[v1.17]
          .github: Remove use of cosign attest --recursive ([#&#8203;40699](https://redirect.github.com/cilium/cilium/issues/40699),
          [@&#8203;YutaroHayakawa](https://redirect.github.com/YutaroHayakawa))\n-
          \\[v1.17] ci: Revert build\\_commits runner to ubuntu-22.04 ([#&#8203;40837](https://redirect.github.com/cilium/cilium/issues/40837),
          [@&#8203;rastislavs](https://redirect.github.com/rastislavs))\n- builder:
          Add tparse,junit tooling (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;39092](https://redirect.github.com/cilium/cilium/issues/39092),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Centralize
          dynamic test ownership configuration (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;38045](https://redirect.github.com/cilium/cilium/issues/38045),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- ci: conformance-eks
          token extended to 8h (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40474](https://redirect.github.com/cilium/cilium/issues/40474),
          [@&#8203;mathpl](https://redirect.github.com/mathpl))\n- ci: more powerful
          runners for go linting (Backport PR [#&#8203;40765](https://redirect.github.com/cilium/cilium/issues/40765),
          Upstream PR [#&#8203;40582](https://redirect.github.com/cilium/cilium/issues/40582),
          [@&#8203;mathpl](https://redirect.github.com/mathpl))\n- CLI: Attribute
          tests to codeowners (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;37027](https://redirect.github.com/cilium/cilium/issues/37027),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Emit
          junit output from BPF unit tests (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;39099](https://redirect.github.com/cilium/cilium/issues/39099),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Fix GKE
          cluster creation failures when branch names exceed 63-byte label limit by
          implementing automatic truncation with hash-based uniqueness preservation.
          (Backport PR [#&#8203;40849](https://redirect.github.com/cilium/cilium/issues/40849),
          Upstream PR [#&#8203;40725](https://redirect.github.com/cilium/cilium/issues/40725),
          [@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))\n- Improved
          test failure attribution on stable branches by using TESTOWNERS files to
          route failures to appropriate code quality teams rather than generic CI
          infrastructure teams. (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;40776](https://redirect.github.com/cilium/cilium/issues/40776),
          [@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))\n- pkg/egw:
          Add missing waitForReconciliationRun (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40355](https://redirect.github.com/cilium/cilium/issues/40355),
          [@&#8203;aditighag](https://redirect.github.com/aditighag))\n- spire: Fix
          unreliable test (Backport PR [#&#8203;40664](https://redirect.github.com/cilium/cilium/issues/40664),
          Upstream PR [#&#8203;40561](https://redirect.github.com/cilium/cilium/issues/40561),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- tools/testowners:
          de-duplicate error logs (Backport PR [#&#8203;41074](https://redirect.github.com/cilium/cilium/issues/41074),
          Upstream PR [#&#8203;40778](https://redirect.github.com/cilium/cilium/issues/40778),
          [@&#8203;tklauser](https://redirect.github.com/tklauser))\n- Upload junit
          results for Go unit test runs (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;39015](https://redirect.github.com/cilium/cilium/issues/39015),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n\n**Misc
          Changes:**\n\n- .github/workflows: bump build-images-base timeout to 60
          minutes (Backport PR [#&#8203;40988](https://redirect.github.com/cilium/cilium/issues/40988),
          Upstream PR [#&#8203;40919](https://redirect.github.com/cilium/cilium/issues/40919),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: fix removal
          of all files in /mnt (Backport PR [#&#8203;40849](https://redirect.github.com/cilium/cilium/issues/40849),
          Upstream PR [#&#8203;40818](https://redirect.github.com/cilium/cilium/issues/40818),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: fix upload
          artifacts for features.json ([#&#8203;41091](https://redirect.github.com/cilium/cilium/issues/41091),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: remove all
          contents of /mnt in build images CI (Backport PR [#&#8203;40849](https://redirect.github.com/cilium/cilium/issues/40849),
          Upstream PR [#&#8203;40814](https://redirect.github.com/cilium/cilium/issues/40814),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: remove stable
          tag from v1.17 branches ([#&#8203;40772](https://redirect.github.com/cilium/cilium/issues/40772),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- certloader: Add client
          variants of watched TLS configs (Backport PR [#&#8203;40624](https://redirect.github.com/cilium/cilium/issues/40624),
          Upstream PR [#&#8203;40399](https://redirect.github.com/cilium/cilium/issues/40399),
          [@&#8203;devodev](https://redirect.github.com/devodev))\n- chore(deps):
          update actions/download-artifact action to v5 (v1.17) ([#&#8203;41058](https://redirect.github.com/cilium/cilium/issues/41058),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all github action dependencies (v1.17) ([#&#8203;40746](https://redirect.github.com/cilium/cilium/issues/40746),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all github action dependencies (v1.17) ([#&#8203;40905](https://redirect.github.com/cilium/cilium/issues/40905),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all github action dependencies (v1.17) ([#&#8203;41059](https://redirect.github.com/cilium/cilium/issues/41059),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;40744](https://redirect.github.com/cilium/cilium/issues/40744),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;40984](https://redirect.github.com/cilium/cilium/issues/40984),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update dependency cilium/cilium-cli to v0.18.6 (v1.17) ([#&#8203;40902](https://redirect.github.com/cilium/cilium/issues/40902),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update dependency cilium/little-vm-helper to v0.0.26 (v1.17)
          ([#&#8203;40646](https://redirect.github.com/cilium/cilium/issues/40646),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update docker.io/library/golang:1.24.5 docker digest to [`ef5b4be`](https://redirect.github.com/cilium/cilium/commit/ef5b4be)
          (v1.17) ([#&#8203;40745](https://redirect.github.com/cilium/cilium/issues/40745),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update go to v1.24.6 (v1.17) ([#&#8203;40994](https://redirect.github.com/cilium/cilium/issues/40994),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.33.6-1753919866-df8077dbd3932edccb59f1c5c70e01f2c1f63741
          (v1.17) ([#&#8203;40903](https://redirect.github.com/cilium/cilium/issues/40903),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;40673](https://redirect.github.com/cilium/cilium/issues/40673),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;40904](https://redirect.github.com/cilium/cilium/issues/40904),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;41057](https://redirect.github.com/cilium/cilium/issues/41057),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          ci: add/change runner labels (Backport PR [#&#8203;40988](https://redirect.github.com/cilium/cilium/issues/40988),
          Upstream PR [#&#8203;40972](https://redirect.github.com/cilium/cilium/issues/40972),
          [@&#8203;Artyop](https://redirect.github.com/Artyop))\n- cli: Load code
          owners dynamically via --code-owners (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;38044](https://redirect.github.com/cilium/cilium/issues/38044),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- daemon/test:
          explicitly wait for identities synchronization (Backport PR [#&#8203;40849](https://redirect.github.com/cilium/cilium/issues/40849),
          Upstream PR [#&#8203;40811](https://redirect.github.com/cilium/cilium/issues/40811),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- doc:monitor:
          clarify direction traced with default aggregation level (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40398](https://redirect.github.com/cilium/cilium/issues/40398),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n- docs: Add
          missing IPAM modes to configuration page (Backport PR [#&#8203;40664](https://redirect.github.com/cilium/cilium/issues/40664),
          Upstream PR [#&#8203;40540](https://redirect.github.com/cilium/cilium/issues/40540),
          [@&#8203;RayyanSeliya](https://redirect.github.com/RayyanSeliya))\n- docs:
          Add warning about changing an IP pool (Backport PR [#&#8203;40664](https://redirect.github.com/cilium/cilium/issues/40664),
          Upstream PR [#&#8203;40567](https://redirect.github.com/cilium/cilium/issues/40567),
          [@&#8203;sorrison](https://redirect.github.com/sorrison))\n- docs: remove
          l7 EnableDefaultDeny callout (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40441](https://redirect.github.com/cilium/cilium/issues/40441),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- Fix race condition
          issues (Backport PR [#&#8203;40988](https://redirect.github.com/cilium/cilium/issues/40988),
          Upstream PR [#&#8203;40949](https://redirect.github.com/cilium/cilium/issues/40949),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- Makefile: Fix multi
          codeowner detection (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;40923](https://redirect.github.com/cilium/cilium/issues/40923),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Makefile:
          Improve tparse,junit output handling (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;39098](https://redirect.github.com/cilium/cilium/issues/39098),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Support
          extending cilium-agent volumes as a downstream packager (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40401](https://redirect.github.com/cilium/cilium/issues/40401),
          [@&#8203;devodev](https://redirect.github.com/devodev))\n- tools: Move codeowners
          library from cilium-cli dir (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;40253](https://redirect.github.com/cilium/cilium/issues/40253),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n\n**Other
          Changes:**\n\n- Fix bug where LocalRedirectPolicy forwarding would break
          if you enable `bpf-lb-algorithm-annotation` ([#&#8203;40246](https://redirect.github.com/cilium/cilium/issues/40246),
          [@&#8203;tarabrind](https://redirect.github.com/tarabrind))\n- images: update
          cilium-{runtime,builder} ([#&#8203;40839](https://redirect.github.com/cilium/cilium/issues/40839),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- install: Update image
          digests for v1.17.6 ([#&#8203;40546](https://redirect.github.com/cilium/cilium/issues/40546),
          [@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\\[bot])\n-
          vendor: Bump to StateDB v0.4.5 ([#&#8203;40850](https://redirect.github.com/cilium/cilium/issues/40850),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n\n#### Docker Manifests\n\n#####
          cilium\n\n`quay.io/cilium/cilium:v1.17.7@&#8203;sha256:b22440f49c61195171aca585c7a57c6a8867271e43a5abc38f2a2f561436ff86`\n\n#####
          clustermesh-apiserver\n\n`quay.io/cilium/clustermesh-apiserver:v1.17.7@&#8203;sha256:2852feca0d0d936ed0333cd64859f3c5ece2db582ba5fed848f57aff786be4a6`\n\n#####
          docker-plugin\n\n`quay.io/cilium/docker-plugin:v1.17.7@&#8203;sha256:1b7c8d64f01b309521f13ab2a15239a688b9f545bb97058d383ad3bb55e42e67`\n\n#####
          hubble-relay\n\n`quay.io/cilium/hubble-relay:v1.17.7@&#8203;sha256:9394312ce65c3c253a8c26a6c292f58736e75c78d1446ecfcd244f1418bebe77`\n\n#####
          operator-alibabacloud\n\n`quay.io/cilium/operator-alibabacloud:v1.17.7@&#8203;sha256:271e64d6c91019a1a4815b4c78294962bf51c9f764c680fdfacb2adb6e9d0c4d`\n\n#####
          operator-aws\n\n`quay.io/cilium/operator-aws:v1.17.7@&#8203;sha256:ce37d2ccf921761a4171a507748a06a204592890e6f8cf7d1c354648e098c830`\n\n#####
          operator-azure\n\n`quay.io/cilium/operator-azure:v1.17.7@&#8203;sha256:9c1db11de2e0cdcaba522c8f396b9a643738f3d3f958fa9b4d62f57bac5daafb`\n\n#####
          operator-generic\n\n`quay.io/cilium/operator-generic:v1.17.7@&#8203;sha256:a610be2562d0f5a8945a27df7d5681711263ce92e09947e867fc37fc9ab08788`\n\n#####
          operator\n\n`quay.io/cilium/operator:v1.17.7@&#8203;sha256:122e49fce82df90693f8981e5d9013b6a9248284db17226259e39364ba9a211d`\n\n###
          [`v1.17.6`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.6):
          1.17.6\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.5...1.17.6)\n\n##
          Summary of Changes\n\n**Minor Changes:**\n\n- helm: KPR subflag changes
          (Backport PR [#&#8203;40222](https://redirect.github.com/cilium/cilium/issues/40222),
          Upstream PR [#&#8203;39721](https://redirect.github.com/cilium/cilium/issues/39721),
          [@&#8203;brb](https://redirect.github.com/brb))\n\n**Bugfixes:**\n\n- Deny
          policies are now synced to Envoy so that they can be enforced for Ingress
          policies. (Backport PR [#&#8203;40187](https://redirect.github.com/cilium/cilium/issues/40187),
          Upstream PR [#&#8203;39736](https://redirect.github.com/cilium/cilium/issues/39736),
          [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))\n- Do not
          fail the agent startup in case IPv6 support is enabled and the node does
          not have an IPv6 address assigned yet (Backport PR [#&#8203;40205](https://redirect.github.com/cilium/cilium/issues/40205),
          Upstream PR [#&#8203;40143](https://redirect.github.com/cilium/cilium/issues/40143),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- Fix bug preventing
          a global service from including remote backends, if the local service has
          no selector, and the remote one gets removed and then added again. ([#&#8203;40361](https://redirect.github.com/cilium/cilium/issues/40361),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- Fix data race
          involving DumpReliablyWithCallback map operation. (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;38590](https://redirect.github.com/cilium/cilium/issues/38590),
          [@&#8203;aditighag](https://redirect.github.com/aditighag))\n- Fix IPAM
          IP release racing condition when IP reassigned back to ENI (Backport PR
          [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
          Upstream PR [#&#8203;40019](https://redirect.github.com/cilium/cilium/issues/40019),
          [@&#8203;victorcq](https://redirect.github.com/victorcq))\n- hubble automatically
          pick the `hubble-prefer-ipv6` to `true` if ipv4 not enabled (Backport PR
          [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
          Upstream PR [#&#8203;40210](https://redirect.github.com/cilium/cilium/issues/40210),
          [@&#8203;chengjoey](https://redirect.github.com/chengjoey))\n- LBIPAM: Fix
          deletion of CiliumLoadBalancerIPPool with multiple IP blocks that led to
          an operator crash (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;40013](https://redirect.github.com/cilium/cilium/issues/40013),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- pkg/egressgateway:
          ensure gateway IP is IPv4 (Backport PR [#&#8203;40332](https://redirect.github.com/cilium/cilium/issues/40332),
          Upstream PR [#&#8203;40209](https://redirect.github.com/cilium/cilium/issues/40209),
          [@&#8203;rgo3](https://redirect.github.com/rgo3))\n- policy: fix error handling
          for selector policy resolution ([#&#8203;40404](https://redirect.github.com/cilium/cilium/issues/40404),
          [@&#8203;fristonio](https://redirect.github.com/fristonio))\n\n**CI Changes:**\n\n-
          ci: do not run north-south conn disrupt tests for 5.4 kernels ([#&#8203;39443](https://redirect.github.com/cilium/cilium/issues/39443),
          [@&#8203;ldelossa](https://redirect.github.com/ldelossa))\n- ci: fix north-south
          conn disrupt for 5.4 kernel ([#&#8203;40434](https://redirect.github.com/cilium/cilium/issues/40434),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n\n**Misc
          Changes:**\n\n- .github/workflows: remove reviewers if ciliumbot approved
          PR (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;39989](https://redirect.github.com/cilium/cilium/issues/39989),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- auto-approve: add repository
          as part command (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;40050](https://redirect.github.com/cilium/cilium/issues/40050),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- auto-approve: add repository
          as part command (Backport PR [#&#8203;40332](https://redirect.github.com\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
          tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR
          and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC42MC4xIiwidXBkYXRlZEluVmVyIjoiNDEuOTEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/YAKEcloud/yake-ansible/pull/247
        commit_id: 54efaf9c6b2ae54293dcf8d32ef66cade77e2c3e
        patchset: 54efaf9c6b2ae54293dcf8d32ef66cade77e2c3e
        project:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          name: YAKEcloud/yake-ansible
          short_name: yake-ansible
        src_dir: src/github.com/YAKEcloud/yake-ansible
        topic: null
      buildset: 6615445e40694617971310fbedc10495
      buildset_refs:
      - branch: main
        change: '247'
        change_message: "chore(deps): update dependency cilium/cilium to v1.18.1\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [cilium/cilium](https://redirect.github.com/cilium/cilium) | minor | `1.17.4`
          -> `1.18.1` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>cilium/cilium
          (cilium/cilium)</summary>\n\n### [`v1.18.1`](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.1):
          1.18.1\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.18.0...1.18.1)\n\n##
          Summary of Changes\n\n**Minor Changes:**\n\n- Add `kernel_version`, `endpoint_routes_enabled`,
          `strict_mode_enabled` and `kubernetes_version` feature metrics. (Backport
          PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;41003](https://redirect.github.com/cilium/cilium/issues/41003),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- eni: improve logging
          and speed up ipam reconciliation in case of node scale-downs (Backport PR
          [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40852](https://redirect.github.com/cilium/cilium/issues/40852),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n- kvstore: Cilium
          Agent no longer fails health-check if operator is unavailable (Backport
          PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40920](https://redirect.github.com/cilium/cilium/issues/40920),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n- operator: CRDs
          are updated in series instead of in parallel now during Cilium upgrades.
          This should lower the pressure on the k8s control plane (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40322](https://redirect.github.com/cilium/cilium/issues/40322),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n\n**Bugfixes:**\n\n-
          Add missing safeguards to topology-aware routing: use all backends when
          no suitable one matching the zone hints are found or a backend exists without
          a zone hint. ([#&#8203;41116](https://redirect.github.com/cilium/cilium/issues/41116),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- aws/eni: Don't
          use subnet tags to filter ENIs for GC (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40656](https://redirect.github.com/cilium/cilium/issues/40656),
          [@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))\n- clustermesh:
          fix regression possibly causing cross-cluster connections disruption if
          the clustermesh-apiserver is restarted at the same time as Cilium agents.
          (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40786](https://redirect.github.com/cilium/cilium/issues/40786),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- clustermesh:
          fix regression preventing global services with unnamed ports from including
          remote backends (Backport PR [#&#8203;40865](https://redirect.github.com/cilium/cilium/issues/40865),
          Upstream PR [#&#8203;40848](https://redirect.github.com/cilium/cilium/issues/40848),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- Fix bug where
          the presence of a label called \"ingress\" causes incorrect assignment of
          identities to workloads, affecting policy enforcement. (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40791](https://redirect.github.com/cilium/cilium/issues/40791),
          [@&#8203;christarazi](https://redirect.github.com/christarazi))\n- Fix skipping
          of LoadBalancer services when IPMode is not set to VIP (KEP-1860) (Backport
          PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40915](https://redirect.github.com/cilium/cilium/issues/40915),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- fix([GH-37724](https://redirect.github.com/cilium/cilium/issues/37724)):
          Sync policies on startup (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40357](https://redirect.github.com/cilium/cilium/issues/40357),
          [@&#8203;anubhabMajumdar](https://redirect.github.com/anubhabMajumdar))\n-
          fix: create policy snapshot only for sdp (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40785](https://redirect.github.com/cilium/cilium/issues/40785),
          [@&#8203;vipul-21](https://redirect.github.com/vipul-21))\n- Fixes a bug
          where the Cilium agent may segfault when starting. (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40824](https://redirect.github.com/cilium/cilium/issues/40824),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- Fixes an error
          where the Ingress controller, when run in host network, created an invalid
          Service. (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;40232](https://redirect.github.com/cilium/cilium/issues/40232),
          [@&#8203;rtheobald](https://redirect.github.com/rtheobald))\n- helm: Create
          envoy-config ConfigMap for preflight (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;40875](https://redirect.github.com/cilium/cilium/issues/40875),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- install/kubernetes:
          fix clustermesh-apiserver extraEnv (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;41021](https://redirect.github.com/cilium/cilium/issues/41021),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- loadbalancer: Fix backend
          state in REST API (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40780](https://redirect.github.com/cilium/cilium/issues/40780),
          [@&#8203;mhofstetter](https://redirect.github.com/mhofstetter))\n\n**CI
          Changes:**\n\n- .github/actions: only upload files with features-tested
          prefix (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40975](https://redirect.github.com/cilium/cilium/issues/40975),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- Add TESTOWNERS file
          ([#&#8203;40864](https://redirect.github.com/cilium/cilium/issues/40864),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- ci: Add
          Cleanup Disk space step into conformance-runtime (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40973](https://redirect.github.com/cilium/cilium/issues/40973),
          [@&#8203;rastislavs](https://redirect.github.com/rastislavs))\n- ci: Fix
          CI-Fuzz Build failures (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40728](https://redirect.github.com/cilium/cilium/issues/40728),
          [@&#8203;lomackie](https://redirect.github.com/lomackie))\n- ci: Reuse connectivity
          test flags in proxy-embedded (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;41036](https://redirect.github.com/cilium/cilium/issues/41036),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- endpoint:
          Avoid unnecessarily logging a warning during endpoint deletion (Backport
          PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40927](https://redirect.github.com/cilium/cilium/issues/40927),
          [@&#8203;christarazi](https://redirect.github.com/christarazi))\n- Fix GKE
          cluster creation failures when branch names exceed 63-byte label limit by
          implementing automatic truncation with hash-based uniqueness preservation.
          (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40725](https://redirect.github.com/cilium/cilium/issues/40725),
          [@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))\n- Improved
          test failure attribution on stable branches by using TESTOWNERS files to
          route failures to appropriate code quality teams rather than generic CI
          infrastructure teams. (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40776](https://redirect.github.com/cilium/cilium/issues/40776),
          [@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))\n- ipsec:
          fix privileged tests (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;41006](https://redirect.github.com/cilium/cilium/issues/41006),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n- tools/testowners:
          de-duplicate error logs (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40778](https://redirect.github.com/cilium/cilium/issues/40778),
          [@&#8203;tklauser](https://redirect.github.com/tklauser))\n- workflows/ipsec:
          Fix leak detection for IPv6-only in e2e downgrade (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40881](https://redirect.github.com/cilium/cilium/issues/40881),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n\n**Misc
          Changes:**\n\n- .github/workflows: bump build-images-base timeout to 60
          minutes (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40919](https://redirect.github.com/cilium/cilium/issues/40919),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github/workflows:
          print open file descriptors (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40941](https://redirect.github.com/cilium/cilium/issues/40941),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: fix removal
          of all files in /mnt (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40818](https://redirect.github.com/cilium/cilium/issues/40818),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: remove all
          contents of /mnt in build images CI (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40814](https://redirect.github.com/cilium/cilium/issues/40814),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- chore(deps): update
          actions/download-artifact action to v5 (v1.18) ([#&#8203;41055](https://redirect.github.com/cilium/cilium/issues/41055),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all github action dependencies (v1.18) ([#&#8203;40901](https://redirect.github.com/cilium/cilium/issues/40901),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all github action dependencies (v1.18) ([#&#8203;41056](https://redirect.github.com/cilium/cilium/issues/41056),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.18) ([#&#8203;40900](https://redirect.github.com/cilium/cilium/issues/40900),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update dependency cilium/cilium-cli to v0.18.6 (v1.18) ([#&#8203;40898](https://redirect.github.com/cilium/cilium/issues/40898),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update go to v1.24.6 (v1.18) ([#&#8203;40993](https://redirect.github.com/cilium/cilium/issues/40993),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.18) (patch) ([#&#8203;40899](https://redirect.github.com/cilium/cilium/issues/40899),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.18) (patch) ([#&#8203;41054](https://redirect.github.com/cilium/cilium/issues/41054),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          ci: add/change runner labels (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40972](https://redirect.github.com/cilium/cilium/issues/40972),
          [@&#8203;Artyop](https://redirect.github.com/Artyop))\n- daemon/test: explicitly
          wait for identities synchronization (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40811](https://redirect.github.com/cilium/cilium/issues/40811),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- docs: Remove
          references to v1.15 (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;41033](https://redirect.github.com/cilium/cilium/issues/41033),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Fix loadbalancer
          handling of backends with ClusterID set (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;40968](https://redirect.github.com/cilium/cilium/issues/40968),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- Fix race condition
          issues (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40949](https://redirect.github.com/cilium/cilium/issues/40949),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- fix(deps): update module
          github.com/docker/docker to v28.3.3+incompatible \\[security] (v1.18) ([#&#8203;40793](https://redirect.github.com/cilium/cilium/issues/40793),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          loadbalancer: Raise default retry duration to 1 second (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;40997](https://redirect.github.com/cilium/cilium/issues/40997),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- loadbalancer:
          Use unique for L3n4Addr (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40633](https://redirect.github.com/cilium/cilium/issues/40633),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- Makefile: Fix
          multi codeowner detection (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40923](https://redirect.github.com/cilium/cilium/issues/40923),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Reduced
          memory usage by roughly 10% for large EndpointSlices by sharing identical
          objects. (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;40987](https://redirect.github.com/cilium/cilium/issues/40987),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- values(.yaml.tmpl):
          Add Geneve (Class Option) to dsrDispatch paramater (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40625](https://redirect.github.com/cilium/cilium/issues/40625),
          [@&#8203;alagoutte](https://redirect.github.com/alagoutte))\n- vendor: Bump
          to StateDB v0.4.5 (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40783](https://redirect.github.com/cilium/cilium/issues/40783),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n\n**Other Changes:**\n\n-
          ci: reduce gke failures ([#&#8203;41070](https://redirect.github.com/cilium/cilium/issues/41070),
          [@&#8203;brlbil](https://redirect.github.com/brlbil))\n- install: Update
          image digests for v1.18.0 ([#&#8203;40782](https://redirect.github.com/cilium/cilium/issues/40782),
          [@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\\[bot])\n\n####
          Docker Manifests\n\n##### cilium\n\n`quay.io/cilium/cilium:v1.18.1@&#8203;sha256:65ab17c052d8758b2ad157ce766285e04173722df59bdee1ea6d5fda7149f0e9`\n`quay.io/cilium/cilium:stable@sha256:65ab17c052d8758b2ad157ce766285e04173722df59bdee1ea6d5fda7149f0e9`\n\n#####
          clustermesh-apiserver\n\n`quay.io/cilium/clustermesh-apiserver:v1.18.1@&#8203;sha256:87ab85f33dc7e895ed6257564bf1a255d12399d9e8a075a8fc400910ff94cbeb`\n`quay.io/cilium/clustermesh-apiserver:stable@sha256:87ab85f33dc7e895ed6257564bf1a255d12399d9e8a075a8fc400910ff94cbeb`\n\n#####
          docker-plugin\n\n`quay.io/cilium/docker-plugin:v1.18.1@&#8203;sha256:fb1c6ecb6dc180c97488b8ea45d81275237db14d50e22a1eff3dbfaf9f6f93f3`\n`quay.io/cilium/docker-plugin:stable@sha256:fb1c6ecb6dc180c97488b8ea45d81275237db14d50e22a1eff3dbfaf9f6f93f3`\n\n#####
          hubble-relay\n\n`quay.io/cilium/hubble-relay:v1.18.1@&#8203;sha256:7e2fd4877387c7e112689db7c2b153a4d5c77d125b8d50d472dbe81fc1b139b0`\n`quay.io/cilium/hubble-relay:stable@sha256:7e2fd4877387c7e112689db7c2b153a4d5c77d125b8d50d472dbe81fc1b139b0`\n\n#####
          operator-alibabacloud\n\n`quay.io/cilium/operator-alibabacloud:v1.18.1@&#8203;sha256:e2bdc8236acec0d1ef1552c831a7cd2277624031066fbdfac884a31a4126a32a`\n`quay.io/cilium/operator-alibabacloud:stable@sha256:e2bdc8236acec0d1ef1552c831a7cd2277624031066fbdfac884a31a4126a32a`\n\n#####
          operator-aws\n\n`quay.io/cilium/operator-aws:v1.18.1@&#8203;sha256:de522223ecd73bc06b48042fa59f78f7b3b8f2fff4f8f30a61687516798c5042`\n`quay.io/cilium/operator-aws:stable@sha256:de522223ecd73bc06b48042fa59f78f7b3b8f2fff4f8f30a61687516798c5042`\n\n#####
          operator-azure\n\n`quay.io/cilium/operator-azure:v1.18.1@&#8203;sha256:682058e6734e397e7939e92bb463da3c1b5d8b7a7ce408c3b7a62aadb9ce4f06`\n`quay.io/cilium/operator-azure:stable@sha256:682058e6734e397e7939e92bb463da3c1b5d8b7a7ce408c3b7a62aadb9ce4f06`\n\n#####
          operator-generic\n\n`quay.io/cilium/operator-generic:v1.18.1@&#8203;sha256:97f4553afa443465bdfbc1cc4927c93f16ac5d78e4dd2706736e7395382201bc`\n`quay.io/cilium/operator-generic:stable@sha256:97f4553afa443465bdfbc1cc4927c93f16ac5d78e4dd2706736e7395382201bc`\n\n#####
          operator\n\n`quay.io/cilium/operator:v1.18.1@&#8203;sha256:f3b8d90f945167c1ac4324a0f02a9d381f83076d5ce828fab452014f9335a47e`\n`quay.io/cilium/operator:stable@sha256:f3b8d90f945167c1ac4324a0f02a9d381f83076d5ce828fab452014f9335a47e`\n\n###
          [`v1.18.0`](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0):
          1.18.0\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.7...1.18.0)\n\nWe
          are excited to announce the **[Cilium 1.18.0](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0)**
          release!\n\nA total of **3298 new commits** have been contributed to this
          release by a growing community of over **955 developers** and over **22,000
          GitHub stars**! \u2B50\n\nTo keep up to date with all the latest Cilium
          releases, see [Announcements](https://redirect.github.com/cilium/cilium/discussions/categories/announcements)\n\nHere's
          what's new in [v1.18.0](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0):\n\n####
          \U0001F6A0 Networking\n\n- **\u2696\uFE0F Load Balancing Redesign**: The
          service load-balancing control-plane in the Cilium agent has been redesigned
          to reduce memory usage and improve future extensibility of load-balancing
          features ([cilium/cilium#38469](https://redirect.github.com/cilium/cilium/pull/38469),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- **\U0001F50C
          Virtual Network Devices**: Added support for new virtual network device
          configurations such as VXLAN in IPsec (VinE) and IPIP tunnels ([cilium/cilium#37723](https://redirect.github.com/cilium/cilium/pull/37723),
          [@&#8203;ldelossa](https://redirect.github.com/ldelossa); [cilium/cilium#37346](https://redirect.github.com/cilium/cilium/pull/37346),
          [@&#8203;gyutaeb](https://redirect.github.com/gyutaeb))\n- **\u24C2\uFE0F
          Multiple Egress Gateways**: Egress Gateways policies can now direct traffic
          towards multiple gateway nodes ([cilium/cilium#39304](https://redirect.github.com/cilium/cilium/pull/39304),
          [@&#8203;carlos-abad](https://redirect.github.com/carlos-abad))\n- **\U0001F6A6
          Ingress Rate Limiting**: The bandwidth manager now supports ingress rate
          limiting ([cilium/cilium#36351](https://redirect.github.com/cilium/cilium/pull/36351),
          [@&#8203;l1b0k](https://redirect.github.com/l1b0k))\n- **\U0001F4E2 Multi-Device
          L2 Announcements**: The L2 pod announcement feature now supports multiple
          devices ([cilium/cilium#38198](https://redirect.github.com/cilium/cilium/pull/38198),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          **\U0001F3E2 Neighbor Subsystem Rework**: The neighbor subsystem was made
          more resilient through a new system that reconciles desired neighbor entries
          with the kernel state ([cilium/cilium#39987](https://redirect.github.com/cilium/cilium/pull/39987),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n\n####
          \U0001F310 IPv6\n\n- **\U0001F687 Tunneling Underlay**: The tunneling datapath
          mode now supports using an IPv6 network underlay, including when configured
          with IPsec transparent encryption ([cilium/cilium#38296](https://redirect.github.com/cilium/cilium/pull/38296),
          [cilium/cilium#39497](https://redirect.github.com/cilium/cilium/pull/39497),
          [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- **\U0001F4AC
          Kube Proxy Replacement**: Cilium now implements service translation when
          running on an IPv6 underlay ([cilium/cilium#39074](https://redirect.github.com/cilium/cilium/pull/39074),
          [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- **\U0001F4CB
          Delegated IPAM**: When delegating IP address management to a third party
          plugin, Cilium now configures IPv6 routes for connectivity if the plugin
          supports IPv6 ([cilium/cilium#38249](https://redirect.github.com/cilium/cilium/pull/38249),
          [@&#8203;caorui-io](https://redirect.github.com/caorui-io), [@&#8203;kadevu](https://redirect.github.com/kadevu))\n-
          **\U0001F4E6 IP Fragment Support**: Cilium now processes ordered IPv6 fragments
          to apply policy and routing functionality ([cilium/cilium#38110](https://redirect.github.com/cilium/cilium/pull/38110),
          [@&#8203;gentoo-root](https://redirect.github.com/gentoo-root))\n- **\U0001F6AA
          Egress gateway policies** can now match IPv6 address ranges ([cilium/cilium#38452](https://redirect.github.com/cilium/cilium/pull/38452),
          [@&#8203;rgo3](https://redirect.github.com/rgo3))\n\n#### \U0001F6E1\uFE0F
          Policy & Observability\n\n- **\U0001F3F7\uFE0F Policy Names in Hubble-CLI**:
          Show the names of (C)CNPs that allowed or denied traffic when monitoring
          flows in Hubble ([cilium/cilium#39453](https://redirect.github.com/cilium/cilium/pull/39453),
          [@&#8203;antonipp](https://redirect.github.com/antonipp))\n- **\U0001F4DD
          Policy Log Fields**: A new free-text log field is added to policies, which
          is exposed in Hubble flows for easy correlation and searching ([cilium/cilium#39902](https://redirect.github.com/cilium/cilium/pull/39902),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F6F0\uFE0F
          Encapsulated Traffic Decoding**: Hubble decodes encapsulated traffic for
          deeper introspection into traffic flows ([cilium/cilium#37634](https://redirect.github.com/cilium/cilium/pull/37634),
          [@&#8203;kaworu](https://redirect.github.com/kaworu))\n- **\U0001F3F0 ClusterMesh
          Policy Restriction**: A new option allows the **cluster** entity to apply
          only to the local cluster in ClusterMesh environment ([cilium/cilium#39338](https://redirect.github.com/cilium/cilium/pull/39338),
          [@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))\n- **\u2728
          Enhanced Policy Dashboard**: The Policy section of the Cilium Grafana dashboard
          has been improved to show more relevant graphs, including policy drops in
          both directions ([cilium/cilium#36492](https://redirect.github.com/cilium/cilium/pull/36492),
          [cilium/cilium#37445](https://redirect.github.com/cilium/cilium/pull/37445),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n\n#### \U0001F305
          Performance\n\n- **\U0001F4CA Scale Test Results**: Cilium implements policies
          and services up to 45% faster in higher scale environments (Various; [@&#8203;marseel](https://redirect.github.com/marseel),
          [cilium/cilium#40227](https://redirect.github.com/cilium/cilium/pull/40227))\n-
          **\U0001F4E6 Image Size Reduction**: Docker image sizes are reduced by 32%
          on arm64 architecture images ([cilium/cilium#40005](https://redirect.github.com/cilium/cilium/pull/40005),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n- **\u26A1 Improved
          Policy Performance**: The DNS proxy can process large numbers of IPs faster,
          and the EndpointSelector match implementation has been optimized ([cilium/cilium#39340](https://redirect.github.com/cilium/cilium/pull/39340),
          [@&#8203;squeed](https://redirect.github.com/squeed); [cilium/cilium#40414](https://redirect.github.com/cilium/cilium/pull/40414),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n- **\U0001FA9E
          EndpointSlice Mirroring for Multi-Cluster Services**: Clustermesh mirrors
          EndpointSlice from the local cluster instead of copying the Service selectors
          when using the MCS-API controller ([cilium/cilium#38596](https://redirect.github.com/cilium/cilium/pull/38596),
          [@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))\n- **\U0001F310
          KVStoreMesh Optimization**: Cross-cluster state distribution is optimized
          by only synchronizing identities keyed by ID, not by value ([cilium/cilium#36471](https://redirect.github.com/cilium/cilium/pull/36471),
          [@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))\n- **\U0001F9E0
          Egress Gateway Processing**: Egress gateway policy processing is significantly
          improved when matching a large number of pods ([cilium/cilium#37714](https://redirect.github.com/cilium/cilium/pull/37714),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- **\U0001F5D1\uFE0F
          Optimized Garbage Collection for Connection Tracking**: Cilium leverages
          batched iterators for CTMap GC ([cilium/cilium#36288](https://redirect.github.com/cilium/cilium/pull/36288),
          [@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))\n\n####
          \u2699\uFE0F Operations\n\n- **\U0001F4C8 API Server Connections at Scale**:
          Improve kube-apiserver connections behavior at scale through failover and
          setting better jitter and backoff configurations ([cilium/cilium#37601](https://redirect.github.com/cilium/cilium/pull/37601),
          [@&#8203;aditighag](https://redirect.github.com/aditighag); [cilium/cilium#38031](https://redirect.github.com/cilium/cilium/pull/38031),
          [@&#8203;orange30](https://redirect.github.com/orange30); [cilium/cilium#36648](https://redirect.github.com/cilium/cilium/pull/36648),
          [@&#8203;wedaly](https://redirect.github.com/wedaly))\n- **\U0001F504 ConfigMap
          Synchronization**: New option to automatically synchronize ConfigMap changes
          into the agent and report metrics for when the effective configuration is
          different from the desired configuration ([cilium/cilium#36510](https://redirect.github.com/cilium/cilium/pull/36510),
          [@&#8203;ovidiutirla](https://redirect.github.com/ovidiutirla))\n- **\U0001F393
          CRD Promotion to Stable**: Promote **CiliumCIDRGroup**, **CiliumLoadBalancerIPPool**
          and all **BGP** CRDs to stable API ([cilium/cilium#38940](https://redirect.github.com/cilium/cilium/pull/38940),
          [@&#8203;christarazi](https://redirect.github.com/christarazi); [cilium/cilium#39090](https://redirect.github.com/cilium/cilium/pull/39090),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84); [cilium/cilium#37765](https://redirect.github.com/cilium/cilium/pull/37765),
          [@&#8203;rastislavs](https://redirect.github.com/rastislavs))\n- **\u26D4
          Node Taints Handling**: The cilium-operator Deployment uses a new default
          set of taints which avoids deploying to a drained node ([cilium/cilium#40137](https://redirect.github.com/cilium/cilium/pull/40137),
          [@&#8203;Murat](https://redirect.github.com/Murat) Parlakisik)\n- **:wood:
          Migrate to Slog**: Cilium now uses slog as log library for all components
          ([cilium/cilium#39664](https://redirect.github.com/cilium/cilium/pull/39664),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- **\U0001F527 Cilium
          dependencies** were updated to Kubernetes v1.33, Envoy v1.34, LLVM 19.1,
          and CNI v1.1 ([cilium/cilium#39124](https://redirect.github.com/cilium/cilium/pull/39124),
          [cilium/cilium#40175](https://redirect.github.com/cilium/cilium/pull/40175),
          [cilium/cilium#39632](https://redirect.github.com/cilium/cilium/pull/39632),
          [@&#8203;sayboras](https://redirect.github.com/sayboras); [cilium/cilium#38868](https://redirect.github.com/cilium/cilium/pull/38868),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F427 Minimum
          Linux Requirements**: The minimum kernel version for this release series
          is Linux v5.10 or similar, such as RHEL 8.6 ([cilium/cilium#38308](https://redirect.github.com/cilium/cilium/pull/38308),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n\n####
          \U0001F578\uFE0F Service Mesh & Gateway API\n\n- **\u26E9\uFE0F Gateway
          API v1.3.0**: Gateway API support is bumped to v1.3.0 ([cilium/cilium#39590](https://redirect.github.com/cilium/cilium/pull/39590),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- **\U0001F517
          Improved GatewayClass Configuration**: The new CiliumGatewayClassConfig
          object adds service type validation allows the configuration of extra settings
          on a per-GatewayClass level: LoadBalancerSourceRangesPolicy, ParametersRef
          fields. This allows Cilium to reconcile multiple GatewayClasses with different
          configurations ([cilium/cilium#37792](https://redirect.github.com/cilium/cilium/pull/37792),
          [cilium/cilium#37402](https://redirect.github.com/cilium/cilium/pull/37402),
          [cilium/cilium#40138](https://redirect.github.com/cilium/cilium/pull/40138),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- **\U0001F68F
          Multiple HTTPRoutes**: GAMMA reconciler now supports attaching multiple
          HTTPRoutes to the same Service ([cilium/cilium#39922](https://redirect.github.com/cilium/cilium/pull/39922),
          [@&#8203;youngnick](https://redirect.github.com/youngnick))\n- **\U0001FA84
          Route Changes Reconciliation**: Reconcile Gateway API based on all changes
          to routes. This allows label updates to trigger reconciliation correctly,
          amongst other things ([cilium/cilium#37798](https://redirect.github.com/cilium/cilium/pull/37798),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n\n#### \U0001F3F7\uFE0F
          IP Address Management\n\n- **\u2601\uFE0F AWS Prefix Delegation**: Prefix
          delegation on AWS bare metal instances is now supported natively in Cilium's
          AWS ENI IPAM mode ([cilium/cilium#39678](https://redirect.github.com/cilium/cilium/pull/39678),
          [@&#8203;41ks](https://redirect.github.com/41ks))\n- **\U0001F3EC Multi-Pool
          IPAM with KVStore**: Add support for Multi-Pool IPAM in external KVstore
          mode ([cilium/cilium#39638](https://redirect.github.com/cilium/cilium/pull/39638),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- **\U0001F510
          Multi-Pool IPAM with IPSec**: Add support for Multi-Pool IPAM mode with
          IPSec transparent encryption in tunnel routing mode ([cilium/cilium#39442](https://redirect.github.com/cilium/cilium/pull/39442),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- **\u21AA\uFE0F
          Multi-Pool Tunnel Routing**: Add support for tunnel routing in multi-pool
          IPAM mode ([cilium/cilium#38483](https://redirect.github.com/cilium/cilium/pull/38483),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n\n#### \U0001F6E3\uFE0F
          BGP\n\n- **\U0001F4C7 Route Aggregation**: Add support for BGP route aggregation
          in the control plane ([cilium/cilium#37275](https://redirect.github.com/cilium/cilium/pull/37275),
          [@&#8203;romanspb80](https://redirect.github.com/romanspb80))\n- **\U0001F3AF
          Overlapping Selector Matches**: Support overlapping selector matches in
          **CiliumBGPAdvertisement** resources ([cilium/cilium#36414](https://redirect.github.com/cilium/cilium/pull/36414),
          [@&#8203;dswaffordcw](https://redirect.github.com/dswaffordcw))\n- **\U0001F194
          New Router ID generation modes**: Generate router-id based on MAC addresses,
          or from an IP address pool ([cilium/cilium#36451](https://redirect.github.com/cilium/cilium/pull/36451),
          [@&#8203;yushoyamaguchi](https://redirect.github.com/yushoyamaguchi); [cilium/cilium#38300](https://redirect.github.com/cilium/cilium/pull/38300),
          [@&#8203;liyihuang](https://redirect.github.com/liyihuang))\n\n#### \U0001F9D1\u200D\U0001F4BB
          Development Experience\n\n- **\U0001F9EA Test attribution**: Identify owners
          of test in GitHub workflow results to make it easier to connect with other
          developers on tricky problems ([cilium/cilium#37027](https://redirect.github.com/cilium/cilium/pull/37027),
          [@&#8203;Joe](https://redirect.github.com/Joe) Stringer)\n- **\U0001F6CF\uFE0F
          Policy REST API**: The Cilium policy API exposed over a local unix socket
          is deprecated. The other mechanisms to configure policy via Kubernetes resources
          or the local filesystem are preferred ([cilium/cilium#40212](https://redirect.github.com/cilium/cilium/pull/40212),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F3D7\uFE0F
          Feature Deprecation**: Deprecate underused features like Custom Calls, Recorder
          API and External Workloads ([cilium/cilium#38480](https://redirect.github.com/cilium/cilium/pull/38480),
          [cilium/cilium#39642](https://redirect.github.com/cilium/cilium/pull/39642),
          [cilium/cilium#37418](https://redirect.github.com/cilium/cilium/pull/37418),
          [@&#8203;brb](https://redirect.github.com/brb))\n\n#### \U0001F3E2 Community\n\n-
          **\u2764\uFE0F Production Case Studies**: Many end-users have stepped forward
          to tell their stories running Cilium in production. If your company wants
          to submit their case studies let us know. We would love to hear your feedback!\n
          \ - [ByteDance](https://www.youtube.com/watch?v=cKPW67D7X10), [Canopus Networks](https://www.youtube.com/watch?v=YXl9xuIxylY),
          [Corner Banca](https://www.youtube.com/watch?v=HVPKSefazl4), [DB Schenker](https://www.cncf.io/case-studies/db-schenker/),
          [eBay](https://www.youtube.com/watch?v=xEa4KFf5FzY), [ECCO](https://www.cncf.io/case-studies/ecco/),
          [G-Research](https://www.youtube.com/watch?v=kjSFN34dROQ), [Social Network
          Company](https://cilium.io/blog/2025/04/15/tetragon-social-networking-user-story/),
          and [Preferred Networks](https://www.youtube.com/watch?v=n7_I4zu6f_M)\n-
          **\U0001F1EC\U0001F1E7 London Events**: The community gathered at [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/co-located-events/ciliumcon/)
          and the [Cilium Developer Summit](https://redirect.github.com/cilium/dev-summits/tree/main/2025-EU)
          in London\n- **\U0001F1FA\U0001F1F8 Atlanta Events**: Meet us at the upcoming
          [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/co-located-events/ciliumcon/)
          and Cilium Developers Summit in Atlanta, Georgia\n- **\U0001F465 SIG Community
          Meetings**: [SIG Community](https://redirect.github.com/cilium/community/tree/main/sig-community)
          now meets every first and third Thursday to foster, grow, and sustain the
          Cilium open source community\n\n#### \U0001F4D4 Full CHANGELOG\n\n- Full
          CHANGELOG.md can be found [here](https://redirect.github.com/cilium/cilium/blob/v1.18.0/CHANGELOG.md).\n\nAnd
          finally, we would like to thank you to all contributors of Cilium that helped
          directly and indirectly with the project. The success of Cilium could not
          happen without all of you. \u2764\uFE0F :people\\_holding\\_hands:  \u2764\uFE0F\n\n###
          [`v1.17.7`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.7):
          1.17.7\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.6...1.17.7)\n\n##
          Summary of Changes\n\n**Minor Changes:**\n\n- Add `kernel_version`, `endpoint_routes_enabled`,
          `strict_mode_enabled` and `kubernetes_version` feature metrics. (Backport
          PR [#&#8203;41074](https://redirect.github.com/cilium/cilium/issues/41074),
          Upstream PR [#&#8203;41003](https://redirect.github.com/cilium/cilium/issues/41003),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n\n**Bugfixes:**\n\n-
          Added cleanup of deprecated cilium\\_policy\\_v1 maps (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;39400](https://redirect.github.com/cilium/cilium/issues/39400),
          [@&#8203;pasteley](https://redirect.github.com/pasteley))\n- bgp: Use private
          fork of the GoBGP to fix BGP MD5 auth (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40566](https://redirect.github.com/cilium/cilium/issues/40566),
          [@&#8203;YutaroHayakawa](https://redirect.github.com/YutaroHayakawa))\n-
          bpf/nat: fix header offset while reverse nat-ing icmp6 pkt too big. (Backport
          PR [#&#8203;40387](https://redirect.github.com/cilium/cilium/issues/40387),
          Upstream PR [#&#8203;40002](https://redirect.github.com/cilium/cilium/issues/40002),
          [@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))\n- Enable
          protocol differentiation by default on the operator, matching the agent
          ([#&#8203;40643](https://redirect.github.com/cilium/cilium/issues/40643),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          Fix a bug where Cilium leaks stale routes when IPsec is enabled. (Backport
          PR [#&#8203;40664](https://redirect.github.com/cilium/cilium/issues/40664),
          Upstream PR [#&#8203;40653](https://redirect.github.com/cilium/cilium/issues/40653),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- fix(helm):
          fix values.schema.json types for bpf.events.default.{rateLimit,burstLimit}
          (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40543](https://redirect.github.com/cilium/cilium/issues/40543),
          [@&#8203;vchirikov](https://redirect.github.com/vchirikov))\n- fix: kube-proxy
          healthz panic on port 10256 ([#&#8203;40590](https://redirect.github.com/cilium/cilium/issues/40590),
          [@&#8203;tamilmani1989](https://redirect.github.com/tamilmani1989))\n- Helm:
          Correct seccompProfile for cilium-agent pods (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40476](https://redirect.github.com/cilium/cilium/issues/40476),
          [@&#8203;jcpunk](https://redirect.github.com/jcpunk))\n- install/kubernetes:
          fix clustermesh-apiserver extraEnv (Backport PR [#&#8203;41074](https://redirect.github.com/cilium/cilium/issues/41074),
          Upstream PR [#&#8203;41021](https://redirect.github.com/cilium/cilium/issues/41021),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- pkg/ipam: fix multi-pool
          allocator not releasing un-used /32 and /128 CIDRs (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40393](https://redirect.github.com/cilium/cilium/issues/40393),
          [@&#8203;alimehrabikoshki](https://redirect.github.com/alimehrabikoshki))\n-
          service: Only set algorithm annotation when requested ([#&#8203;40845](https://redirect.github.com/cilium/cilium/issues/40845),
          [@&#8203;tsotne95](https://redirect.github.com/tsotne95))\n\n**CI Changes:**\n\n-
          .github/actions: only upload files with features-tested prefix (Backport
          PR [#&#8203;40988](https://redirect.github.com/cilium/cilium/issues/40988),
          Upstream PR [#&#8203;40975](https://redirect.github.com/cilium/cilium/issues/40975),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: Don't overwrite
          junit results (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;39159](https://redirect.github.com/cilium/cilium/issues/39159),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- .github:
          Run final steps when tests aren't skipped (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;40180](https://redirect.github.com/cilium/cilium/issues/40180),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- \\[v1.17]
          .github: Remove use of cosign attest --recursive ([#&#8203;40699](https://redirect.github.com/cilium/cilium/issues/40699),
          [@&#8203;YutaroHayakawa](https://redirect.github.com/YutaroHayakawa))\n-
          \\[v1.17] ci: Revert build\\_commits runner to ubuntu-22.04 ([#&#8203;40837](https://redirect.github.com/cilium/cilium/issues/40837),
          [@&#8203;rastislavs](https://redirect.github.com/rastislavs))\n- builder:
          Add tparse,junit tooling (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;39092](https://redirect.github.com/cilium/cilium/issues/39092),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Centralize
          dynamic test ownership configuration (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;38045](https://redirect.github.com/cilium/cilium/issues/38045),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- ci: conformance-eks
          token extended to 8h (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40474](https://redirect.github.com/cilium/cilium/issues/40474),
          [@&#8203;mathpl](https://redirect.github.com/mathpl))\n- ci: more powerful
          runners for go linting (Backport PR [#&#8203;40765](https://redirect.github.com/cilium/cilium/issues/40765),
          Upstream PR [#&#8203;40582](https://redirect.github.com/cilium/cilium/issues/40582),
          [@&#8203;mathpl](https://redirect.github.com/mathpl))\n- CLI: Attribute
          tests to codeowners (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;37027](https://redirect.github.com/cilium/cilium/issues/37027),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Emit
          junit output from BPF unit tests (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;39099](https://redirect.github.com/cilium/cilium/issues/39099),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Fix GKE
          cluster creation failures when branch names exceed 63-byte label limit by
          implementing automatic truncation with hash-based uniqueness preservation.
          (Backport PR [#&#8203;40849](https://redirect.github.com/cilium/cilium/issues/40849),
          Upstream PR [#&#8203;40725](https://redirect.github.com/cilium/cilium/issues/40725),
          [@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))\n- Improved
          test failure attribution on stable branches by using TESTOWNERS files to
          route failures to appropriate code quality teams rather than generic CI
          infrastructure teams. (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;40776](https://redirect.github.com/cilium/cilium/issues/40776),
          [@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))\n- pkg/egw:
          Add missing waitForReconciliationRun (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40355](https://redirect.github.com/cilium/cilium/issues/40355),
          [@&#8203;aditighag](https://redirect.github.com/aditighag))\n- spire: Fix
          unreliable test (Backport PR [#&#8203;40664](https://redirect.github.com/cilium/cilium/issues/40664),
          Upstream PR [#&#8203;40561](https://redirect.github.com/cilium/cilium/issues/40561),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- tools/testowners:
          de-duplicate error logs (Backport PR [#&#8203;41074](https://redirect.github.com/cilium/cilium/issues/41074),
          Upstream PR [#&#8203;40778](https://redirect.github.com/cilium/cilium/issues/40778),
          [@&#8203;tklauser](https://redirect.github.com/tklauser))\n- Upload junit
          results for Go unit test runs (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;39015](https://redirect.github.com/cilium/cilium/issues/39015),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n\n**Misc
          Changes:**\n\n- .github/workflows: bump build-images-base timeout to 60
          minutes (Backport PR [#&#8203;40988](https://redirect.github.com/cilium/cilium/issues/40988),
          Upstream PR [#&#8203;40919](https://redirect.github.com/cilium/cilium/issues/40919),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: fix removal
          of all files in /mnt (Backport PR [#&#8203;40849](https://redirect.github.com/cilium/cilium/issues/40849),
          Upstream PR [#&#8203;40818](https://redirect.github.com/cilium/cilium/issues/40818),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: fix upload
          artifacts for features.json ([#&#8203;41091](https://redirect.github.com/cilium/cilium/issues/41091),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: remove all
          contents of /mnt in build images CI (Backport PR [#&#8203;40849](https://redirect.github.com/cilium/cilium/issues/40849),
          Upstream PR [#&#8203;40814](https://redirect.github.com/cilium/cilium/issues/40814),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: remove stable
          tag from v1.17 branches ([#&#8203;40772](https://redirect.github.com/cilium/cilium/issues/40772),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- certloader: Add client
          variants of watched TLS configs (Backport PR [#&#8203;40624](https://redirect.github.com/cilium/cilium/issues/40624),
          Upstream PR [#&#8203;40399](https://redirect.github.com/cilium/cilium/issues/40399),
          [@&#8203;devodev](https://redirect.github.com/devodev))\n- chore(deps):
          update actions/download-artifact action to v5 (v1.17) ([#&#8203;41058](https://redirect.github.com/cilium/cilium/issues/41058),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all github action dependencies (v1.17) ([#&#8203;40746](https://redirect.github.com/cilium/cilium/issues/40746),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all github action dependencies (v1.17) ([#&#8203;40905](https://redirect.github.com/cilium/cilium/issues/40905),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all github action dependencies (v1.17) ([#&#8203;41059](https://redirect.github.com/cilium/cilium/issues/41059),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;40744](https://redirect.github.com/cilium/cilium/issues/40744),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;40984](https://redirect.github.com/cilium/cilium/issues/40984),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update dependency cilium/cilium-cli to v0.18.6 (v1.17) ([#&#8203;40902](https://redirect.github.com/cilium/cilium/issues/40902),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update dependency cilium/little-vm-helper to v0.0.26 (v1.17)
          ([#&#8203;40646](https://redirect.github.com/cilium/cilium/issues/40646),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update docker.io/library/golang:1.24.5 docker digest to [`ef5b4be`](https://redirect.github.com/cilium/cilium/commit/ef5b4be)
          (v1.17) ([#&#8203;40745](https://redirect.github.com/cilium/cilium/issues/40745),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update go to v1.24.6 (v1.17) ([#&#8203;40994](https://redirect.github.com/cilium/cilium/issues/40994),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.33.6-1753919866-df8077dbd3932edccb59f1c5c70e01f2c1f63741
          (v1.17) ([#&#8203;40903](https://redirect.github.com/cilium/cilium/issues/40903),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;40673](https://redirect.github.com/cilium/cilium/issues/40673),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;40904](https://redirect.github.com/cilium/cilium/issues/40904),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;41057](https://redirect.github.com/cilium/cilium/issues/41057),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          ci: add/change runner labels (Backport PR [#&#8203;40988](https://redirect.github.com/cilium/cilium/issues/40988),
          Upstream PR [#&#8203;40972](https://redirect.github.com/cilium/cilium/issues/40972),
          [@&#8203;Artyop](https://redirect.github.com/Artyop))\n- cli: Load code
          owners dynamically via --code-owners (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;38044](https://redirect.github.com/cilium/cilium/issues/38044),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- daemon/test:
          explicitly wait for identities synchronization (Backport PR [#&#8203;40849](https://redirect.github.com/cilium/cilium/issues/40849),
          Upstream PR [#&#8203;40811](https://redirect.github.com/cilium/cilium/issues/40811),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- doc:monitor:
          clarify direction traced with default aggregation level (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40398](https://redirect.github.com/cilium/cilium/issues/40398),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n- docs: Add
          missing IPAM modes to configuration page (Backport PR [#&#8203;40664](https://redirect.github.com/cilium/cilium/issues/40664),
          Upstream PR [#&#8203;40540](https://redirect.github.com/cilium/cilium/issues/40540),
          [@&#8203;RayyanSeliya](https://redirect.github.com/RayyanSeliya))\n- docs:
          Add warning about changing an IP pool (Backport PR [#&#8203;40664](https://redirect.github.com/cilium/cilium/issues/40664),
          Upstream PR [#&#8203;40567](https://redirect.github.com/cilium/cilium/issues/40567),
          [@&#8203;sorrison](https://redirect.github.com/sorrison))\n- docs: remove
          l7 EnableDefaultDeny callout (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40441](https://redirect.github.com/cilium/cilium/issues/40441),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- Fix race condition
          issues (Backport PR [#&#8203;40988](https://redirect.github.com/cilium/cilium/issues/40988),
          Upstream PR [#&#8203;40949](https://redirect.github.com/cilium/cilium/issues/40949),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- Makefile: Fix multi
          codeowner detection (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;40923](https://redirect.github.com/cilium/cilium/issues/40923),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Makefile:
          Improve tparse,junit output handling (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;39098](https://redirect.github.com/cilium/cilium/issues/39098),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Support
          extending cilium-agent volumes as a downstream packager (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40401](https://redirect.github.com/cilium/cilium/issues/40401),
          [@&#8203;devodev](https://redirect.github.com/devodev))\n- tools: Move codeowners
          library from cilium-cli dir (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;40253](https://redirect.github.com/cilium/cilium/issues/40253),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n\n**Other
          Changes:**\n\n- Fix bug where LocalRedirectPolicy forwarding would break
          if you enable `bpf-lb-algorithm-annotation` ([#&#8203;40246](https://redirect.github.com/cilium/cilium/issues/40246),
          [@&#8203;tarabrind](https://redirect.github.com/tarabrind))\n- images: update
          cilium-{runtime,builder} ([#&#8203;40839](https://redirect.github.com/cilium/cilium/issues/40839),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- install: Update image
          digests for v1.17.6 ([#&#8203;40546](https://redirect.github.com/cilium/cilium/issues/40546),
          [@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\\[bot])\n-
          vendor: Bump to StateDB v0.4.5 ([#&#8203;40850](https://redirect.github.com/cilium/cilium/issues/40850),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n\n#### Docker Manifests\n\n#####
          cilium\n\n`quay.io/cilium/cilium:v1.17.7@&#8203;sha256:b22440f49c61195171aca585c7a57c6a8867271e43a5abc38f2a2f561436ff86`\n\n#####
          clustermesh-apiserver\n\n`quay.io/cilium/clustermesh-apiserver:v1.17.7@&#8203;sha256:2852feca0d0d936ed0333cd64859f3c5ece2db582ba5fed848f57aff786be4a6`\n\n#####
          docker-plugin\n\n`quay.io/cilium/docker-plugin:v1.17.7@&#8203;sha256:1b7c8d64f01b309521f13ab2a15239a688b9f545bb97058d383ad3bb55e42e67`\n\n#####
          hubble-relay\n\n`quay.io/cilium/hubble-relay:v1.17.7@&#8203;sha256:9394312ce65c3c253a8c26a6c292f58736e75c78d1446ecfcd244f1418bebe77`\n\n#####
          operator-alibabacloud\n\n`quay.io/cilium/operator-alibabacloud:v1.17.7@&#8203;sha256:271e64d6c91019a1a4815b4c78294962bf51c9f764c680fdfacb2adb6e9d0c4d`\n\n#####
          operator-aws\n\n`quay.io/cilium/operator-aws:v1.17.7@&#8203;sha256:ce37d2ccf921761a4171a507748a06a204592890e6f8cf7d1c354648e098c830`\n\n#####
          operator-azure\n\n`quay.io/cilium/operator-azure:v1.17.7@&#8203;sha256:9c1db11de2e0cdcaba522c8f396b9a643738f3d3f958fa9b4d62f57bac5daafb`\n\n#####
          operator-generic\n\n`quay.io/cilium/operator-generic:v1.17.7@&#8203;sha256:a610be2562d0f5a8945a27df7d5681711263ce92e09947e867fc37fc9ab08788`\n\n#####
          operator\n\n`quay.io/cilium/operator:v1.17.7@&#8203;sha256:122e49fce82df90693f8981e5d9013b6a9248284db17226259e39364ba9a211d`\n\n###
          [`v1.17.6`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.6):
          1.17.6\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.5...1.17.6)\n\n##
          Summary of Changes\n\n**Minor Changes:**\n\n- helm: KPR subflag changes
          (Backport PR [#&#8203;40222](https://redirect.github.com/cilium/cilium/issues/40222),
          Upstream PR [#&#8203;39721](https://redirect.github.com/cilium/cilium/issues/39721),
          [@&#8203;brb](https://redirect.github.com/brb))\n\n**Bugfixes:**\n\n- Deny
          policies are now synced to Envoy so that they can be enforced for Ingress
          policies. (Backport PR [#&#8203;40187](https://redirect.github.com/cilium/cilium/issues/40187),
          Upstream PR [#&#8203;39736](https://redirect.github.com/cilium/cilium/issues/39736),
          [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))\n- Do not
          fail the agent startup in case IPv6 support is enabled and the node does
          not have an IPv6 address assigned yet (Backport PR [#&#8203;40205](https://redirect.github.com/cilium/cilium/issues/40205),
          Upstream PR [#&#8203;40143](https://redirect.github.com/cilium/cilium/issues/40143),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- Fix bug preventing
          a global service from including remote backends, if the local service has
          no selector, and the remote one gets removed and then added again. ([#&#8203;40361](https://redirect.github.com/cilium/cilium/issues/40361),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- Fix data race
          involving DumpReliablyWithCallback map operation. (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;38590](https://redirect.github.com/cilium/cilium/issues/38590),
          [@&#8203;aditighag](https://redirect.github.com/aditighag))\n- Fix IPAM
          IP release racing condition when IP reassigned back to ENI (Backport PR
          [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
          Upstream PR [#&#8203;40019](https://redirect.github.com/cilium/cilium/issues/40019),
          [@&#8203;victorcq](https://redirect.github.com/victorcq))\n- hubble automatically
          pick the `hubble-prefer-ipv6` to `true` if ipv4 not enabled (Backport PR
          [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
          Upstream PR [#&#8203;40210](https://redirect.github.com/cilium/cilium/issues/40210),
          [@&#8203;chengjoey](https://redirect.github.com/chengjoey))\n- LBIPAM: Fix
          deletion of CiliumLoadBalancerIPPool with multiple IP blocks that led to
          an operator crash (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;40013](https://redirect.github.com/cilium/cilium/issues/40013),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- pkg/egressgateway:
          ensure gateway IP is IPv4 (Backport PR [#&#8203;40332](https://redirect.github.com/cilium/cilium/issues/40332),
          Upstream PR [#&#8203;40209](https://redirect.github.com/cilium/cilium/issues/40209),
          [@&#8203;rgo3](https://redirect.github.com/rgo3))\n- policy: fix error handling
          for selector policy resolution ([#&#8203;40404](https://redirect.github.com/cilium/cilium/issues/40404),
          [@&#8203;fristonio](https://redirect.github.com/fristonio))\n\n**CI Changes:**\n\n-
          ci: do not run north-south conn disrupt tests for 5.4 kernels ([#&#8203;39443](https://redirect.github.com/cilium/cilium/issues/39443),
          [@&#8203;ldelossa](https://redirect.github.com/ldelossa))\n- ci: fix north-south
          conn disrupt for 5.4 kernel ([#&#8203;40434](https://redirect.github.com/cilium/cilium/issues/40434),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n\n**Misc
          Changes:**\n\n- .github/workflows: remove reviewers if ciliumbot approved
          PR (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;39989](https://redirect.github.com/cilium/cilium/issues/39989),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- auto-approve: add repository
          as part command (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;40050](https://redirect.github.com/cilium/cilium/issues/40050),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- auto-approve: add repository
          as part command (Backport PR [#&#8203;40332](https://redirect.github.com\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
          tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR
          and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC42MC4xIiwidXBkYXRlZEluVmVyIjoiNDEuOTEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/YAKEcloud/yake-ansible/pull/247
        commit_id: 54efaf9c6b2ae54293dcf8d32ef66cade77e2c3e
        patchset: 54efaf9c6b2ae54293dcf8d32ef66cade77e2c3e
        project:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          name: YAKEcloud/yake-ansible
          short_name: yake-ansible
        src_dir: src/github.com/YAKEcloud/yake-ansible
        topic: null
      change: '247'
      change_message: "chore(deps): update dependency cilium/cilium to v1.18.1\n\nThis
        PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
        [cilium/cilium](https://redirect.github.com/cilium/cilium) | minor | `1.17.4`
        -> `1.18.1` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>cilium/cilium
        (cilium/cilium)</summary>\n\n### [`v1.18.1`](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.1):
        1.18.1\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.18.0...1.18.1)\n\n##
        Summary of Changes\n\n**Minor Changes:**\n\n- Add `kernel_version`, `endpoint_routes_enabled`,
        `strict_mode_enabled` and `kubernetes_version` feature metrics. (Backport
        PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
        Upstream PR [#&#8203;41003](https://redirect.github.com/cilium/cilium/issues/41003),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- eni: improve logging
        and speed up ipam reconciliation in case of node scale-downs (Backport PR
        [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979), Upstream
        PR [#&#8203;40852](https://redirect.github.com/cilium/cilium/issues/40852),
        [@&#8203;marseel](https://redirect.github.com/marseel))\n- kvstore: Cilium
        Agent no longer fails health-check if operator is unavailable (Backport PR
        [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979), Upstream
        PR [#&#8203;40920](https://redirect.github.com/cilium/cilium/issues/40920),
        [@&#8203;marseel](https://redirect.github.com/marseel))\n- operator: CRDs
        are updated in series instead of in parallel now during Cilium upgrades. This
        should lower the pressure on the k8s control plane (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
        Upstream PR [#&#8203;40322](https://redirect.github.com/cilium/cilium/issues/40322),
        [@&#8203;marseel](https://redirect.github.com/marseel))\n\n**Bugfixes:**\n\n-
        Add missing safeguards to topology-aware routing: use all backends when no
        suitable one matching the zone hints are found or a backend exists without
        a zone hint. ([#&#8203;41116](https://redirect.github.com/cilium/cilium/issues/41116),
        [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- aws/eni: Don't
        use subnet tags to filter ENIs for GC (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
        Upstream PR [#&#8203;40656](https://redirect.github.com/cilium/cilium/issues/40656),
        [@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))\n- clustermesh:
        fix regression possibly causing cross-cluster connections disruption if the
        clustermesh-apiserver is restarted at the same time as Cilium agents. (Backport
        PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
        Upstream PR [#&#8203;40786](https://redirect.github.com/cilium/cilium/issues/40786),
        [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- clustermesh:
        fix regression preventing global services with unnamed ports from including
        remote backends (Backport PR [#&#8203;40865](https://redirect.github.com/cilium/cilium/issues/40865),
        Upstream PR [#&#8203;40848](https://redirect.github.com/cilium/cilium/issues/40848),
        [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- Fix bug where
        the presence of a label called \"ingress\" causes incorrect assignment of
        identities to workloads, affecting policy enforcement. (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
        Upstream PR [#&#8203;40791](https://redirect.github.com/cilium/cilium/issues/40791),
        [@&#8203;christarazi](https://redirect.github.com/christarazi))\n- Fix skipping
        of LoadBalancer services when IPMode is not set to VIP (KEP-1860) (Backport
        PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
        Upstream PR [#&#8203;40915](https://redirect.github.com/cilium/cilium/issues/40915),
        [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- fix([GH-37724](https://redirect.github.com/cilium/cilium/issues/37724)):
        Sync policies on startup (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
        Upstream PR [#&#8203;40357](https://redirect.github.com/cilium/cilium/issues/40357),
        [@&#8203;anubhabMajumdar](https://redirect.github.com/anubhabMajumdar))\n-
        fix: create policy snapshot only for sdp (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
        Upstream PR [#&#8203;40785](https://redirect.github.com/cilium/cilium/issues/40785),
        [@&#8203;vipul-21](https://redirect.github.com/vipul-21))\n- Fixes a bug where
        the Cilium agent may segfault when starting. (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
        Upstream PR [#&#8203;40824](https://redirect.github.com/cilium/cilium/issues/40824),
        [@&#8203;squeed](https://redirect.github.com/squeed))\n- Fixes an error where
        the Ingress controller, when run in host network, created an invalid Service.
        (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
        Upstream PR [#&#8203;40232](https://redirect.github.com/cilium/cilium/issues/40232),
        [@&#8203;rtheobald](https://redirect.github.com/rtheobald))\n- helm: Create
        envoy-config ConfigMap for preflight (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
        Upstream PR [#&#8203;40875](https://redirect.github.com/cilium/cilium/issues/40875),
        [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- install/kubernetes:
        fix clustermesh-apiserver extraEnv (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
        Upstream PR [#&#8203;41021](https://redirect.github.com/cilium/cilium/issues/41021),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- loadbalancer: Fix backend
        state in REST API (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
        Upstream PR [#&#8203;40780](https://redirect.github.com/cilium/cilium/issues/40780),
        [@&#8203;mhofstetter](https://redirect.github.com/mhofstetter))\n\n**CI Changes:**\n\n-
        .github/actions: only upload files with features-tested prefix (Backport PR
        [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979), Upstream
        PR [#&#8203;40975](https://redirect.github.com/cilium/cilium/issues/40975),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- Add TESTOWNERS file ([#&#8203;40864](https://redirect.github.com/cilium/cilium/issues/40864),
        [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- ci: Add
        Cleanup Disk space step into conformance-runtime (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
        Upstream PR [#&#8203;40973](https://redirect.github.com/cilium/cilium/issues/40973),
        [@&#8203;rastislavs](https://redirect.github.com/rastislavs))\n- ci: Fix CI-Fuzz
        Build failures (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
        Upstream PR [#&#8203;40728](https://redirect.github.com/cilium/cilium/issues/40728),
        [@&#8203;lomackie](https://redirect.github.com/lomackie))\n- ci: Reuse connectivity
        test flags in proxy-embedded (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
        Upstream PR [#&#8203;41036](https://redirect.github.com/cilium/cilium/issues/41036),
        [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- endpoint:
        Avoid unnecessarily logging a warning during endpoint deletion (Backport PR
        [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979), Upstream
        PR [#&#8203;40927](https://redirect.github.com/cilium/cilium/issues/40927),
        [@&#8203;christarazi](https://redirect.github.com/christarazi))\n- Fix GKE
        cluster creation failures when branch names exceed 63-byte label limit by
        implementing automatic truncation with hash-based uniqueness preservation.
        (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
        Upstream PR [#&#8203;40725](https://redirect.github.com/cilium/cilium/issues/40725),
        [@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))\n- Improved
        test failure attribution on stable branches by using TESTOWNERS files to route
        failures to appropriate code quality teams rather than generic CI infrastructure
        teams. (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
        Upstream PR [#&#8203;40776](https://redirect.github.com/cilium/cilium/issues/40776),
        [@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))\n- ipsec:
        fix privileged tests (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
        Upstream PR [#&#8203;41006](https://redirect.github.com/cilium/cilium/issues/41006),
        [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n- tools/testowners:
        de-duplicate error logs (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
        Upstream PR [#&#8203;40778](https://redirect.github.com/cilium/cilium/issues/40778),
        [@&#8203;tklauser](https://redirect.github.com/tklauser))\n- workflows/ipsec:
        Fix leak detection for IPv6-only in e2e downgrade (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
        Upstream PR [#&#8203;40881](https://redirect.github.com/cilium/cilium/issues/40881),
        [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n\n**Misc Changes:**\n\n-
        .github/workflows: bump build-images-base timeout to 60 minutes (Backport
        PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
        Upstream PR [#&#8203;40919](https://redirect.github.com/cilium/cilium/issues/40919),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github/workflows: print
        open file descriptors (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
        Upstream PR [#&#8203;40941](https://redirect.github.com/cilium/cilium/issues/40941),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: fix removal
        of all files in /mnt (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
        Upstream PR [#&#8203;40818](https://redirect.github.com/cilium/cilium/issues/40818),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: remove all contents
        of /mnt in build images CI (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
        Upstream PR [#&#8203;40814](https://redirect.github.com/cilium/cilium/issues/40814),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- chore(deps): update actions/download-artifact
        action to v5 (v1.18) ([#&#8203;41055](https://redirect.github.com/cilium/cilium/issues/41055),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update all github action dependencies (v1.18) ([#&#8203;40901](https://redirect.github.com/cilium/cilium/issues/40901),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update all github action dependencies (v1.18) ([#&#8203;41056](https://redirect.github.com/cilium/cilium/issues/41056),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update all-dependencies (v1.18) ([#&#8203;40900](https://redirect.github.com/cilium/cilium/issues/40900),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update dependency cilium/cilium-cli to v0.18.6 (v1.18) ([#&#8203;40898](https://redirect.github.com/cilium/cilium/issues/40898),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update go to v1.24.6 (v1.18) ([#&#8203;40993](https://redirect.github.com/cilium/cilium/issues/40993),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update stable lvh-images (v1.18) (patch) ([#&#8203;40899](https://redirect.github.com/cilium/cilium/issues/40899),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update stable lvh-images (v1.18) (patch) ([#&#8203;41054](https://redirect.github.com/cilium/cilium/issues/41054),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        ci: add/change runner labels (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
        Upstream PR [#&#8203;40972](https://redirect.github.com/cilium/cilium/issues/40972),
        [@&#8203;Artyop](https://redirect.github.com/Artyop))\n- daemon/test: explicitly
        wait for identities synchronization (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
        Upstream PR [#&#8203;40811](https://redirect.github.com/cilium/cilium/issues/40811),
        [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- docs: Remove
        references to v1.15 (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
        Upstream PR [#&#8203;41033](https://redirect.github.com/cilium/cilium/issues/41033),
        [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Fix loadbalancer
        handling of backends with ClusterID set (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
        Upstream PR [#&#8203;40968](https://redirect.github.com/cilium/cilium/issues/40968),
        [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- Fix race condition
        issues (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
        Upstream PR [#&#8203;40949](https://redirect.github.com/cilium/cilium/issues/40949),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- fix(deps): update module
        github.com/docker/docker to v28.3.3+incompatible \\[security] (v1.18) ([#&#8203;40793](https://redirect.github.com/cilium/cilium/issues/40793),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        loadbalancer: Raise default retry duration to 1 second (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
        Upstream PR [#&#8203;40997](https://redirect.github.com/cilium/cilium/issues/40997),
        [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- loadbalancer: Use
        unique for L3n4Addr (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
        Upstream PR [#&#8203;40633](https://redirect.github.com/cilium/cilium/issues/40633),
        [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- Makefile: Fix multi
        codeowner detection (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
        Upstream PR [#&#8203;40923](https://redirect.github.com/cilium/cilium/issues/40923),
        [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Reduced
        memory usage by roughly 10% for large EndpointSlices by sharing identical
        objects. (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
        Upstream PR [#&#8203;40987](https://redirect.github.com/cilium/cilium/issues/40987),
        [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- values(.yaml.tmpl):
        Add Geneve (Class Option) to dsrDispatch paramater (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
        Upstream PR [#&#8203;40625](https://redirect.github.com/cilium/cilium/issues/40625),
        [@&#8203;alagoutte](https://redirect.github.com/alagoutte))\n- vendor: Bump
        to StateDB v0.4.5 (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
        Upstream PR [#&#8203;40783](https://redirect.github.com/cilium/cilium/issues/40783),
        [@&#8203;joamaki](https://redirect.github.com/joamaki))\n\n**Other Changes:**\n\n-
        ci: reduce gke failures ([#&#8203;41070](https://redirect.github.com/cilium/cilium/issues/41070),
        [@&#8203;brlbil](https://redirect.github.com/brlbil))\n- install: Update image
        digests for v1.18.0 ([#&#8203;40782](https://redirect.github.com/cilium/cilium/issues/40782),
        [@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\\[bot])\n\n####
        Docker Manifests\n\n##### cilium\n\n`quay.io/cilium/cilium:v1.18.1@&#8203;sha256:65ab17c052d8758b2ad157ce766285e04173722df59bdee1ea6d5fda7149f0e9`\n`quay.io/cilium/cilium:stable@sha256:65ab17c052d8758b2ad157ce766285e04173722df59bdee1ea6d5fda7149f0e9`\n\n#####
        clustermesh-apiserver\n\n`quay.io/cilium/clustermesh-apiserver:v1.18.1@&#8203;sha256:87ab85f33dc7e895ed6257564bf1a255d12399d9e8a075a8fc400910ff94cbeb`\n`quay.io/cilium/clustermesh-apiserver:stable@sha256:87ab85f33dc7e895ed6257564bf1a255d12399d9e8a075a8fc400910ff94cbeb`\n\n#####
        docker-plugin\n\n`quay.io/cilium/docker-plugin:v1.18.1@&#8203;sha256:fb1c6ecb6dc180c97488b8ea45d81275237db14d50e22a1eff3dbfaf9f6f93f3`\n`quay.io/cilium/docker-plugin:stable@sha256:fb1c6ecb6dc180c97488b8ea45d81275237db14d50e22a1eff3dbfaf9f6f93f3`\n\n#####
        hubble-relay\n\n`quay.io/cilium/hubble-relay:v1.18.1@&#8203;sha256:7e2fd4877387c7e112689db7c2b153a4d5c77d125b8d50d472dbe81fc1b139b0`\n`quay.io/cilium/hubble-relay:stable@sha256:7e2fd4877387c7e112689db7c2b153a4d5c77d125b8d50d472dbe81fc1b139b0`\n\n#####
        operator-alibabacloud\n\n`quay.io/cilium/operator-alibabacloud:v1.18.1@&#8203;sha256:e2bdc8236acec0d1ef1552c831a7cd2277624031066fbdfac884a31a4126a32a`\n`quay.io/cilium/operator-alibabacloud:stable@sha256:e2bdc8236acec0d1ef1552c831a7cd2277624031066fbdfac884a31a4126a32a`\n\n#####
        operator-aws\n\n`quay.io/cilium/operator-aws:v1.18.1@&#8203;sha256:de522223ecd73bc06b48042fa59f78f7b3b8f2fff4f8f30a61687516798c5042`\n`quay.io/cilium/operator-aws:stable@sha256:de522223ecd73bc06b48042fa59f78f7b3b8f2fff4f8f30a61687516798c5042`\n\n#####
        operator-azure\n\n`quay.io/cilium/operator-azure:v1.18.1@&#8203;sha256:682058e6734e397e7939e92bb463da3c1b5d8b7a7ce408c3b7a62aadb9ce4f06`\n`quay.io/cilium/operator-azure:stable@sha256:682058e6734e397e7939e92bb463da3c1b5d8b7a7ce408c3b7a62aadb9ce4f06`\n\n#####
        operator-generic\n\n`quay.io/cilium/operator-generic:v1.18.1@&#8203;sha256:97f4553afa443465bdfbc1cc4927c93f16ac5d78e4dd2706736e7395382201bc`\n`quay.io/cilium/operator-generic:stable@sha256:97f4553afa443465bdfbc1cc4927c93f16ac5d78e4dd2706736e7395382201bc`\n\n#####
        operator\n\n`quay.io/cilium/operator:v1.18.1@&#8203;sha256:f3b8d90f945167c1ac4324a0f02a9d381f83076d5ce828fab452014f9335a47e`\n`quay.io/cilium/operator:stable@sha256:f3b8d90f945167c1ac4324a0f02a9d381f83076d5ce828fab452014f9335a47e`\n\n###
        [`v1.18.0`](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0):
        1.18.0\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.7...1.18.0)\n\nWe
        are excited to announce the **[Cilium 1.18.0](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0)**
        release!\n\nA total of **3298 new commits** have been contributed to this
        release by a growing community of over **955 developers** and over **22,000
        GitHub stars**! \u2B50\n\nTo keep up to date with all the latest Cilium releases,
        see [Announcements](https://redirect.github.com/cilium/cilium/discussions/categories/announcements)\n\nHere's
        what's new in [v1.18.0](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0):\n\n####
        \U0001F6A0 Networking\n\n- **\u2696\uFE0F Load Balancing Redesign**: The service
        load-balancing control-plane in the Cilium agent has been redesigned to reduce
        memory usage and improve future extensibility of load-balancing features ([cilium/cilium#38469](https://redirect.github.com/cilium/cilium/pull/38469),
        [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- **\U0001F50C Virtual
        Network Devices**: Added support for new virtual network device configurations
        such as VXLAN in IPsec (VinE) and IPIP tunnels ([cilium/cilium#37723](https://redirect.github.com/cilium/cilium/pull/37723),
        [@&#8203;ldelossa](https://redirect.github.com/ldelossa); [cilium/cilium#37346](https://redirect.github.com/cilium/cilium/pull/37346),
        [@&#8203;gyutaeb](https://redirect.github.com/gyutaeb))\n- **\u24C2\uFE0F
        Multiple Egress Gateways**: Egress Gateways policies can now direct traffic
        towards multiple gateway nodes ([cilium/cilium#39304](https://redirect.github.com/cilium/cilium/pull/39304),
        [@&#8203;carlos-abad](https://redirect.github.com/carlos-abad))\n- **\U0001F6A6
        Ingress Rate Limiting**: The bandwidth manager now supports ingress rate limiting
        ([cilium/cilium#36351](https://redirect.github.com/cilium/cilium/pull/36351),
        [@&#8203;l1b0k](https://redirect.github.com/l1b0k))\n- **\U0001F4E2 Multi-Device
        L2 Announcements**: The L2 pod announcement feature now supports multiple
        devices ([cilium/cilium#38198](https://redirect.github.com/cilium/cilium/pull/38198),
        [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
        **\U0001F3E2 Neighbor Subsystem Rework**: The neighbor subsystem was made
        more resilient through a new system that reconciles desired neighbor entries
        with the kernel state ([cilium/cilium#39987](https://redirect.github.com/cilium/cilium/pull/39987),
        [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n\n####
        \U0001F310 IPv6\n\n- **\U0001F687 Tunneling Underlay**: The tunneling datapath
        mode now supports using an IPv6 network underlay, including when configured
        with IPsec transparent encryption ([cilium/cilium#38296](https://redirect.github.com/cilium/cilium/pull/38296),
        [cilium/cilium#39497](https://redirect.github.com/cilium/cilium/pull/39497),
        [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- **\U0001F4AC
        Kube Proxy Replacement**: Cilium now implements service translation when running
        on an IPv6 underlay ([cilium/cilium#39074](https://redirect.github.com/cilium/cilium/pull/39074),
        [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- **\U0001F4CB
        Delegated IPAM**: When delegating IP address management to a third party plugin,
        Cilium now configures IPv6 routes for connectivity if the plugin supports
        IPv6 ([cilium/cilium#38249](https://redirect.github.com/cilium/cilium/pull/38249),
        [@&#8203;caorui-io](https://redirect.github.com/caorui-io), [@&#8203;kadevu](https://redirect.github.com/kadevu))\n-
        **\U0001F4E6 IP Fragment Support**: Cilium now processes ordered IPv6 fragments
        to apply policy and routing functionality ([cilium/cilium#38110](https://redirect.github.com/cilium/cilium/pull/38110),
        [@&#8203;gentoo-root](https://redirect.github.com/gentoo-root))\n- **\U0001F6AA
        Egress gateway policies** can now match IPv6 address ranges ([cilium/cilium#38452](https://redirect.github.com/cilium/cilium/pull/38452),
        [@&#8203;rgo3](https://redirect.github.com/rgo3))\n\n#### \U0001F6E1\uFE0F
        Policy & Observability\n\n- **\U0001F3F7\uFE0F Policy Names in Hubble-CLI**:
        Show the names of (C)CNPs that allowed or denied traffic when monitoring flows
        in Hubble ([cilium/cilium#39453](https://redirect.github.com/cilium/cilium/pull/39453),
        [@&#8203;antonipp](https://redirect.github.com/antonipp))\n- **\U0001F4DD
        Policy Log Fields**: A new free-text log field is added to policies, which
        is exposed in Hubble flows for easy correlation and searching ([cilium/cilium#39902](https://redirect.github.com/cilium/cilium/pull/39902),
        [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F6F0\uFE0F
        Encapsulated Traffic Decoding**: Hubble decodes encapsulated traffic for deeper
        introspection into traffic flows ([cilium/cilium#37634](https://redirect.github.com/cilium/cilium/pull/37634),
        [@&#8203;kaworu](https://redirect.github.com/kaworu))\n- **\U0001F3F0 ClusterMesh
        Policy Restriction**: A new option allows the **cluster** entity to apply
        only to the local cluster in ClusterMesh environment ([cilium/cilium#39338](https://redirect.github.com/cilium/cilium/pull/39338),
        [@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))\n- **\u2728
        Enhanced Policy Dashboard**: The Policy section of the Cilium Grafana dashboard
        has been improved to show more relevant graphs, including policy drops in
        both directions ([cilium/cilium#36492](https://redirect.github.com/cilium/cilium/pull/36492),
        [cilium/cilium#37445](https://redirect.github.com/cilium/cilium/pull/37445),
        [@&#8203;squeed](https://redirect.github.com/squeed))\n\n#### \U0001F305 Performance\n\n-
        **\U0001F4CA Scale Test Results**: Cilium implements policies and services
        up to 45% faster in higher scale environments (Various; [@&#8203;marseel](https://redirect.github.com/marseel),
        [cilium/cilium#40227](https://redirect.github.com/cilium/cilium/pull/40227))\n-
        **\U0001F4E6 Image Size Reduction**: Docker image sizes are reduced by 32%
        on arm64 architecture images ([cilium/cilium#40005](https://redirect.github.com/cilium/cilium/pull/40005),
        [@&#8203;marseel](https://redirect.github.com/marseel))\n- **\u26A1 Improved
        Policy Performance**: The DNS proxy can process large numbers of IPs faster,
        and the EndpointSelector match implementation has been optimized ([cilium/cilium#39340](https://redirect.github.com/cilium/cilium/pull/39340),
        [@&#8203;squeed](https://redirect.github.com/squeed); [cilium/cilium#40414](https://redirect.github.com/cilium/cilium/pull/40414),
        [@&#8203;marseel](https://redirect.github.com/marseel))\n- **\U0001FA9E EndpointSlice
        Mirroring for Multi-Cluster Services**: Clustermesh mirrors EndpointSlice
        from the local cluster instead of copying the Service selectors when using
        the MCS-API controller ([cilium/cilium#38596](https://redirect.github.com/cilium/cilium/pull/38596),
        [@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))\n- **\U0001F310
        KVStoreMesh Optimization**: Cross-cluster state distribution is optimized
        by only synchronizing identities keyed by ID, not by value ([cilium/cilium#36471](https://redirect.github.com/cilium/cilium/pull/36471),
        [@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))\n- **\U0001F9E0
        Egress Gateway Processing**: Egress gateway policy processing is significantly
        improved when matching a large number of pods ([cilium/cilium#37714](https://redirect.github.com/cilium/cilium/pull/37714),
        [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- **\U0001F5D1\uFE0F
        Optimized Garbage Collection for Connection Tracking**: Cilium leverages batched
        iterators for CTMap GC ([cilium/cilium#36288](https://redirect.github.com/cilium/cilium/pull/36288),
        [@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))\n\n####
        \u2699\uFE0F Operations\n\n- **\U0001F4C8 API Server Connections at Scale**:
        Improve kube-apiserver connections behavior at scale through failover and
        setting better jitter and backoff configurations ([cilium/cilium#37601](https://redirect.github.com/cilium/cilium/pull/37601),
        [@&#8203;aditighag](https://redirect.github.com/aditighag); [cilium/cilium#38031](https://redirect.github.com/cilium/cilium/pull/38031),
        [@&#8203;orange30](https://redirect.github.com/orange30); [cilium/cilium#36648](https://redirect.github.com/cilium/cilium/pull/36648),
        [@&#8203;wedaly](https://redirect.github.com/wedaly))\n- **\U0001F504 ConfigMap
        Synchronization**: New option to automatically synchronize ConfigMap changes
        into the agent and report metrics for when the effective configuration is
        different from the desired configuration ([cilium/cilium#36510](https://redirect.github.com/cilium/cilium/pull/36510),
        [@&#8203;ovidiutirla](https://redirect.github.com/ovidiutirla))\n- **\U0001F393
        CRD Promotion to Stable**: Promote **CiliumCIDRGroup**, **CiliumLoadBalancerIPPool**
        and all **BGP** CRDs to stable API ([cilium/cilium#38940](https://redirect.github.com/cilium/cilium/pull/38940),
        [@&#8203;christarazi](https://redirect.github.com/christarazi); [cilium/cilium#39090](https://redirect.github.com/cilium/cilium/pull/39090),
        [@&#8203;pippolo84](https://redirect.github.com/pippolo84); [cilium/cilium#37765](https://redirect.github.com/cilium/cilium/pull/37765),
        [@&#8203;rastislavs](https://redirect.github.com/rastislavs))\n- **\u26D4
        Node Taints Handling**: The cilium-operator Deployment uses a new default
        set of taints which avoids deploying to a drained node ([cilium/cilium#40137](https://redirect.github.com/cilium/cilium/pull/40137),
        [@&#8203;Murat](https://redirect.github.com/Murat) Parlakisik)\n- **:wood:
        Migrate to Slog**: Cilium now uses slog as log library for all components
        ([cilium/cilium#39664](https://redirect.github.com/cilium/cilium/pull/39664),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- **\U0001F527 Cilium dependencies**
        were updated to Kubernetes v1.33, Envoy v1.34, LLVM 19.1, and CNI v1.1 ([cilium/cilium#39124](https://redirect.github.com/cilium/cilium/pull/39124),
        [cilium/cilium#40175](https://redirect.github.com/cilium/cilium/pull/40175),
        [cilium/cilium#39632](https://redirect.github.com/cilium/cilium/pull/39632),
        [@&#8203;sayboras](https://redirect.github.com/sayboras); [cilium/cilium#38868](https://redirect.github.com/cilium/cilium/pull/38868),
        [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F427 Minimum
        Linux Requirements**: The minimum kernel version for this release series is
        Linux v5.10 or similar, such as RHEL 8.6 ([cilium/cilium#38308](https://redirect.github.com/cilium/cilium/pull/38308),
        [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n\n####
        \U0001F578\uFE0F Service Mesh & Gateway API\n\n- **\u26E9\uFE0F Gateway API
        v1.3.0**: Gateway API support is bumped to v1.3.0 ([cilium/cilium#39590](https://redirect.github.com/cilium/cilium/pull/39590),
        [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- **\U0001F517
        Improved GatewayClass Configuration**: The new CiliumGatewayClassConfig object
        adds service type validation allows the configuration of extra settings on
        a per-GatewayClass level: LoadBalancerSourceRangesPolicy, ParametersRef fields.
        This allows Cilium to reconcile multiple GatewayClasses with different configurations
        ([cilium/cilium#37792](https://redirect.github.com/cilium/cilium/pull/37792),
        [cilium/cilium#37402](https://redirect.github.com/cilium/cilium/pull/37402),
        [cilium/cilium#40138](https://redirect.github.com/cilium/cilium/pull/40138),
        [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- **\U0001F68F
        Multiple HTTPRoutes**: GAMMA reconciler now supports attaching multiple HTTPRoutes
        to the same Service ([cilium/cilium#39922](https://redirect.github.com/cilium/cilium/pull/39922),
        [@&#8203;youngnick](https://redirect.github.com/youngnick))\n- **\U0001FA84
        Route Changes Reconciliation**: Reconcile Gateway API based on all changes
        to routes. This allows label updates to trigger reconciliation correctly,
        amongst other things ([cilium/cilium#37798](https://redirect.github.com/cilium/cilium/pull/37798),
        [@&#8203;sayboras](https://redirect.github.com/sayboras))\n\n#### \U0001F3F7\uFE0F
        IP Address Management\n\n- **\u2601\uFE0F AWS Prefix Delegation**: Prefix
        delegation on AWS bare metal instances is now supported natively in Cilium's
        AWS ENI IPAM mode ([cilium/cilium#39678](https://redirect.github.com/cilium/cilium/pull/39678),
        [@&#8203;41ks](https://redirect.github.com/41ks))\n- **\U0001F3EC Multi-Pool
        IPAM with KVStore**: Add support for Multi-Pool IPAM in external KVstore mode
        ([cilium/cilium#39638](https://redirect.github.com/cilium/cilium/pull/39638),
        [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- **\U0001F510
        Multi-Pool IPAM with IPSec**: Add support for Multi-Pool IPAM mode with IPSec
        transparent encryption in tunnel routing mode ([cilium/cilium#39442](https://redirect.github.com/cilium/cilium/pull/39442),
        [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- **\u21AA\uFE0F
        Multi-Pool Tunnel Routing**: Add support for tunnel routing in multi-pool
        IPAM mode ([cilium/cilium#38483](https://redirect.github.com/cilium/cilium/pull/38483),
        [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n\n#### \U0001F6E3\uFE0F
        BGP\n\n- **\U0001F4C7 Route Aggregation**: Add support for BGP route aggregation
        in the control plane ([cilium/cilium#37275](https://redirect.github.com/cilium/cilium/pull/37275),
        [@&#8203;romanspb80](https://redirect.github.com/romanspb80))\n- **\U0001F3AF
        Overlapping Selector Matches**: Support overlapping selector matches in **CiliumBGPAdvertisement**
        resources ([cilium/cilium#36414](https://redirect.github.com/cilium/cilium/pull/36414),
        [@&#8203;dswaffordcw](https://redirect.github.com/dswaffordcw))\n- **\U0001F194
        New Router ID generation modes**: Generate router-id based on MAC addresses,
        or from an IP address pool ([cilium/cilium#36451](https://redirect.github.com/cilium/cilium/pull/36451),
        [@&#8203;yushoyamaguchi](https://redirect.github.com/yushoyamaguchi); [cilium/cilium#38300](https://redirect.github.com/cilium/cilium/pull/38300),
        [@&#8203;liyihuang](https://redirect.github.com/liyihuang))\n\n#### \U0001F9D1\u200D\U0001F4BB
        Development Experience\n\n- **\U0001F9EA Test attribution**: Identify owners
        of test in GitHub workflow results to make it easier to connect with other
        developers on tricky problems ([cilium/cilium#37027](https://redirect.github.com/cilium/cilium/pull/37027),
        [@&#8203;Joe](https://redirect.github.com/Joe) Stringer)\n- **\U0001F6CF\uFE0F
        Policy REST API**: The Cilium policy API exposed over a local unix socket
        is deprecated. The other mechanisms to configure policy via Kubernetes resources
        or the local filesystem are preferred ([cilium/cilium#40212](https://redirect.github.com/cilium/cilium/pull/40212),
        [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F3D7\uFE0F
        Feature Deprecation**: Deprecate underused features like Custom Calls, Recorder
        API and External Workloads ([cilium/cilium#38480](https://redirect.github.com/cilium/cilium/pull/38480),
        [cilium/cilium#39642](https://redirect.github.com/cilium/cilium/pull/39642),
        [cilium/cilium#37418](https://redirect.github.com/cilium/cilium/pull/37418),
        [@&#8203;brb](https://redirect.github.com/brb))\n\n#### \U0001F3E2 Community\n\n-
        **\u2764\uFE0F Production Case Studies**: Many end-users have stepped forward
        to tell their stories running Cilium in production. If your company wants
        to submit their case studies let us know. We would love to hear your feedback!\n
        \ - [ByteDance](https://www.youtube.com/watch?v=cKPW67D7X10), [Canopus Networks](https://www.youtube.com/watch?v=YXl9xuIxylY),
        [Corner Banca](https://www.youtube.com/watch?v=HVPKSefazl4), [DB Schenker](https://www.cncf.io/case-studies/db-schenker/),
        [eBay](https://www.youtube.com/watch?v=xEa4KFf5FzY), [ECCO](https://www.cncf.io/case-studies/ecco/),
        [G-Research](https://www.youtube.com/watch?v=kjSFN34dROQ), [Social Network
        Company](https://cilium.io/blog/2025/04/15/tetragon-social-networking-user-story/),
        and [Preferred Networks](https://www.youtube.com/watch?v=n7_I4zu6f_M)\n- **\U0001F1EC\U0001F1E7
        London Events**: The community gathered at [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/co-located-events/ciliumcon/)
        and the [Cilium Developer Summit](https://redirect.github.com/cilium/dev-summits/tree/main/2025-EU)
        in London\n- **\U0001F1FA\U0001F1F8 Atlanta Events**: Meet us at the upcoming
        [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/co-located-events/ciliumcon/)
        and Cilium Developers Summit in Atlanta, Georgia\n- **\U0001F465 SIG Community
        Meetings**: [SIG Community](https://redirect.github.com/cilium/community/tree/main/sig-community)
        now meets every first and third Thursday to foster, grow, and sustain the
        Cilium open source community\n\n#### \U0001F4D4 Full CHANGELOG\n\n- Full CHANGELOG.md
        can be found [here](https://redirect.github.com/cilium/cilium/blob/v1.18.0/CHANGELOG.md).\n\nAnd
        finally, we would like to thank you to all contributors of Cilium that helped
        directly and indirectly with the project. The success of Cilium could not
        happen without all of you. \u2764\uFE0F :people\\_holding\\_hands:  \u2764\uFE0F\n\n###
        [`v1.17.7`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.7):
        1.17.7\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.6...1.17.7)\n\n##
        Summary of Changes\n\n**Minor Changes:**\n\n- Add `kernel_version`, `endpoint_routes_enabled`,
        `strict_mode_enabled` and `kubernetes_version` feature metrics. (Backport
        PR [#&#8203;41074](https://redirect.github.com/cilium/cilium/issues/41074),
        Upstream PR [#&#8203;41003](https://redirect.github.com/cilium/cilium/issues/41003),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n\n**Bugfixes:**\n\n- Added
        cleanup of deprecated cilium\\_policy\\_v1 maps (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
        Upstream PR [#&#8203;39400](https://redirect.github.com/cilium/cilium/issues/39400),
        [@&#8203;pasteley](https://redirect.github.com/pasteley))\n- bgp: Use private
        fork of the GoBGP to fix BGP MD5 auth (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
        Upstream PR [#&#8203;40566](https://redirect.github.com/cilium/cilium/issues/40566),
        [@&#8203;YutaroHayakawa](https://redirect.github.com/YutaroHayakawa))\n- bpf/nat:
        fix header offset while reverse nat-ing icmp6 pkt too big. (Backport PR [#&#8203;40387](https://redirect.github.com/cilium/cilium/issues/40387),
        Upstream PR [#&#8203;40002](https://redirect.github.com/cilium/cilium/issues/40002),
        [@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))\n- Enable
        protocol differentiation by default on the operator, matching the agent ([#&#8203;40643](https://redirect.github.com/cilium/cilium/issues/40643),
        [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
        Fix a bug where Cilium leaks stale routes when IPsec is enabled. (Backport
        PR [#&#8203;40664](https://redirect.github.com/cilium/cilium/issues/40664),
        Upstream PR [#&#8203;40653](https://redirect.github.com/cilium/cilium/issues/40653),
        [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- fix(helm):
        fix values.schema.json types for bpf.events.default.{rateLimit,burstLimit}
        (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
        Upstream PR [#&#8203;40543](https://redirect.github.com/cilium/cilium/issues/40543),
        [@&#8203;vchirikov](https://redirect.github.com/vchirikov))\n- fix: kube-proxy
        healthz panic on port 10256 ([#&#8203;40590](https://redirect.github.com/cilium/cilium/issues/40590),
        [@&#8203;tamilmani1989](https://redirect.github.com/tamilmani1989))\n- Helm:
        Correct seccompProfile for cilium-agent pods (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
        Upstream PR [#&#8203;40476](https://redirect.github.com/cilium/cilium/issues/40476),
        [@&#8203;jcpunk](https://redirect.github.com/jcpunk))\n- install/kubernetes:
        fix clustermesh-apiserver extraEnv (Backport PR [#&#8203;41074](https://redirect.github.com/cilium/cilium/issues/41074),
        Upstream PR [#&#8203;41021](https://redirect.github.com/cilium/cilium/issues/41021),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- pkg/ipam: fix multi-pool
        allocator not releasing un-used /32 and /128 CIDRs (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
        Upstream PR [#&#8203;40393](https://redirect.github.com/cilium/cilium/issues/40393),
        [@&#8203;alimehrabikoshki](https://redirect.github.com/alimehrabikoshki))\n-
        service: Only set algorithm annotation when requested ([#&#8203;40845](https://redirect.github.com/cilium/cilium/issues/40845),
        [@&#8203;tsotne95](https://redirect.github.com/tsotne95))\n\n**CI Changes:**\n\n-
        .github/actions: only upload files with features-tested prefix (Backport PR
        [#&#8203;40988](https://redirect.github.com/cilium/cilium/issues/40988), Upstream
        PR [#&#8203;40975](https://redirect.github.com/cilium/cilium/issues/40975),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: Don't overwrite
        junit results (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
        Upstream PR [#&#8203;39159](https://redirect.github.com/cilium/cilium/issues/39159),
        [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- .github:
        Run final steps when tests aren't skipped (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
        Upstream PR [#&#8203;40180](https://redirect.github.com/cilium/cilium/issues/40180),
        [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- \\[v1.17]
        .github: Remove use of cosign attest --recursive ([#&#8203;40699](https://redirect.github.com/cilium/cilium/issues/40699),
        [@&#8203;YutaroHayakawa](https://redirect.github.com/YutaroHayakawa))\n- \\[v1.17]
        ci: Revert build\\_commits runner to ubuntu-22.04 ([#&#8203;40837](https://redirect.github.com/cilium/cilium/issues/40837),
        [@&#8203;rastislavs](https://redirect.github.com/rastislavs))\n- builder:
        Add tparse,junit tooling (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
        Upstream PR [#&#8203;39092](https://redirect.github.com/cilium/cilium/issues/39092),
        [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Centralize
        dynamic test ownership configuration (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
        Upstream PR [#&#8203;38045](https://redirect.github.com/cilium/cilium/issues/38045),
        [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- ci: conformance-eks
        token extended to 8h (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
        Upstream PR [#&#8203;40474](https://redirect.github.com/cilium/cilium/issues/40474),
        [@&#8203;mathpl](https://redirect.github.com/mathpl))\n- ci: more powerful
        runners for go linting (Backport PR [#&#8203;40765](https://redirect.github.com/cilium/cilium/issues/40765),
        Upstream PR [#&#8203;40582](https://redirect.github.com/cilium/cilium/issues/40582),
        [@&#8203;mathpl](https://redirect.github.com/mathpl))\n- CLI: Attribute tests
        to codeowners (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
        Upstream PR [#&#8203;37027](https://redirect.github.com/cilium/cilium/issues/37027),
        [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Emit junit
        output from BPF unit tests (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
        Upstream PR [#&#8203;39099](https://redirect.github.com/cilium/cilium/issues/39099),
        [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Fix GKE
        cluster creation failures when branch names exceed 63-byte label limit by
        implementing automatic truncation with hash-based uniqueness preservation.
        (Backport PR [#&#8203;40849](https://redirect.github.com/cilium/cilium/issues/40849),
        Upstream PR [#&#8203;40725](https://redirect.github.com/cilium/cilium/issues/40725),
        [@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))\n- Improved
        test failure attribution on stable branches by using TESTOWNERS files to route
        failures to appropriate code quality teams rather than generic CI infrastructure
        teams. (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
        Upstream PR [#&#8203;40776](https://redirect.github.com/cilium/cilium/issues/40776),
        [@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))\n- pkg/egw:
        Add missing waitForReconciliationRun (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
        Upstream PR [#&#8203;40355](https://redirect.github.com/cilium/cilium/issues/40355),
        [@&#8203;aditighag](https://redirect.github.com/aditighag))\n- spire: Fix
        unreliable test (Backport PR [#&#8203;40664](https://redirect.github.com/cilium/cilium/issues/40664),
        Upstream PR [#&#8203;40561](https://redirect.github.com/cilium/cilium/issues/40561),
        [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- tools/testowners:
        de-duplicate error logs (Backport PR [#&#8203;41074](https://redirect.github.com/cilium/cilium/issues/41074),
        Upstream PR [#&#8203;40778](https://redirect.github.com/cilium/cilium/issues/40778),
        [@&#8203;tklauser](https://redirect.github.com/tklauser))\n- Upload junit
        results for Go unit test runs (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
        Upstream PR [#&#8203;39015](https://redirect.github.com/cilium/cilium/issues/39015),
        [@&#8203;joestringer](https://redirect.github.com/joestringer))\n\n**Misc
        Changes:**\n\n- .github/workflows: bump build-images-base timeout to 60 minutes
        (Backport PR [#&#8203;40988](https://redirect.github.com/cilium/cilium/issues/40988),
        Upstream PR [#&#8203;40919](https://redirect.github.com/cilium/cilium/issues/40919),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: fix removal
        of all files in /mnt (Backport PR [#&#8203;40849](https://redirect.github.com/cilium/cilium/issues/40849),
        Upstream PR [#&#8203;40818](https://redirect.github.com/cilium/cilium/issues/40818),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: fix upload artifacts
        for features.json ([#&#8203;41091](https://redirect.github.com/cilium/cilium/issues/41091),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: remove all contents
        of /mnt in build images CI (Backport PR [#&#8203;40849](https://redirect.github.com/cilium/cilium/issues/40849),
        Upstream PR [#&#8203;40814](https://redirect.github.com/cilium/cilium/issues/40814),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: remove stable
        tag from v1.17 branches ([#&#8203;40772](https://redirect.github.com/cilium/cilium/issues/40772),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- certloader: Add client
        variants of watched TLS configs (Backport PR [#&#8203;40624](https://redirect.github.com/cilium/cilium/issues/40624),
        Upstream PR [#&#8203;40399](https://redirect.github.com/cilium/cilium/issues/40399),
        [@&#8203;devodev](https://redirect.github.com/devodev))\n- chore(deps): update
        actions/download-artifact action to v5 (v1.17) ([#&#8203;41058](https://redirect.github.com/cilium/cilium/issues/41058),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update all github action dependencies (v1.17) ([#&#8203;40746](https://redirect.github.com/cilium/cilium/issues/40746),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update all github action dependencies (v1.17) ([#&#8203;40905](https://redirect.github.com/cilium/cilium/issues/40905),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update all github action dependencies (v1.17) ([#&#8203;41059](https://redirect.github.com/cilium/cilium/issues/41059),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update all-dependencies (v1.17) ([#&#8203;40744](https://redirect.github.com/cilium/cilium/issues/40744),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update all-dependencies (v1.17) ([#&#8203;40984](https://redirect.github.com/cilium/cilium/issues/40984),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update dependency cilium/cilium-cli to v0.18.6 (v1.17) ([#&#8203;40902](https://redirect.github.com/cilium/cilium/issues/40902),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update dependency cilium/little-vm-helper to v0.0.26 (v1.17)
        ([#&#8203;40646](https://redirect.github.com/cilium/cilium/issues/40646),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update docker.io/library/golang:1.24.5 docker digest to [`ef5b4be`](https://redirect.github.com/cilium/cilium/commit/ef5b4be)
        (v1.17) ([#&#8203;40745](https://redirect.github.com/cilium/cilium/issues/40745),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update go to v1.24.6 (v1.17) ([#&#8203;40994](https://redirect.github.com/cilium/cilium/issues/40994),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.33.6-1753919866-df8077dbd3932edccb59f1c5c70e01f2c1f63741
        (v1.17) ([#&#8203;40903](https://redirect.github.com/cilium/cilium/issues/40903),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;40673](https://redirect.github.com/cilium/cilium/issues/40673),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;40904](https://redirect.github.com/cilium/cilium/issues/40904),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;41057](https://redirect.github.com/cilium/cilium/issues/41057),
        [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
        ci: add/change runner labels (Backport PR [#&#8203;40988](https://redirect.github.com/cilium/cilium/issues/40988),
        Upstream PR [#&#8203;40972](https://redirect.github.com/cilium/cilium/issues/40972),
        [@&#8203;Artyop](https://redirect.github.com/Artyop))\n- cli: Load code owners
        dynamically via --code-owners (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
        Upstream PR [#&#8203;38044](https://redirect.github.com/cilium/cilium/issues/38044),
        [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- daemon/test:
        explicitly wait for identities synchronization (Backport PR [#&#8203;40849](https://redirect.github.com/cilium/cilium/issues/40849),
        Upstream PR [#&#8203;40811](https://redirect.github.com/cilium/cilium/issues/40811),
        [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- doc:monitor:
        clarify direction traced with default aggregation level (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
        Upstream PR [#&#8203;40398](https://redirect.github.com/cilium/cilium/issues/40398),
        [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n- docs: Add
        missing IPAM modes to configuration page (Backport PR [#&#8203;40664](https://redirect.github.com/cilium/cilium/issues/40664),
        Upstream PR [#&#8203;40540](https://redirect.github.com/cilium/cilium/issues/40540),
        [@&#8203;RayyanSeliya](https://redirect.github.com/RayyanSeliya))\n- docs:
        Add warning about changing an IP pool (Backport PR [#&#8203;40664](https://redirect.github.com/cilium/cilium/issues/40664),
        Upstream PR [#&#8203;40567](https://redirect.github.com/cilium/cilium/issues/40567),
        [@&#8203;sorrison](https://redirect.github.com/sorrison))\n- docs: remove
        l7 EnableDefaultDeny callout (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
        Upstream PR [#&#8203;40441](https://redirect.github.com/cilium/cilium/issues/40441),
        [@&#8203;squeed](https://redirect.github.com/squeed))\n- Fix race condition
        issues (Backport PR [#&#8203;40988](https://redirect.github.com/cilium/cilium/issues/40988),
        Upstream PR [#&#8203;40949](https://redirect.github.com/cilium/cilium/issues/40949),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- Makefile: Fix multi codeowner
        detection (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
        Upstream PR [#&#8203;40923](https://redirect.github.com/cilium/cilium/issues/40923),
        [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Makefile:
        Improve tparse,junit output handling (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
        Upstream PR [#&#8203;39098](https://redirect.github.com/cilium/cilium/issues/39098),
        [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Support
        extending cilium-agent volumes as a downstream packager (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
        Upstream PR [#&#8203;40401](https://redirect.github.com/cilium/cilium/issues/40401),
        [@&#8203;devodev](https://redirect.github.com/devodev))\n- tools: Move codeowners
        library from cilium-cli dir (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
        Upstream PR [#&#8203;40253](https://redirect.github.com/cilium/cilium/issues/40253),
        [@&#8203;joestringer](https://redirect.github.com/joestringer))\n\n**Other
        Changes:**\n\n- Fix bug where LocalRedirectPolicy forwarding would break if
        you enable `bpf-lb-algorithm-annotation` ([#&#8203;40246](https://redirect.github.com/cilium/cilium/issues/40246),
        [@&#8203;tarabrind](https://redirect.github.com/tarabrind))\n- images: update
        cilium-{runtime,builder} ([#&#8203;40839](https://redirect.github.com/cilium/cilium/issues/40839),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- install: Update image
        digests for v1.17.6 ([#&#8203;40546](https://redirect.github.com/cilium/cilium/issues/40546),
        [@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\\[bot])\n-
        vendor: Bump to StateDB v0.4.5 ([#&#8203;40850](https://redirect.github.com/cilium/cilium/issues/40850),
        [@&#8203;joamaki](https://redirect.github.com/joamaki))\n\n#### Docker Manifests\n\n#####
        cilium\n\n`quay.io/cilium/cilium:v1.17.7@&#8203;sha256:b22440f49c61195171aca585c7a57c6a8867271e43a5abc38f2a2f561436ff86`\n\n#####
        clustermesh-apiserver\n\n`quay.io/cilium/clustermesh-apiserver:v1.17.7@&#8203;sha256:2852feca0d0d936ed0333cd64859f3c5ece2db582ba5fed848f57aff786be4a6`\n\n#####
        docker-plugin\n\n`quay.io/cilium/docker-plugin:v1.17.7@&#8203;sha256:1b7c8d64f01b309521f13ab2a15239a688b9f545bb97058d383ad3bb55e42e67`\n\n#####
        hubble-relay\n\n`quay.io/cilium/hubble-relay:v1.17.7@&#8203;sha256:9394312ce65c3c253a8c26a6c292f58736e75c78d1446ecfcd244f1418bebe77`\n\n#####
        operator-alibabacloud\n\n`quay.io/cilium/operator-alibabacloud:v1.17.7@&#8203;sha256:271e64d6c91019a1a4815b4c78294962bf51c9f764c680fdfacb2adb6e9d0c4d`\n\n#####
        operator-aws\n\n`quay.io/cilium/operator-aws:v1.17.7@&#8203;sha256:ce37d2ccf921761a4171a507748a06a204592890e6f8cf7d1c354648e098c830`\n\n#####
        operator-azure\n\n`quay.io/cilium/operator-azure:v1.17.7@&#8203;sha256:9c1db11de2e0cdcaba522c8f396b9a643738f3d3f958fa9b4d62f57bac5daafb`\n\n#####
        operator-generic\n\n`quay.io/cilium/operator-generic:v1.17.7@&#8203;sha256:a610be2562d0f5a8945a27df7d5681711263ce92e09947e867fc37fc9ab08788`\n\n#####
        operator\n\n`quay.io/cilium/operator:v1.17.7@&#8203;sha256:122e49fce82df90693f8981e5d9013b6a9248284db17226259e39364ba9a211d`\n\n###
        [`v1.17.6`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.6):
        1.17.6\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.5...1.17.6)\n\n##
        Summary of Changes\n\n**Minor Changes:**\n\n- helm: KPR subflag changes (Backport
        PR [#&#8203;40222](https://redirect.github.com/cilium/cilium/issues/40222),
        Upstream PR [#&#8203;39721](https://redirect.github.com/cilium/cilium/issues/39721),
        [@&#8203;brb](https://redirect.github.com/brb))\n\n**Bugfixes:**\n\n- Deny
        policies are now synced to Envoy so that they can be enforced for Ingress
        policies. (Backport PR [#&#8203;40187](https://redirect.github.com/cilium/cilium/issues/40187),
        Upstream PR [#&#8203;39736](https://redirect.github.com/cilium/cilium/issues/39736),
        [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))\n- Do not fail
        the agent startup in case IPv6 support is enabled and the node does not have
        an IPv6 address assigned yet (Backport PR [#&#8203;40205](https://redirect.github.com/cilium/cilium/issues/40205),
        Upstream PR [#&#8203;40143](https://redirect.github.com/cilium/cilium/issues/40143),
        [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- Fix bug preventing
        a global service from including remote backends, if the local service has
        no selector, and the remote one gets removed and then added again. ([#&#8203;40361](https://redirect.github.com/cilium/cilium/issues/40361),
        [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- Fix data race
        involving DumpReliablyWithCallback map operation. (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
        Upstream PR [#&#8203;38590](https://redirect.github.com/cilium/cilium/issues/38590),
        [@&#8203;aditighag](https://redirect.github.com/aditighag))\n- Fix IPAM IP
        release racing condition when IP reassigned back to ENI (Backport PR [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
        Upstream PR [#&#8203;40019](https://redirect.github.com/cilium/cilium/issues/40019),
        [@&#8203;victorcq](https://redirect.github.com/victorcq))\n- hubble automatically
        pick the `hubble-prefer-ipv6` to `true` if ipv4 not enabled (Backport PR [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
        Upstream PR [#&#8203;40210](https://redirect.github.com/cilium/cilium/issues/40210),
        [@&#8203;chengjoey](https://redirect.github.com/chengjoey))\n- LBIPAM: Fix
        deletion of CiliumLoadBalancerIPPool with multiple IP blocks that led to an
        operator crash (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
        Upstream PR [#&#8203;40013](https://redirect.github.com/cilium/cilium/issues/40013),
        [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- pkg/egressgateway:
        ensure gateway IP is IPv4 (Backport PR [#&#8203;40332](https://redirect.github.com/cilium/cilium/issues/40332),
        Upstream PR [#&#8203;40209](https://redirect.github.com/cilium/cilium/issues/40209),
        [@&#8203;rgo3](https://redirect.github.com/rgo3))\n- policy: fix error handling
        for selector policy resolution ([#&#8203;40404](https://redirect.github.com/cilium/cilium/issues/40404),
        [@&#8203;fristonio](https://redirect.github.com/fristonio))\n\n**CI Changes:**\n\n-
        ci: do not run north-south conn disrupt tests for 5.4 kernels ([#&#8203;39443](https://redirect.github.com/cilium/cilium/issues/39443),
        [@&#8203;ldelossa](https://redirect.github.com/ldelossa))\n- ci: fix north-south
        conn disrupt for 5.4 kernel ([#&#8203;40434](https://redirect.github.com/cilium/cilium/issues/40434),
        [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n\n**Misc Changes:**\n\n-
        .github/workflows: remove reviewers if ciliumbot approved PR (Backport PR
        [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094), Upstream
        PR [#&#8203;39989](https://redirect.github.com/cilium/cilium/issues/39989),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- auto-approve: add repository
        as part command (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
        Upstream PR [#&#8203;40050](https://redirect.github.com/cilium/cilium/issues/40050),
        [@&#8203;aanm](https://redirect.github.com/aanm))\n- auto-approve: add repository
        as part command (Backport PR [#&#8203;40332](https://redirect.github.com\n\n</details>\n\n---\n\n###
        Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time (no
        schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
        **Automerge**: Disabled by config. Please merge this manually once you are
        satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
        tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR and
        you won't be reminded about this update again.\n\n---\n\n - [ ] <!-- rebase-check
        -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was
        generated by [Mend Renovate](https://mend.io/renovate/). View the [repository
        job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC42MC4xIiwidXBkYXRlZEluVmVyIjoiNDEuOTEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
      change_url: https://github.com/YAKEcloud/yake-ansible/pull/247
      child_jobs: []
      commit_id: 54efaf9c6b2ae54293dcf8d32ef66cade77e2c3e
      event_id: bc5d29e0-88ac-11f0-873a-bc4d4078cdd6
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/d9e6d5a359f9436fadda11ae6c85bff7/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/d9e6d5a359f9436fadda11ae6c85bff7/work/logs
        result_data_file: /var/lib/zuul/builds/d9e6d5a359f9436fadda11ae6c85bff7/work/results.json
        src_root: /var/lib/zuul/builds/d9e6d5a359f9436fadda11ae6c85bff7/work/src
        work_root: /var/lib/zuul/builds/d9e6d5a359f9436fadda11ae6c85bff7/work
      include_vars: []
      items:
      - branch: main
        change: '247'
        change_message: "chore(deps): update dependency cilium/cilium to v1.18.1\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [cilium/cilium](https://redirect.github.com/cilium/cilium) | minor | `1.17.4`
          -> `1.18.1` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>cilium/cilium
          (cilium/cilium)</summary>\n\n### [`v1.18.1`](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.1):
          1.18.1\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.18.0...1.18.1)\n\n##
          Summary of Changes\n\n**Minor Changes:**\n\n- Add `kernel_version`, `endpoint_routes_enabled`,
          `strict_mode_enabled` and `kubernetes_version` feature metrics. (Backport
          PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;41003](https://redirect.github.com/cilium/cilium/issues/41003),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- eni: improve logging
          and speed up ipam reconciliation in case of node scale-downs (Backport PR
          [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40852](https://redirect.github.com/cilium/cilium/issues/40852),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n- kvstore: Cilium
          Agent no longer fails health-check if operator is unavailable (Backport
          PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40920](https://redirect.github.com/cilium/cilium/issues/40920),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n- operator: CRDs
          are updated in series instead of in parallel now during Cilium upgrades.
          This should lower the pressure on the k8s control plane (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40322](https://redirect.github.com/cilium/cilium/issues/40322),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n\n**Bugfixes:**\n\n-
          Add missing safeguards to topology-aware routing: use all backends when
          no suitable one matching the zone hints are found or a backend exists without
          a zone hint. ([#&#8203;41116](https://redirect.github.com/cilium/cilium/issues/41116),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- aws/eni: Don't
          use subnet tags to filter ENIs for GC (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40656](https://redirect.github.com/cilium/cilium/issues/40656),
          [@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))\n- clustermesh:
          fix regression possibly causing cross-cluster connections disruption if
          the clustermesh-apiserver is restarted at the same time as Cilium agents.
          (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40786](https://redirect.github.com/cilium/cilium/issues/40786),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- clustermesh:
          fix regression preventing global services with unnamed ports from including
          remote backends (Backport PR [#&#8203;40865](https://redirect.github.com/cilium/cilium/issues/40865),
          Upstream PR [#&#8203;40848](https://redirect.github.com/cilium/cilium/issues/40848),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- Fix bug where
          the presence of a label called \"ingress\" causes incorrect assignment of
          identities to workloads, affecting policy enforcement. (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40791](https://redirect.github.com/cilium/cilium/issues/40791),
          [@&#8203;christarazi](https://redirect.github.com/christarazi))\n- Fix skipping
          of LoadBalancer services when IPMode is not set to VIP (KEP-1860) (Backport
          PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40915](https://redirect.github.com/cilium/cilium/issues/40915),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- fix([GH-37724](https://redirect.github.com/cilium/cilium/issues/37724)):
          Sync policies on startup (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40357](https://redirect.github.com/cilium/cilium/issues/40357),
          [@&#8203;anubhabMajumdar](https://redirect.github.com/anubhabMajumdar))\n-
          fix: create policy snapshot only for sdp (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40785](https://redirect.github.com/cilium/cilium/issues/40785),
          [@&#8203;vipul-21](https://redirect.github.com/vipul-21))\n- Fixes a bug
          where the Cilium agent may segfault when starting. (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40824](https://redirect.github.com/cilium/cilium/issues/40824),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- Fixes an error
          where the Ingress controller, when run in host network, created an invalid
          Service. (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;40232](https://redirect.github.com/cilium/cilium/issues/40232),
          [@&#8203;rtheobald](https://redirect.github.com/rtheobald))\n- helm: Create
          envoy-config ConfigMap for preflight (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;40875](https://redirect.github.com/cilium/cilium/issues/40875),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- install/kubernetes:
          fix clustermesh-apiserver extraEnv (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;41021](https://redirect.github.com/cilium/cilium/issues/41021),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- loadbalancer: Fix backend
          state in REST API (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40780](https://redirect.github.com/cilium/cilium/issues/40780),
          [@&#8203;mhofstetter](https://redirect.github.com/mhofstetter))\n\n**CI
          Changes:**\n\n- .github/actions: only upload files with features-tested
          prefix (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40975](https://redirect.github.com/cilium/cilium/issues/40975),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- Add TESTOWNERS file
          ([#&#8203;40864](https://redirect.github.com/cilium/cilium/issues/40864),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- ci: Add
          Cleanup Disk space step into conformance-runtime (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40973](https://redirect.github.com/cilium/cilium/issues/40973),
          [@&#8203;rastislavs](https://redirect.github.com/rastislavs))\n- ci: Fix
          CI-Fuzz Build failures (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40728](https://redirect.github.com/cilium/cilium/issues/40728),
          [@&#8203;lomackie](https://redirect.github.com/lomackie))\n- ci: Reuse connectivity
          test flags in proxy-embedded (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;41036](https://redirect.github.com/cilium/cilium/issues/41036),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- endpoint:
          Avoid unnecessarily logging a warning during endpoint deletion (Backport
          PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40927](https://redirect.github.com/cilium/cilium/issues/40927),
          [@&#8203;christarazi](https://redirect.github.com/christarazi))\n- Fix GKE
          cluster creation failures when branch names exceed 63-byte label limit by
          implementing automatic truncation with hash-based uniqueness preservation.
          (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40725](https://redirect.github.com/cilium/cilium/issues/40725),
          [@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))\n- Improved
          test failure attribution on stable branches by using TESTOWNERS files to
          route failures to appropriate code quality teams rather than generic CI
          infrastructure teams. (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40776](https://redirect.github.com/cilium/cilium/issues/40776),
          [@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))\n- ipsec:
          fix privileged tests (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;41006](https://redirect.github.com/cilium/cilium/issues/41006),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n- tools/testowners:
          de-duplicate error logs (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40778](https://redirect.github.com/cilium/cilium/issues/40778),
          [@&#8203;tklauser](https://redirect.github.com/tklauser))\n- workflows/ipsec:
          Fix leak detection for IPv6-only in e2e downgrade (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40881](https://redirect.github.com/cilium/cilium/issues/40881),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n\n**Misc
          Changes:**\n\n- .github/workflows: bump build-images-base timeout to 60
          minutes (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40919](https://redirect.github.com/cilium/cilium/issues/40919),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github/workflows:
          print open file descriptors (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40941](https://redirect.github.com/cilium/cilium/issues/40941),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: fix removal
          of all files in /mnt (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40818](https://redirect.github.com/cilium/cilium/issues/40818),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: remove all
          contents of /mnt in build images CI (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40814](https://redirect.github.com/cilium/cilium/issues/40814),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- chore(deps): update
          actions/download-artifact action to v5 (v1.18) ([#&#8203;41055](https://redirect.github.com/cilium/cilium/issues/41055),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all github action dependencies (v1.18) ([#&#8203;40901](https://redirect.github.com/cilium/cilium/issues/40901),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all github action dependencies (v1.18) ([#&#8203;41056](https://redirect.github.com/cilium/cilium/issues/41056),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.18) ([#&#8203;40900](https://redirect.github.com/cilium/cilium/issues/40900),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update dependency cilium/cilium-cli to v0.18.6 (v1.18) ([#&#8203;40898](https://redirect.github.com/cilium/cilium/issues/40898),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update go to v1.24.6 (v1.18) ([#&#8203;40993](https://redirect.github.com/cilium/cilium/issues/40993),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.18) (patch) ([#&#8203;40899](https://redirect.github.com/cilium/cilium/issues/40899),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.18) (patch) ([#&#8203;41054](https://redirect.github.com/cilium/cilium/issues/41054),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          ci: add/change runner labels (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40972](https://redirect.github.com/cilium/cilium/issues/40972),
          [@&#8203;Artyop](https://redirect.github.com/Artyop))\n- daemon/test: explicitly
          wait for identities synchronization (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40811](https://redirect.github.com/cilium/cilium/issues/40811),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- docs: Remove
          references to v1.15 (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;41033](https://redirect.github.com/cilium/cilium/issues/41033),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Fix loadbalancer
          handling of backends with ClusterID set (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;40968](https://redirect.github.com/cilium/cilium/issues/40968),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- Fix race condition
          issues (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40949](https://redirect.github.com/cilium/cilium/issues/40949),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- fix(deps): update module
          github.com/docker/docker to v28.3.3+incompatible \\[security] (v1.18) ([#&#8203;40793](https://redirect.github.com/cilium/cilium/issues/40793),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          loadbalancer: Raise default retry duration to 1 second (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;40997](https://redirect.github.com/cilium/cilium/issues/40997),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- loadbalancer:
          Use unique for L3n4Addr (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40633](https://redirect.github.com/cilium/cilium/issues/40633),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- Makefile: Fix
          multi codeowner detection (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40923](https://redirect.github.com/cilium/cilium/issues/40923),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Reduced
          memory usage by roughly 10% for large EndpointSlices by sharing identical
          objects. (Backport PR [#&#8203;41078](https://redirect.github.com/cilium/cilium/issues/41078),
          Upstream PR [#&#8203;40987](https://redirect.github.com/cilium/cilium/issues/40987),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- values(.yaml.tmpl):
          Add Geneve (Class Option) to dsrDispatch paramater (Backport PR [#&#8203;40847](https://redirect.github.com/cilium/cilium/issues/40847),
          Upstream PR [#&#8203;40625](https://redirect.github.com/cilium/cilium/issues/40625),
          [@&#8203;alagoutte](https://redirect.github.com/alagoutte))\n- vendor: Bump
          to StateDB v0.4.5 (Backport PR [#&#8203;40979](https://redirect.github.com/cilium/cilium/issues/40979),
          Upstream PR [#&#8203;40783](https://redirect.github.com/cilium/cilium/issues/40783),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n\n**Other Changes:**\n\n-
          ci: reduce gke failures ([#&#8203;41070](https://redirect.github.com/cilium/cilium/issues/41070),
          [@&#8203;brlbil](https://redirect.github.com/brlbil))\n- install: Update
          image digests for v1.18.0 ([#&#8203;40782](https://redirect.github.com/cilium/cilium/issues/40782),
          [@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\\[bot])\n\n####
          Docker Manifests\n\n##### cilium\n\n`quay.io/cilium/cilium:v1.18.1@&#8203;sha256:65ab17c052d8758b2ad157ce766285e04173722df59bdee1ea6d5fda7149f0e9`\n`quay.io/cilium/cilium:stable@sha256:65ab17c052d8758b2ad157ce766285e04173722df59bdee1ea6d5fda7149f0e9`\n\n#####
          clustermesh-apiserver\n\n`quay.io/cilium/clustermesh-apiserver:v1.18.1@&#8203;sha256:87ab85f33dc7e895ed6257564bf1a255d12399d9e8a075a8fc400910ff94cbeb`\n`quay.io/cilium/clustermesh-apiserver:stable@sha256:87ab85f33dc7e895ed6257564bf1a255d12399d9e8a075a8fc400910ff94cbeb`\n\n#####
          docker-plugin\n\n`quay.io/cilium/docker-plugin:v1.18.1@&#8203;sha256:fb1c6ecb6dc180c97488b8ea45d81275237db14d50e22a1eff3dbfaf9f6f93f3`\n`quay.io/cilium/docker-plugin:stable@sha256:fb1c6ecb6dc180c97488b8ea45d81275237db14d50e22a1eff3dbfaf9f6f93f3`\n\n#####
          hubble-relay\n\n`quay.io/cilium/hubble-relay:v1.18.1@&#8203;sha256:7e2fd4877387c7e112689db7c2b153a4d5c77d125b8d50d472dbe81fc1b139b0`\n`quay.io/cilium/hubble-relay:stable@sha256:7e2fd4877387c7e112689db7c2b153a4d5c77d125b8d50d472dbe81fc1b139b0`\n\n#####
          operator-alibabacloud\n\n`quay.io/cilium/operator-alibabacloud:v1.18.1@&#8203;sha256:e2bdc8236acec0d1ef1552c831a7cd2277624031066fbdfac884a31a4126a32a`\n`quay.io/cilium/operator-alibabacloud:stable@sha256:e2bdc8236acec0d1ef1552c831a7cd2277624031066fbdfac884a31a4126a32a`\n\n#####
          operator-aws\n\n`quay.io/cilium/operator-aws:v1.18.1@&#8203;sha256:de522223ecd73bc06b48042fa59f78f7b3b8f2fff4f8f30a61687516798c5042`\n`quay.io/cilium/operator-aws:stable@sha256:de522223ecd73bc06b48042fa59f78f7b3b8f2fff4f8f30a61687516798c5042`\n\n#####
          operator-azure\n\n`quay.io/cilium/operator-azure:v1.18.1@&#8203;sha256:682058e6734e397e7939e92bb463da3c1b5d8b7a7ce408c3b7a62aadb9ce4f06`\n`quay.io/cilium/operator-azure:stable@sha256:682058e6734e397e7939e92bb463da3c1b5d8b7a7ce408c3b7a62aadb9ce4f06`\n\n#####
          operator-generic\n\n`quay.io/cilium/operator-generic:v1.18.1@&#8203;sha256:97f4553afa443465bdfbc1cc4927c93f16ac5d78e4dd2706736e7395382201bc`\n`quay.io/cilium/operator-generic:stable@sha256:97f4553afa443465bdfbc1cc4927c93f16ac5d78e4dd2706736e7395382201bc`\n\n#####
          operator\n\n`quay.io/cilium/operator:v1.18.1@&#8203;sha256:f3b8d90f945167c1ac4324a0f02a9d381f83076d5ce828fab452014f9335a47e`\n`quay.io/cilium/operator:stable@sha256:f3b8d90f945167c1ac4324a0f02a9d381f83076d5ce828fab452014f9335a47e`\n\n###
          [`v1.18.0`](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0):
          1.18.0\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.7...1.18.0)\n\nWe
          are excited to announce the **[Cilium 1.18.0](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0)**
          release!\n\nA total of **3298 new commits** have been contributed to this
          release by a growing community of over **955 developers** and over **22,000
          GitHub stars**! \u2B50\n\nTo keep up to date with all the latest Cilium
          releases, see [Announcements](https://redirect.github.com/cilium/cilium/discussions/categories/announcements)\n\nHere's
          what's new in [v1.18.0](https://redirect.github.com/cilium/cilium/releases/tag/v1.18.0):\n\n####
          \U0001F6A0 Networking\n\n- **\u2696\uFE0F Load Balancing Redesign**: The
          service load-balancing control-plane in the Cilium agent has been redesigned
          to reduce memory usage and improve future extensibility of load-balancing
          features ([cilium/cilium#38469](https://redirect.github.com/cilium/cilium/pull/38469),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n- **\U0001F50C
          Virtual Network Devices**: Added support for new virtual network device
          configurations such as VXLAN in IPsec (VinE) and IPIP tunnels ([cilium/cilium#37723](https://redirect.github.com/cilium/cilium/pull/37723),
          [@&#8203;ldelossa](https://redirect.github.com/ldelossa); [cilium/cilium#37346](https://redirect.github.com/cilium/cilium/pull/37346),
          [@&#8203;gyutaeb](https://redirect.github.com/gyutaeb))\n- **\u24C2\uFE0F
          Multiple Egress Gateways**: Egress Gateways policies can now direct traffic
          towards multiple gateway nodes ([cilium/cilium#39304](https://redirect.github.com/cilium/cilium/pull/39304),
          [@&#8203;carlos-abad](https://redirect.github.com/carlos-abad))\n- **\U0001F6A6
          Ingress Rate Limiting**: The bandwidth manager now supports ingress rate
          limiting ([cilium/cilium#36351](https://redirect.github.com/cilium/cilium/pull/36351),
          [@&#8203;l1b0k](https://redirect.github.com/l1b0k))\n- **\U0001F4E2 Multi-Device
          L2 Announcements**: The L2 pod announcement feature now supports multiple
          devices ([cilium/cilium#38198](https://redirect.github.com/cilium/cilium/pull/38198),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          **\U0001F3E2 Neighbor Subsystem Rework**: The neighbor subsystem was made
          more resilient through a new system that reconciles desired neighbor entries
          with the kernel state ([cilium/cilium#39987](https://redirect.github.com/cilium/cilium/pull/39987),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n\n####
          \U0001F310 IPv6\n\n- **\U0001F687 Tunneling Underlay**: The tunneling datapath
          mode now supports using an IPv6 network underlay, including when configured
          with IPsec transparent encryption ([cilium/cilium#38296](https://redirect.github.com/cilium/cilium/pull/38296),
          [cilium/cilium#39497](https://redirect.github.com/cilium/cilium/pull/39497),
          [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- **\U0001F4AC
          Kube Proxy Replacement**: Cilium now implements service translation when
          running on an IPv6 underlay ([cilium/cilium#39074](https://redirect.github.com/cilium/cilium/pull/39074),
          [@&#8203;pchaigno](https://redirect.github.com/pchaigno))\n- **\U0001F4CB
          Delegated IPAM**: When delegating IP address management to a third party
          plugin, Cilium now configures IPv6 routes for connectivity if the plugin
          supports IPv6 ([cilium/cilium#38249](https://redirect.github.com/cilium/cilium/pull/38249),
          [@&#8203;caorui-io](https://redirect.github.com/caorui-io), [@&#8203;kadevu](https://redirect.github.com/kadevu))\n-
          **\U0001F4E6 IP Fragment Support**: Cilium now processes ordered IPv6 fragments
          to apply policy and routing functionality ([cilium/cilium#38110](https://redirect.github.com/cilium/cilium/pull/38110),
          [@&#8203;gentoo-root](https://redirect.github.com/gentoo-root))\n- **\U0001F6AA
          Egress gateway policies** can now match IPv6 address ranges ([cilium/cilium#38452](https://redirect.github.com/cilium/cilium/pull/38452),
          [@&#8203;rgo3](https://redirect.github.com/rgo3))\n\n#### \U0001F6E1\uFE0F
          Policy & Observability\n\n- **\U0001F3F7\uFE0F Policy Names in Hubble-CLI**:
          Show the names of (C)CNPs that allowed or denied traffic when monitoring
          flows in Hubble ([cilium/cilium#39453](https://redirect.github.com/cilium/cilium/pull/39453),
          [@&#8203;antonipp](https://redirect.github.com/antonipp))\n- **\U0001F4DD
          Policy Log Fields**: A new free-text log field is added to policies, which
          is exposed in Hubble flows for easy correlation and searching ([cilium/cilium#39902](https://redirect.github.com/cilium/cilium/pull/39902),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F6F0\uFE0F
          Encapsulated Traffic Decoding**: Hubble decodes encapsulated traffic for
          deeper introspection into traffic flows ([cilium/cilium#37634](https://redirect.github.com/cilium/cilium/pull/37634),
          [@&#8203;kaworu](https://redirect.github.com/kaworu))\n- **\U0001F3F0 ClusterMesh
          Policy Restriction**: A new option allows the **cluster** entity to apply
          only to the local cluster in ClusterMesh environment ([cilium/cilium#39338](https://redirect.github.com/cilium/cilium/pull/39338),
          [@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))\n- **\u2728
          Enhanced Policy Dashboard**: The Policy section of the Cilium Grafana dashboard
          has been improved to show more relevant graphs, including policy drops in
          both directions ([cilium/cilium#36492](https://redirect.github.com/cilium/cilium/pull/36492),
          [cilium/cilium#37445](https://redirect.github.com/cilium/cilium/pull/37445),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n\n#### \U0001F305
          Performance\n\n- **\U0001F4CA Scale Test Results**: Cilium implements policies
          and services up to 45% faster in higher scale environments (Various; [@&#8203;marseel](https://redirect.github.com/marseel),
          [cilium/cilium#40227](https://redirect.github.com/cilium/cilium/pull/40227))\n-
          **\U0001F4E6 Image Size Reduction**: Docker image sizes are reduced by 32%
          on arm64 architecture images ([cilium/cilium#40005](https://redirect.github.com/cilium/cilium/pull/40005),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n- **\u26A1 Improved
          Policy Performance**: The DNS proxy can process large numbers of IPs faster,
          and the EndpointSelector match implementation has been optimized ([cilium/cilium#39340](https://redirect.github.com/cilium/cilium/pull/39340),
          [@&#8203;squeed](https://redirect.github.com/squeed); [cilium/cilium#40414](https://redirect.github.com/cilium/cilium/pull/40414),
          [@&#8203;marseel](https://redirect.github.com/marseel))\n- **\U0001FA9E
          EndpointSlice Mirroring for Multi-Cluster Services**: Clustermesh mirrors
          EndpointSlice from the local cluster instead of copying the Service selectors
          when using the MCS-API controller ([cilium/cilium#38596](https://redirect.github.com/cilium/cilium/pull/38596),
          [@&#8203;MrFreezeex](https://redirect.github.com/MrFreezeex))\n- **\U0001F310
          KVStoreMesh Optimization**: Cross-cluster state distribution is optimized
          by only synchronizing identities keyed by ID, not by value ([cilium/cilium#36471](https://redirect.github.com/cilium/cilium/pull/36471),
          [@&#8203;HadrienPatte](https://redirect.github.com/HadrienPatte))\n- **\U0001F9E0
          Egress Gateway Processing**: Egress gateway policy processing is significantly
          improved when matching a large number of pods ([cilium/cilium#37714](https://redirect.github.com/cilium/cilium/pull/37714),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- **\U0001F5D1\uFE0F
          Optimized Garbage Collection for Connection Tracking**: Cilium leverages
          batched iterators for CTMap GC ([cilium/cilium#36288](https://redirect.github.com/cilium/cilium/pull/36288),
          [@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))\n\n####
          \u2699\uFE0F Operations\n\n- **\U0001F4C8 API Server Connections at Scale**:
          Improve kube-apiserver connections behavior at scale through failover and
          setting better jitter and backoff configurations ([cilium/cilium#37601](https://redirect.github.com/cilium/cilium/pull/37601),
          [@&#8203;aditighag](https://redirect.github.com/aditighag); [cilium/cilium#38031](https://redirect.github.com/cilium/cilium/pull/38031),
          [@&#8203;orange30](https://redirect.github.com/orange30); [cilium/cilium#36648](https://redirect.github.com/cilium/cilium/pull/36648),
          [@&#8203;wedaly](https://redirect.github.com/wedaly))\n- **\U0001F504 ConfigMap
          Synchronization**: New option to automatically synchronize ConfigMap changes
          into the agent and report metrics for when the effective configuration is
          different from the desired configuration ([cilium/cilium#36510](https://redirect.github.com/cilium/cilium/pull/36510),
          [@&#8203;ovidiutirla](https://redirect.github.com/ovidiutirla))\n- **\U0001F393
          CRD Promotion to Stable**: Promote **CiliumCIDRGroup**, **CiliumLoadBalancerIPPool**
          and all **BGP** CRDs to stable API ([cilium/cilium#38940](https://redirect.github.com/cilium/cilium/pull/38940),
          [@&#8203;christarazi](https://redirect.github.com/christarazi); [cilium/cilium#39090](https://redirect.github.com/cilium/cilium/pull/39090),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84); [cilium/cilium#37765](https://redirect.github.com/cilium/cilium/pull/37765),
          [@&#8203;rastislavs](https://redirect.github.com/rastislavs))\n- **\u26D4
          Node Taints Handling**: The cilium-operator Deployment uses a new default
          set of taints which avoids deploying to a drained node ([cilium/cilium#40137](https://redirect.github.com/cilium/cilium/pull/40137),
          [@&#8203;Murat](https://redirect.github.com/Murat) Parlakisik)\n- **:wood:
          Migrate to Slog**: Cilium now uses slog as log library for all components
          ([cilium/cilium#39664](https://redirect.github.com/cilium/cilium/pull/39664),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- **\U0001F527 Cilium
          dependencies** were updated to Kubernetes v1.33, Envoy v1.34, LLVM 19.1,
          and CNI v1.1 ([cilium/cilium#39124](https://redirect.github.com/cilium/cilium/pull/39124),
          [cilium/cilium#40175](https://redirect.github.com/cilium/cilium/pull/40175),
          [cilium/cilium#39632](https://redirect.github.com/cilium/cilium/pull/39632),
          [@&#8203;sayboras](https://redirect.github.com/sayboras); [cilium/cilium#38868](https://redirect.github.com/cilium/cilium/pull/38868),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F427 Minimum
          Linux Requirements**: The minimum kernel version for this release series
          is Linux v5.10 or similar, such as RHEL 8.6 ([cilium/cilium#38308](https://redirect.github.com/cilium/cilium/pull/38308),
          [@&#8203;julianwiedmann](https://redirect.github.com/julianwiedmann))\n\n####
          \U0001F578\uFE0F Service Mesh & Gateway API\n\n- **\u26E9\uFE0F Gateway
          API v1.3.0**: Gateway API support is bumped to v1.3.0 ([cilium/cilium#39590](https://redirect.github.com/cilium/cilium/pull/39590),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- **\U0001F517
          Improved GatewayClass Configuration**: The new CiliumGatewayClassConfig
          object adds service type validation allows the configuration of extra settings
          on a per-GatewayClass level: LoadBalancerSourceRangesPolicy, ParametersRef
          fields. This allows Cilium to reconcile multiple GatewayClasses with different
          configurations ([cilium/cilium#37792](https://redirect.github.com/cilium/cilium/pull/37792),
          [cilium/cilium#37402](https://redirect.github.com/cilium/cilium/pull/37402),
          [cilium/cilium#40138](https://redirect.github.com/cilium/cilium/pull/40138),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n- **\U0001F68F
          Multiple HTTPRoutes**: GAMMA reconciler now supports attaching multiple
          HTTPRoutes to the same Service ([cilium/cilium#39922](https://redirect.github.com/cilium/cilium/pull/39922),
          [@&#8203;youngnick](https://redirect.github.com/youngnick))\n- **\U0001FA84
          Route Changes Reconciliation**: Reconcile Gateway API based on all changes
          to routes. This allows label updates to trigger reconciliation correctly,
          amongst other things ([cilium/cilium#37798](https://redirect.github.com/cilium/cilium/pull/37798),
          [@&#8203;sayboras](https://redirect.github.com/sayboras))\n\n#### \U0001F3F7\uFE0F
          IP Address Management\n\n- **\u2601\uFE0F AWS Prefix Delegation**: Prefix
          delegation on AWS bare metal instances is now supported natively in Cilium's
          AWS ENI IPAM mode ([cilium/cilium#39678](https://redirect.github.com/cilium/cilium/pull/39678),
          [@&#8203;41ks](https://redirect.github.com/41ks))\n- **\U0001F3EC Multi-Pool
          IPAM with KVStore**: Add support for Multi-Pool IPAM in external KVstore
          mode ([cilium/cilium#39638](https://redirect.github.com/cilium/cilium/pull/39638),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- **\U0001F510
          Multi-Pool IPAM with IPSec**: Add support for Multi-Pool IPAM mode with
          IPSec transparent encryption in tunnel routing mode ([cilium/cilium#39442](https://redirect.github.com/cilium/cilium/pull/39442),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- **\u21AA\uFE0F
          Multi-Pool Tunnel Routing**: Add support for tunnel routing in multi-pool
          IPAM mode ([cilium/cilium#38483](https://redirect.github.com/cilium/cilium/pull/38483),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n\n#### \U0001F6E3\uFE0F
          BGP\n\n- **\U0001F4C7 Route Aggregation**: Add support for BGP route aggregation
          in the control plane ([cilium/cilium#37275](https://redirect.github.com/cilium/cilium/pull/37275),
          [@&#8203;romanspb80](https://redirect.github.com/romanspb80))\n- **\U0001F3AF
          Overlapping Selector Matches**: Support overlapping selector matches in
          **CiliumBGPAdvertisement** resources ([cilium/cilium#36414](https://redirect.github.com/cilium/cilium/pull/36414),
          [@&#8203;dswaffordcw](https://redirect.github.com/dswaffordcw))\n- **\U0001F194
          New Router ID generation modes**: Generate router-id based on MAC addresses,
          or from an IP address pool ([cilium/cilium#36451](https://redirect.github.com/cilium/cilium/pull/36451),
          [@&#8203;yushoyamaguchi](https://redirect.github.com/yushoyamaguchi); [cilium/cilium#38300](https://redirect.github.com/cilium/cilium/pull/38300),
          [@&#8203;liyihuang](https://redirect.github.com/liyihuang))\n\n#### \U0001F9D1\u200D\U0001F4BB
          Development Experience\n\n- **\U0001F9EA Test attribution**: Identify owners
          of test in GitHub workflow results to make it easier to connect with other
          developers on tricky problems ([cilium/cilium#37027](https://redirect.github.com/cilium/cilium/pull/37027),
          [@&#8203;Joe](https://redirect.github.com/Joe) Stringer)\n- **\U0001F6CF\uFE0F
          Policy REST API**: The Cilium policy API exposed over a local unix socket
          is deprecated. The other mechanisms to configure policy via Kubernetes resources
          or the local filesystem are preferred ([cilium/cilium#40212](https://redirect.github.com/cilium/cilium/pull/40212),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- **\U0001F3D7\uFE0F
          Feature Deprecation**: Deprecate underused features like Custom Calls, Recorder
          API and External Workloads ([cilium/cilium#38480](https://redirect.github.com/cilium/cilium/pull/38480),
          [cilium/cilium#39642](https://redirect.github.com/cilium/cilium/pull/39642),
          [cilium/cilium#37418](https://redirect.github.com/cilium/cilium/pull/37418),
          [@&#8203;brb](https://redirect.github.com/brb))\n\n#### \U0001F3E2 Community\n\n-
          **\u2764\uFE0F Production Case Studies**: Many end-users have stepped forward
          to tell their stories running Cilium in production. If your company wants
          to submit their case studies let us know. We would love to hear your feedback!\n
          \ - [ByteDance](https://www.youtube.com/watch?v=cKPW67D7X10), [Canopus Networks](https://www.youtube.com/watch?v=YXl9xuIxylY),
          [Corner Banca](https://www.youtube.com/watch?v=HVPKSefazl4), [DB Schenker](https://www.cncf.io/case-studies/db-schenker/),
          [eBay](https://www.youtube.com/watch?v=xEa4KFf5FzY), [ECCO](https://www.cncf.io/case-studies/ecco/),
          [G-Research](https://www.youtube.com/watch?v=kjSFN34dROQ), [Social Network
          Company](https://cilium.io/blog/2025/04/15/tetragon-social-networking-user-story/),
          and [Preferred Networks](https://www.youtube.com/watch?v=n7_I4zu6f_M)\n-
          **\U0001F1EC\U0001F1E7 London Events**: The community gathered at [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/co-located-events/ciliumcon/)
          and the [Cilium Developer Summit](https://redirect.github.com/cilium/dev-summits/tree/main/2025-EU)
          in London\n- **\U0001F1FA\U0001F1F8 Atlanta Events**: Meet us at the upcoming
          [CiliumCon](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/co-located-events/ciliumcon/)
          and Cilium Developers Summit in Atlanta, Georgia\n- **\U0001F465 SIG Community
          Meetings**: [SIG Community](https://redirect.github.com/cilium/community/tree/main/sig-community)
          now meets every first and third Thursday to foster, grow, and sustain the
          Cilium open source community\n\n#### \U0001F4D4 Full CHANGELOG\n\n- Full
          CHANGELOG.md can be found [here](https://redirect.github.com/cilium/cilium/blob/v1.18.0/CHANGELOG.md).\n\nAnd
          finally, we would like to thank you to all contributors of Cilium that helped
          directly and indirectly with the project. The success of Cilium could not
          happen without all of you. \u2764\uFE0F :people\\_holding\\_hands:  \u2764\uFE0F\n\n###
          [`v1.17.7`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.7):
          1.17.7\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.6...1.17.7)\n\n##
          Summary of Changes\n\n**Minor Changes:**\n\n- Add `kernel_version`, `endpoint_routes_enabled`,
          `strict_mode_enabled` and `kubernetes_version` feature metrics. (Backport
          PR [#&#8203;41074](https://redirect.github.com/cilium/cilium/issues/41074),
          Upstream PR [#&#8203;41003](https://redirect.github.com/cilium/cilium/issues/41003),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n\n**Bugfixes:**\n\n-
          Added cleanup of deprecated cilium\\_policy\\_v1 maps (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;39400](https://redirect.github.com/cilium/cilium/issues/39400),
          [@&#8203;pasteley](https://redirect.github.com/pasteley))\n- bgp: Use private
          fork of the GoBGP to fix BGP MD5 auth (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40566](https://redirect.github.com/cilium/cilium/issues/40566),
          [@&#8203;YutaroHayakawa](https://redirect.github.com/YutaroHayakawa))\n-
          bpf/nat: fix header offset while reverse nat-ing icmp6 pkt too big. (Backport
          PR [#&#8203;40387](https://redirect.github.com/cilium/cilium/issues/40387),
          Upstream PR [#&#8203;40002](https://redirect.github.com/cilium/cilium/issues/40002),
          [@&#8203;tommyp1ckles](https://redirect.github.com/tommyp1ckles))\n- Enable
          protocol differentiation by default on the operator, matching the agent
          ([#&#8203;40643](https://redirect.github.com/cilium/cilium/issues/40643),
          [@&#8203;dylandreimerink](https://redirect.github.com/dylandreimerink))\n-
          Fix a bug where Cilium leaks stale routes when IPsec is enabled. (Backport
          PR [#&#8203;40664](https://redirect.github.com/cilium/cilium/issues/40664),
          Upstream PR [#&#8203;40653](https://redirect.github.com/cilium/cilium/issues/40653),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- fix(helm):
          fix values.schema.json types for bpf.events.default.{rateLimit,burstLimit}
          (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40543](https://redirect.github.com/cilium/cilium/issues/40543),
          [@&#8203;vchirikov](https://redirect.github.com/vchirikov))\n- fix: kube-proxy
          healthz panic on port 10256 ([#&#8203;40590](https://redirect.github.com/cilium/cilium/issues/40590),
          [@&#8203;tamilmani1989](https://redirect.github.com/tamilmani1989))\n- Helm:
          Correct seccompProfile for cilium-agent pods (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40476](https://redirect.github.com/cilium/cilium/issues/40476),
          [@&#8203;jcpunk](https://redirect.github.com/jcpunk))\n- install/kubernetes:
          fix clustermesh-apiserver extraEnv (Backport PR [#&#8203;41074](https://redirect.github.com/cilium/cilium/issues/41074),
          Upstream PR [#&#8203;41021](https://redirect.github.com/cilium/cilium/issues/41021),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- pkg/ipam: fix multi-pool
          allocator not releasing un-used /32 and /128 CIDRs (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40393](https://redirect.github.com/cilium/cilium/issues/40393),
          [@&#8203;alimehrabikoshki](https://redirect.github.com/alimehrabikoshki))\n-
          service: Only set algorithm annotation when requested ([#&#8203;40845](https://redirect.github.com/cilium/cilium/issues/40845),
          [@&#8203;tsotne95](https://redirect.github.com/tsotne95))\n\n**CI Changes:**\n\n-
          .github/actions: only upload files with features-tested prefix (Backport
          PR [#&#8203;40988](https://redirect.github.com/cilium/cilium/issues/40988),
          Upstream PR [#&#8203;40975](https://redirect.github.com/cilium/cilium/issues/40975),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: Don't overwrite
          junit results (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;39159](https://redirect.github.com/cilium/cilium/issues/39159),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- .github:
          Run final steps when tests aren't skipped (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;40180](https://redirect.github.com/cilium/cilium/issues/40180),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- \\[v1.17]
          .github: Remove use of cosign attest --recursive ([#&#8203;40699](https://redirect.github.com/cilium/cilium/issues/40699),
          [@&#8203;YutaroHayakawa](https://redirect.github.com/YutaroHayakawa))\n-
          \\[v1.17] ci: Revert build\\_commits runner to ubuntu-22.04 ([#&#8203;40837](https://redirect.github.com/cilium/cilium/issues/40837),
          [@&#8203;rastislavs](https://redirect.github.com/rastislavs))\n- builder:
          Add tparse,junit tooling (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;39092](https://redirect.github.com/cilium/cilium/issues/39092),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Centralize
          dynamic test ownership configuration (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;38045](https://redirect.github.com/cilium/cilium/issues/38045),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- ci: conformance-eks
          token extended to 8h (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40474](https://redirect.github.com/cilium/cilium/issues/40474),
          [@&#8203;mathpl](https://redirect.github.com/mathpl))\n- ci: more powerful
          runners for go linting (Backport PR [#&#8203;40765](https://redirect.github.com/cilium/cilium/issues/40765),
          Upstream PR [#&#8203;40582](https://redirect.github.com/cilium/cilium/issues/40582),
          [@&#8203;mathpl](https://redirect.github.com/mathpl))\n- CLI: Attribute
          tests to codeowners (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;37027](https://redirect.github.com/cilium/cilium/issues/37027),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Emit
          junit output from BPF unit tests (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;39099](https://redirect.github.com/cilium/cilium/issues/39099),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Fix GKE
          cluster creation failures when branch names exceed 63-byte label limit by
          implementing automatic truncation with hash-based uniqueness preservation.
          (Backport PR [#&#8203;40849](https://redirect.github.com/cilium/cilium/issues/40849),
          Upstream PR [#&#8203;40725](https://redirect.github.com/cilium/cilium/issues/40725),
          [@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))\n- Improved
          test failure attribution on stable branches by using TESTOWNERS files to
          route failures to appropriate code quality teams rather than generic CI
          infrastructure teams. (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;40776](https://redirect.github.com/cilium/cilium/issues/40776),
          [@&#8203;pillai-ashwin](https://redirect.github.com/pillai-ashwin))\n- pkg/egw:
          Add missing waitForReconciliationRun (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40355](https://redirect.github.com/cilium/cilium/issues/40355),
          [@&#8203;aditighag](https://redirect.github.com/aditighag))\n- spire: Fix
          unreliable test (Backport PR [#&#8203;40664](https://redirect.github.com/cilium/cilium/issues/40664),
          Upstream PR [#&#8203;40561](https://redirect.github.com/cilium/cilium/issues/40561),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- tools/testowners:
          de-duplicate error logs (Backport PR [#&#8203;41074](https://redirect.github.com/cilium/cilium/issues/41074),
          Upstream PR [#&#8203;40778](https://redirect.github.com/cilium/cilium/issues/40778),
          [@&#8203;tklauser](https://redirect.github.com/tklauser))\n- Upload junit
          results for Go unit test runs (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;39015](https://redirect.github.com/cilium/cilium/issues/39015),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n\n**Misc
          Changes:**\n\n- .github/workflows: bump build-images-base timeout to 60
          minutes (Backport PR [#&#8203;40988](https://redirect.github.com/cilium/cilium/issues/40988),
          Upstream PR [#&#8203;40919](https://redirect.github.com/cilium/cilium/issues/40919),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: fix removal
          of all files in /mnt (Backport PR [#&#8203;40849](https://redirect.github.com/cilium/cilium/issues/40849),
          Upstream PR [#&#8203;40818](https://redirect.github.com/cilium/cilium/issues/40818),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: fix upload
          artifacts for features.json ([#&#8203;41091](https://redirect.github.com/cilium/cilium/issues/41091),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: remove all
          contents of /mnt in build images CI (Backport PR [#&#8203;40849](https://redirect.github.com/cilium/cilium/issues/40849),
          Upstream PR [#&#8203;40814](https://redirect.github.com/cilium/cilium/issues/40814),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- .github: remove stable
          tag from v1.17 branches ([#&#8203;40772](https://redirect.github.com/cilium/cilium/issues/40772),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- certloader: Add client
          variants of watched TLS configs (Backport PR [#&#8203;40624](https://redirect.github.com/cilium/cilium/issues/40624),
          Upstream PR [#&#8203;40399](https://redirect.github.com/cilium/cilium/issues/40399),
          [@&#8203;devodev](https://redirect.github.com/devodev))\n- chore(deps):
          update actions/download-artifact action to v5 (v1.17) ([#&#8203;41058](https://redirect.github.com/cilium/cilium/issues/41058),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all github action dependencies (v1.17) ([#&#8203;40746](https://redirect.github.com/cilium/cilium/issues/40746),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all github action dependencies (v1.17) ([#&#8203;40905](https://redirect.github.com/cilium/cilium/issues/40905),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all github action dependencies (v1.17) ([#&#8203;41059](https://redirect.github.com/cilium/cilium/issues/41059),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;40744](https://redirect.github.com/cilium/cilium/issues/40744),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update all-dependencies (v1.17) ([#&#8203;40984](https://redirect.github.com/cilium/cilium/issues/40984),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update dependency cilium/cilium-cli to v0.18.6 (v1.17) ([#&#8203;40902](https://redirect.github.com/cilium/cilium/issues/40902),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update dependency cilium/little-vm-helper to v0.0.26 (v1.17)
          ([#&#8203;40646](https://redirect.github.com/cilium/cilium/issues/40646),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update docker.io/library/golang:1.24.5 docker digest to [`ef5b4be`](https://redirect.github.com/cilium/cilium/commit/ef5b4be)
          (v1.17) ([#&#8203;40745](https://redirect.github.com/cilium/cilium/issues/40745),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update go to v1.24.6 (v1.17) ([#&#8203;40994](https://redirect.github.com/cilium/cilium/issues/40994),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.33.6-1753919866-df8077dbd3932edccb59f1c5c70e01f2c1f63741
          (v1.17) ([#&#8203;40903](https://redirect.github.com/cilium/cilium/issues/40903),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;40673](https://redirect.github.com/cilium/cilium/issues/40673),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;40904](https://redirect.github.com/cilium/cilium/issues/40904),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          chore(deps): update stable lvh-images (v1.17) (patch) ([#&#8203;41057](https://redirect.github.com/cilium/cilium/issues/41057),
          [@&#8203;cilium-renovate](https://redirect.github.com/cilium-renovate)\\[bot])\n-
          ci: add/change runner labels (Backport PR [#&#8203;40988](https://redirect.github.com/cilium/cilium/issues/40988),
          Upstream PR [#&#8203;40972](https://redirect.github.com/cilium/cilium/issues/40972),
          [@&#8203;Artyop](https://redirect.github.com/Artyop))\n- cli: Load code
          owners dynamically via --code-owners (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;38044](https://redirect.github.com/cilium/cilium/issues/38044),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- daemon/test:
          explicitly wait for identities synchronization (Backport PR [#&#8203;40849](https://redirect.github.com/cilium/cilium/issues/40849),
          Upstream PR [#&#8203;40811](https://redirect.github.com/cilium/cilium/issues/40811),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- doc:monitor:
          clarify direction traced with default aggregation level (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40398](https://redirect.github.com/cilium/cilium/issues/40398),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n- docs: Add
          missing IPAM modes to configuration page (Backport PR [#&#8203;40664](https://redirect.github.com/cilium/cilium/issues/40664),
          Upstream PR [#&#8203;40540](https://redirect.github.com/cilium/cilium/issues/40540),
          [@&#8203;RayyanSeliya](https://redirect.github.com/RayyanSeliya))\n- docs:
          Add warning about changing an IP pool (Backport PR [#&#8203;40664](https://redirect.github.com/cilium/cilium/issues/40664),
          Upstream PR [#&#8203;40567](https://redirect.github.com/cilium/cilium/issues/40567),
          [@&#8203;sorrison](https://redirect.github.com/sorrison))\n- docs: remove
          l7 EnableDefaultDeny callout (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40441](https://redirect.github.com/cilium/cilium/issues/40441),
          [@&#8203;squeed](https://redirect.github.com/squeed))\n- Fix race condition
          issues (Backport PR [#&#8203;40988](https://redirect.github.com/cilium/cilium/issues/40988),
          Upstream PR [#&#8203;40949](https://redirect.github.com/cilium/cilium/issues/40949),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- Makefile: Fix multi
          codeowner detection (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;40923](https://redirect.github.com/cilium/cilium/issues/40923),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Makefile:
          Improve tparse,junit output handling (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;39098](https://redirect.github.com/cilium/cilium/issues/39098),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n- Support
          extending cilium-agent volumes as a downstream packager (Backport PR [#&#8203;40578](https://redirect.github.com/cilium/cilium/issues/40578),
          Upstream PR [#&#8203;40401](https://redirect.github.com/cilium/cilium/issues/40401),
          [@&#8203;devodev](https://redirect.github.com/devodev))\n- tools: Move codeowners
          library from cilium-cli dir (Backport PR [#&#8203;41014](https://redirect.github.com/cilium/cilium/issues/41014),
          Upstream PR [#&#8203;40253](https://redirect.github.com/cilium/cilium/issues/40253),
          [@&#8203;joestringer](https://redirect.github.com/joestringer))\n\n**Other
          Changes:**\n\n- Fix bug where LocalRedirectPolicy forwarding would break
          if you enable `bpf-lb-algorithm-annotation` ([#&#8203;40246](https://redirect.github.com/cilium/cilium/issues/40246),
          [@&#8203;tarabrind](https://redirect.github.com/tarabrind))\n- images: update
          cilium-{runtime,builder} ([#&#8203;40839](https://redirect.github.com/cilium/cilium/issues/40839),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- install: Update image
          digests for v1.17.6 ([#&#8203;40546](https://redirect.github.com/cilium/cilium/issues/40546),
          [@&#8203;cilium-release-bot](https://redirect.github.com/cilium-release-bot)\\[bot])\n-
          vendor: Bump to StateDB v0.4.5 ([#&#8203;40850](https://redirect.github.com/cilium/cilium/issues/40850),
          [@&#8203;joamaki](https://redirect.github.com/joamaki))\n\n#### Docker Manifests\n\n#####
          cilium\n\n`quay.io/cilium/cilium:v1.17.7@&#8203;sha256:b22440f49c61195171aca585c7a57c6a8867271e43a5abc38f2a2f561436ff86`\n\n#####
          clustermesh-apiserver\n\n`quay.io/cilium/clustermesh-apiserver:v1.17.7@&#8203;sha256:2852feca0d0d936ed0333cd64859f3c5ece2db582ba5fed848f57aff786be4a6`\n\n#####
          docker-plugin\n\n`quay.io/cilium/docker-plugin:v1.17.7@&#8203;sha256:1b7c8d64f01b309521f13ab2a15239a688b9f545bb97058d383ad3bb55e42e67`\n\n#####
          hubble-relay\n\n`quay.io/cilium/hubble-relay:v1.17.7@&#8203;sha256:9394312ce65c3c253a8c26a6c292f58736e75c78d1446ecfcd244f1418bebe77`\n\n#####
          operator-alibabacloud\n\n`quay.io/cilium/operator-alibabacloud:v1.17.7@&#8203;sha256:271e64d6c91019a1a4815b4c78294962bf51c9f764c680fdfacb2adb6e9d0c4d`\n\n#####
          operator-aws\n\n`quay.io/cilium/operator-aws:v1.17.7@&#8203;sha256:ce37d2ccf921761a4171a507748a06a204592890e6f8cf7d1c354648e098c830`\n\n#####
          operator-azure\n\n`quay.io/cilium/operator-azure:v1.17.7@&#8203;sha256:9c1db11de2e0cdcaba522c8f396b9a643738f3d3f958fa9b4d62f57bac5daafb`\n\n#####
          operator-generic\n\n`quay.io/cilium/operator-generic:v1.17.7@&#8203;sha256:a610be2562d0f5a8945a27df7d5681711263ce92e09947e867fc37fc9ab08788`\n\n#####
          operator\n\n`quay.io/cilium/operator:v1.17.7@&#8203;sha256:122e49fce82df90693f8981e5d9013b6a9248284db17226259e39364ba9a211d`\n\n###
          [`v1.17.6`](https://redirect.github.com/cilium/cilium/releases/tag/v1.17.6):
          1.17.6\n\n[Compare Source](https://redirect.github.com/cilium/cilium/compare/1.17.5...1.17.6)\n\n##
          Summary of Changes\n\n**Minor Changes:**\n\n- helm: KPR subflag changes
          (Backport PR [#&#8203;40222](https://redirect.github.com/cilium/cilium/issues/40222),
          Upstream PR [#&#8203;39721](https://redirect.github.com/cilium/cilium/issues/39721),
          [@&#8203;brb](https://redirect.github.com/brb))\n\n**Bugfixes:**\n\n- Deny
          policies are now synced to Envoy so that they can be enforced for Ingress
          policies. (Backport PR [#&#8203;40187](https://redirect.github.com/cilium/cilium/issues/40187),
          Upstream PR [#&#8203;39736](https://redirect.github.com/cilium/cilium/issues/39736),
          [@&#8203;jrajahalme](https://redirect.github.com/jrajahalme))\n- Do not
          fail the agent startup in case IPv6 support is enabled and the node does
          not have an IPv6 address assigned yet (Backport PR [#&#8203;40205](https://redirect.github.com/cilium/cilium/issues/40205),
          Upstream PR [#&#8203;40143](https://redirect.github.com/cilium/cilium/issues/40143),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- Fix bug preventing
          a global service from including remote backends, if the local service has
          no selector, and the remote one gets removed and then added again. ([#&#8203;40361](https://redirect.github.com/cilium/cilium/issues/40361),
          [@&#8203;giorio94](https://redirect.github.com/giorio94))\n- Fix data race
          involving DumpReliablyWithCallback map operation. (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;38590](https://redirect.github.com/cilium/cilium/issues/38590),
          [@&#8203;aditighag](https://redirect.github.com/aditighag))\n- Fix IPAM
          IP release racing condition when IP reassigned back to ENI (Backport PR
          [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
          Upstream PR [#&#8203;40019](https://redirect.github.com/cilium/cilium/issues/40019),
          [@&#8203;victorcq](https://redirect.github.com/victorcq))\n- hubble automatically
          pick the `hubble-prefer-ipv6` to `true` if ipv4 not enabled (Backport PR
          [#&#8203;40289](https://redirect.github.com/cilium/cilium/issues/40289),
          Upstream PR [#&#8203;40210](https://redirect.github.com/cilium/cilium/issues/40210),
          [@&#8203;chengjoey](https://redirect.github.com/chengjoey))\n- LBIPAM: Fix
          deletion of CiliumLoadBalancerIPPool with multiple IP blocks that led to
          an operator crash (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;40013](https://redirect.github.com/cilium/cilium/issues/40013),
          [@&#8203;pippolo84](https://redirect.github.com/pippolo84))\n- pkg/egressgateway:
          ensure gateway IP is IPv4 (Backport PR [#&#8203;40332](https://redirect.github.com/cilium/cilium/issues/40332),
          Upstream PR [#&#8203;40209](https://redirect.github.com/cilium/cilium/issues/40209),
          [@&#8203;rgo3](https://redirect.github.com/rgo3))\n- policy: fix error handling
          for selector policy resolution ([#&#8203;40404](https://redirect.github.com/cilium/cilium/issues/40404),
          [@&#8203;fristonio](https://redirect.github.com/fristonio))\n\n**CI Changes:**\n\n-
          ci: do not run north-south conn disrupt tests for 5.4 kernels ([#&#8203;39443](https://redirect.github.com/cilium/cilium/issues/39443),
          [@&#8203;ldelossa](https://redirect.github.com/ldelossa))\n- ci: fix north-south
          conn disrupt for 5.4 kernel ([#&#8203;40434](https://redirect.github.com/cilium/cilium/issues/40434),
          [@&#8203;smagnani96](https://redirect.github.com/smagnani96))\n\n**Misc
          Changes:**\n\n- .github/workflows: remove reviewers if ciliumbot approved
          PR (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;39989](https://redirect.github.com/cilium/cilium/issues/39989),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- auto-approve: add repository
          as part command (Backport PR [#&#8203;40094](https://redirect.github.com/cilium/cilium/issues/40094),
          Upstream PR [#&#8203;40050](https://redirect.github.com/cilium/cilium/issues/40050),
          [@&#8203;aanm](https://redirect.github.com/aanm))\n- auto-approve: add repository
          as part command (Backport PR [#&#8203;40332](https://redirect.github.com\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR becomes conflicted, or you
          tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR
          and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC42MC4xIiwidXBkYXRlZEluVmVyIjoiNDEuOTEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->\n"
        change_url: https://github.com/YAKEcloud/yake-ansible/pull/247
        commit_id: 54efaf9c6b2ae54293dcf8d32ef66cade77e2c3e
        patchset: 54efaf9c6b2ae54293dcf8d32ef66cade77e2c3e
        project:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          name: YAKEcloud/yake-ansible
          short_name: yake-ansible
          src_dir: src/github.com/YAKEcloud/yake-ansible
        topic: null
      job: python-black
      jobtags: []
      max_attempts: 3
      message: Y2hvcmUoZGVwcyk6IHVwZGF0ZSBkZXBlbmRlbmN5IGNpbGl1bS9jaWxpdW0gdG8gdjEuMTguMQoKVGhpcyBQUiBjb250YWlucyB0aGUgZm9sbG93aW5nIHVwZGF0ZXM6Cgp8IFBhY2thZ2UgfCBVcGRhdGUgfCBDaGFuZ2UgfAp8LS0tfC0tLXwtLS18CnwgW2NpbGl1bS9jaWxpdW1dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtKSB8IG1pbm9yIHwgYDEuMTcuNGAgLT4gYDEuMTguMWAgfAoKLS0tCgojIyMgUmVsZWFzZSBOb3RlcwoKPGRldGFpbHM+CjxzdW1tYXJ5PmNpbGl1bS9jaWxpdW0gKGNpbGl1bS9jaWxpdW0pPC9zdW1tYXJ5PgoKIyMjIFtgdjEuMTguMWBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3JlbGVhc2VzL3RhZy92MS4xOC4xKTogMS4xOC4xCgpbQ29tcGFyZSBTb3VyY2VdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2NvbXBhcmUvMS4xOC4wLi4uMS4xOC4xKQoKIyMgU3VtbWFyeSBvZiBDaGFuZ2VzCgoqKk1pbm9yIENoYW5nZXM6KioKCi0gQWRkIGBrZXJuZWxfdmVyc2lvbmAsIGBlbmRwb2ludF9yb3V0ZXNfZW5hYmxlZGAsIGBzdHJpY3RfbW9kZV9lbmFibGVkYCBhbmQgYGt1YmVybmV0ZXNfdmVyc2lvbmAgZmVhdHVyZSBtZXRyaWNzLiAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDEwNzhdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MTA3OCksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQxMDAzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDEwMDMpLCBbQCYjODIwMzthYW5tXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYWFubSkpCi0gZW5pOiBpbXByb3ZlIGxvZ2dpbmcgYW5kIHNwZWVkIHVwIGlwYW0gcmVjb25jaWxpYXRpb24gaW4gY2FzZSBvZiBub2RlIHNjYWxlLWRvd25zIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDk3OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwOTc5KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA4NTJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDg1MiksIFtAJiM4MjAzO21hcnNlZWxdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9tYXJzZWVsKSkKLSBrdnN0b3JlOiBDaWxpdW0gQWdlbnQgbm8gbG9uZ2VyIGZhaWxzIGhlYWx0aC1jaGVjayBpZiBvcGVyYXRvciBpcyB1bmF2YWlsYWJsZSAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDA5NzldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDk3OSksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwOTIwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA5MjApLCBbQCYjODIwMzttYXJzZWVsXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vbWFyc2VlbCkpCi0gb3BlcmF0b3I6IENSRHMgYXJlIHVwZGF0ZWQgaW4gc2VyaWVzIGluc3RlYWQgb2YgaW4gcGFyYWxsZWwgbm93IGR1cmluZyBDaWxpdW0gdXBncmFkZXMuIFRoaXMgc2hvdWxkIGxvd2VyIHRoZSBwcmVzc3VyZSBvbiB0aGUgazhzIGNvbnRyb2wgcGxhbmUgKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwODQ3XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA4NDcpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDMyMl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwMzIyKSwgW0AmIzgyMDM7bWFyc2VlbF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL21hcnNlZWwpKQoKKipCdWdmaXhlczoqKgoKLSBBZGQgbWlzc2luZyBzYWZlZ3VhcmRzIHRvIHRvcG9sb2d5LWF3YXJlIHJvdXRpbmc6IHVzZSBhbGwgYmFja2VuZHMgd2hlbiBubyBzdWl0YWJsZSBvbmUgbWF0Y2hpbmcgdGhlIHpvbmUgaGludHMgYXJlIGZvdW5kIG9yIGEgYmFja2VuZCBleGlzdHMgd2l0aG91dCBhIHpvbmUgaGludC4gKFsjJiM4MjAzOzQxMTE2XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDExMTYpLCBbQCYjODIwMztqb2FtYWtpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vam9hbWFraSkpCi0gYXdzL2VuaTogRG9uJ3QgdXNlIHN1Ym5ldCB0YWdzIHRvIGZpbHRlciBFTklzIGZvciBHQyAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDA5NzldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDk3OSksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwNjU2XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA2NTYpLCBbQCYjODIwMztIYWRyaWVuUGF0dGVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9IYWRyaWVuUGF0dGUpKQotIGNsdXN0ZXJtZXNoOiBmaXggcmVncmVzc2lvbiBwb3NzaWJseSBjYXVzaW5nIGNyb3NzLWNsdXN0ZXIgY29ubmVjdGlvbnMgZGlzcnVwdGlvbiBpZiB0aGUgY2x1c3Rlcm1lc2gtYXBpc2VydmVyIGlzIHJlc3RhcnRlZCBhdCB0aGUgc2FtZSB0aW1lIGFzIENpbGl1bSBhZ2VudHMuIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDk3OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwOTc5KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA3ODZdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDc4NiksIFtAJiM4MjAzO2dpb3Jpbzk0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2lvcmlvOTQpKQotIGNsdXN0ZXJtZXNoOiBmaXggcmVncmVzc2lvbiBwcmV2ZW50aW5nIGdsb2JhbCBzZXJ2aWNlcyB3aXRoIHVubmFtZWQgcG9ydHMgZnJvbSBpbmNsdWRpbmcgcmVtb3RlIGJhY2tlbmRzIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDg2NV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwODY1KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA4NDhdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDg0OCksIFtAJiM4MjAzO2dpb3Jpbzk0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2lvcmlvOTQpKQotIEZpeCBidWcgd2hlcmUgdGhlIHByZXNlbmNlIG9mIGEgbGFiZWwgY2FsbGVkICJpbmdyZXNzIiBjYXVzZXMgaW5jb3JyZWN0IGFzc2lnbm1lbnQgb2YgaWRlbnRpdGllcyB0byB3b3JrbG9hZHMsIGFmZmVjdGluZyBwb2xpY3kgZW5mb3JjZW1lbnQuIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDg0N10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwODQ3KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA3OTFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDc5MSksIFtAJiM4MjAzO2NocmlzdGFyYXppXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2hyaXN0YXJhemkpKQotIEZpeCBza2lwcGluZyBvZiBMb2FkQmFsYW5jZXIgc2VydmljZXMgd2hlbiBJUE1vZGUgaXMgbm90IHNldCB0byBWSVAgKEtFUC0xODYwKSAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDA5NzldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDk3OSksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwOTE1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA5MTUpLCBbQCYjODIwMztqb2FtYWtpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vam9hbWFraSkpCi0gZml4KFtHSC0zNzcyNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzM3NzI0KSk6IFN5bmMgcG9saWNpZXMgb24gc3RhcnR1cCAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDA4NDddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDg0NyksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwMzU3XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDAzNTcpLCBbQCYjODIwMzthbnViaGFiTWFqdW1kYXJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hbnViaGFiTWFqdW1kYXIpKQotIGZpeDogY3JlYXRlIHBvbGljeSBzbmFwc2hvdCBvbmx5IGZvciBzZHAgKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwOTc5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA5NzkpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDc4NV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwNzg1KSwgW0AmIzgyMDM7dmlwdWwtMjFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS92aXB1bC0yMSkpCi0gRml4ZXMgYSBidWcgd2hlcmUgdGhlIENpbGl1bSBhZ2VudCBtYXkgc2VnZmF1bHQgd2hlbiBzdGFydGluZy4gKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwODQ3XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA4NDcpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDgyNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwODI0KSwgW0AmIzgyMDM7c3F1ZWVkXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vc3F1ZWVkKSkKLSBGaXhlcyBhbiBlcnJvciB3aGVyZSB0aGUgSW5ncmVzcyBjb250cm9sbGVyLCB3aGVuIHJ1biBpbiBob3N0IG5ldHdvcmssIGNyZWF0ZWQgYW4gaW52YWxpZCBTZXJ2aWNlLiAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDEwNzhdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MTA3OCksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwMjMyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDAyMzIpLCBbQCYjODIwMztydGhlb2JhbGRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9ydGhlb2JhbGQpKQotIGhlbG06IENyZWF0ZSBlbnZveS1jb25maWcgQ29uZmlnTWFwIGZvciBwcmVmbGlnaHQgKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQxMDc4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDEwNzgpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDg3NV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwODc1KSwgW0AmIzgyMDM7c2F5Ym9yYXNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9zYXlib3JhcykpCi0gaW5zdGFsbC9rdWJlcm5ldGVzOiBmaXggY2x1c3Rlcm1lc2gtYXBpc2VydmVyIGV4dHJhRW52IChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MTA3OF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQxMDc4KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDEwMjFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MTAyMSksIFtAJiM4MjAzO2Fhbm1dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hYW5tKSkKLSBsb2FkYmFsYW5jZXI6IEZpeCBiYWNrZW5kIHN0YXRlIGluIFJFU1QgQVBJIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDg0N10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwODQ3KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA3ODBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDc4MCksIFtAJiM4MjAzO21ob2ZzdGV0dGVyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vbWhvZnN0ZXR0ZXIpKQoKKipDSSBDaGFuZ2VzOioqCgotIC5naXRodWIvYWN0aW9uczogb25seSB1cGxvYWQgZmlsZXMgd2l0aCBmZWF0dXJlcy10ZXN0ZWQgcHJlZml4IChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDk3OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwOTc5KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA5NzVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDk3NSksIFtAJiM4MjAzO2Fhbm1dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hYW5tKSkKLSBBZGQgVEVTVE9XTkVSUyBmaWxlIChbIyYjODIwMzs0MDg2NF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwODY0KSwgW0AmIzgyMDM7am9lc3RyaW5nZXJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9qb2VzdHJpbmdlcikpCi0gY2k6IEFkZCBDbGVhbnVwIERpc2sgc3BhY2Ugc3RlcCBpbnRvIGNvbmZvcm1hbmNlLXJ1bnRpbWUgKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwOTc5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA5NzkpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDk3M10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwOTczKSwgW0AmIzgyMDM7cmFzdGlzbGF2c10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3Jhc3Rpc2xhdnMpKQotIGNpOiBGaXggQ0ktRnV6eiBCdWlsZCBmYWlsdXJlcyAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDA5NzldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDk3OSksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwNzI4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA3MjgpLCBbQCYjODIwMztsb21hY2tpZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2xvbWFja2llKSkKLSBjaTogUmV1c2UgY29ubmVjdGl2aXR5IHRlc3QgZmxhZ3MgaW4gcHJveHktZW1iZWRkZWQgKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQxMDc4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDEwNzgpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MTAzNl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQxMDM2KSwgW0AmIzgyMDM7am9lc3RyaW5nZXJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9qb2VzdHJpbmdlcikpCi0gZW5kcG9pbnQ6IEF2b2lkIHVubmVjZXNzYXJpbHkgbG9nZ2luZyBhIHdhcm5pbmcgZHVyaW5nIGVuZHBvaW50IGRlbGV0aW9uIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDk3OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwOTc5KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA5MjddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDkyNyksIFtAJiM4MjAzO2NocmlzdGFyYXppXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2hyaXN0YXJhemkpKQotIEZpeCBHS0UgY2x1c3RlciBjcmVhdGlvbiBmYWlsdXJlcyB3aGVuIGJyYW5jaCBuYW1lcyBleGNlZWQgNjMtYnl0ZSBsYWJlbCBsaW1pdCBieSBpbXBsZW1lbnRpbmcgYXV0b21hdGljIHRydW5jYXRpb24gd2l0aCBoYXNoLWJhc2VkIHVuaXF1ZW5lc3MgcHJlc2VydmF0aW9uLiAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDA4NDddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDg0NyksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwNzI1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA3MjUpLCBbQCYjODIwMztwaWxsYWktYXNod2luXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcGlsbGFpLWFzaHdpbikpCi0gSW1wcm92ZWQgdGVzdCBmYWlsdXJlIGF0dHJpYnV0aW9uIG9uIHN0YWJsZSBicmFuY2hlcyBieSB1c2luZyBURVNUT1dORVJTIGZpbGVzIHRvIHJvdXRlIGZhaWx1cmVzIHRvIGFwcHJvcHJpYXRlIGNvZGUgcXVhbGl0eSB0ZWFtcyByYXRoZXIgdGhhbiBnZW5lcmljIENJIGluZnJhc3RydWN0dXJlIHRlYW1zLiAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDA4NDddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDg0NyksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwNzc2XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA3NzYpLCBbQCYjODIwMztwaWxsYWktYXNod2luXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcGlsbGFpLWFzaHdpbikpCi0gaXBzZWM6IGZpeCBwcml2aWxlZ2VkIHRlc3RzIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MTA3OF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQxMDc4KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDEwMDZdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MTAwNiksIFtAJiM4MjAzO3NtYWduYW5pOTZdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9zbWFnbmFuaTk2KSkKLSB0b29scy90ZXN0b3duZXJzOiBkZS1kdXBsaWNhdGUgZXJyb3IgbG9ncyAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDA4NDddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDg0NyksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwNzc4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA3NzgpLCBbQCYjODIwMzt0a2xhdXNlcl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3RrbGF1c2VyKSkKLSB3b3JrZmxvd3MvaXBzZWM6IEZpeCBsZWFrIGRldGVjdGlvbiBmb3IgSVB2Ni1vbmx5IGluIGUyZSBkb3duZ3JhZGUgKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwOTc5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA5NzkpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDg4MV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwODgxKSwgW0AmIzgyMDM7c21hZ25hbmk5Nl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3NtYWduYW5pOTYpKQoKKipNaXNjIENoYW5nZXM6KioKCi0gLmdpdGh1Yi93b3JrZmxvd3M6IGJ1bXAgYnVpbGQtaW1hZ2VzLWJhc2UgdGltZW91dCB0byA2MCBtaW51dGVzIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDk3OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwOTc5KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA5MTldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDkxOSksIFtAJiM4MjAzO2Fhbm1dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hYW5tKSkKLSAuZ2l0aHViL3dvcmtmbG93czogcHJpbnQgb3BlbiBmaWxlIGRlc2NyaXB0b3JzIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDk3OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwOTc5KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA5NDFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDk0MSksIFtAJiM4MjAzO2Fhbm1dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hYW5tKSkKLSAuZ2l0aHViOiBmaXggcmVtb3ZhbCBvZiBhbGwgZmlsZXMgaW4gL21udCAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDA4NDddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDg0NyksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwODE4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA4MTgpLCBbQCYjODIwMzthYW5tXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYWFubSkpCi0gLmdpdGh1YjogcmVtb3ZlIGFsbCBjb250ZW50cyBvZiAvbW50IGluIGJ1aWxkIGltYWdlcyBDSSAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDA4NDddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDg0NyksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwODE0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA4MTQpLCBbQCYjODIwMzthYW5tXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYWFubSkpCi0gY2hvcmUoZGVwcyk6IHVwZGF0ZSBhY3Rpb25zL2Rvd25sb2FkLWFydGlmYWN0IGFjdGlvbiB0byB2NSAodjEuMTgpIChbIyYjODIwMzs0MTA1NV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQxMDU1KSwgW0AmIzgyMDM7Y2lsaXVtLXJlbm92YXRlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtLXJlbm92YXRlKVxbYm90XSkKLSBjaG9yZShkZXBzKTogdXBkYXRlIGFsbCBnaXRodWIgYWN0aW9uIGRlcGVuZGVuY2llcyAodjEuMTgpIChbIyYjODIwMzs0MDkwMV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwOTAxKSwgW0AmIzgyMDM7Y2lsaXVtLXJlbm92YXRlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtLXJlbm92YXRlKVxbYm90XSkKLSBjaG9yZShkZXBzKTogdXBkYXRlIGFsbCBnaXRodWIgYWN0aW9uIGRlcGVuZGVuY2llcyAodjEuMTgpIChbIyYjODIwMzs0MTA1Nl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQxMDU2KSwgW0AmIzgyMDM7Y2lsaXVtLXJlbm92YXRlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtLXJlbm92YXRlKVxbYm90XSkKLSBjaG9yZShkZXBzKTogdXBkYXRlIGFsbC1kZXBlbmRlbmNpZXMgKHYxLjE4KSAoWyMmIzgyMDM7NDA5MDBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDkwMCksIFtAJiM4MjAzO2NpbGl1bS1yZW5vdmF0ZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS1yZW5vdmF0ZSlcW2JvdF0pCi0gY2hvcmUoZGVwcyk6IHVwZGF0ZSBkZXBlbmRlbmN5IGNpbGl1bS9jaWxpdW0tY2xpIHRvIHYwLjE4LjYgKHYxLjE4KSAoWyMmIzgyMDM7NDA4OThdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDg5OCksIFtAJiM4MjAzO2NpbGl1bS1yZW5vdmF0ZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS1yZW5vdmF0ZSlcW2JvdF0pCi0gY2hvcmUoZGVwcyk6IHVwZGF0ZSBnbyB0byB2MS4yNC42ICh2MS4xOCkgKFsjJiM4MjAzOzQwOTkzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA5OTMpLCBbQCYjODIwMztjaWxpdW0tcmVub3ZhdGVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0tcmVub3ZhdGUpXFtib3RdKQotIGNob3JlKGRlcHMpOiB1cGRhdGUgc3RhYmxlIGx2aC1pbWFnZXMgKHYxLjE4KSAocGF0Y2gpIChbIyYjODIwMzs0MDg5OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwODk5KSwgW0AmIzgyMDM7Y2lsaXVtLXJlbm92YXRlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtLXJlbm92YXRlKVxbYm90XSkKLSBjaG9yZShkZXBzKTogdXBkYXRlIHN0YWJsZSBsdmgtaW1hZ2VzICh2MS4xOCkgKHBhdGNoKSAoWyMmIzgyMDM7NDEwNTRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MTA1NCksIFtAJiM4MjAzO2NpbGl1bS1yZW5vdmF0ZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS1yZW5vdmF0ZSlcW2JvdF0pCi0gY2k6IGFkZC9jaGFuZ2UgcnVubmVyIGxhYmVscyAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDA5NzldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDk3OSksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwOTcyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA5NzIpLCBbQCYjODIwMztBcnR5b3BdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9BcnR5b3ApKQotIGRhZW1vbi90ZXN0OiBleHBsaWNpdGx5IHdhaXQgZm9yIGlkZW50aXRpZXMgc3luY2hyb25pemF0aW9uIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDg0N10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwODQ3KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA4MTFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDgxMSksIFtAJiM4MjAzO2dpb3Jpbzk0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2lvcmlvOTQpKQotIGRvY3M6IFJlbW92ZSByZWZlcmVuY2VzIHRvIHYxLjE1IChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MTA3OF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQxMDc4KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDEwMzNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MTAzMyksIFtAJiM4MjAzO2pvZXN0cmluZ2VyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vam9lc3RyaW5nZXIpKQotIEZpeCBsb2FkYmFsYW5jZXIgaGFuZGxpbmcgb2YgYmFja2VuZHMgd2l0aCBDbHVzdGVySUQgc2V0IChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MTA3OF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQxMDc4KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA5NjhdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDk2OCksIFtAJiM4MjAzO2dpb3Jpbzk0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2lvcmlvOTQpKQotIEZpeCByYWNlIGNvbmRpdGlvbiBpc3N1ZXMgKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwOTc5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA5NzkpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDk0OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwOTQ5KSwgW0AmIzgyMDM7YWFubV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2Fhbm0pKQotIGZpeChkZXBzKTogdXBkYXRlIG1vZHVsZSBnaXRodWIuY29tL2RvY2tlci9kb2NrZXIgdG8gdjI4LjMuMytpbmNvbXBhdGlibGUgXFtzZWN1cml0eV0gKHYxLjE4KSAoWyMmIzgyMDM7NDA3OTNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDc5MyksIFtAJiM4MjAzO2NpbGl1bS1yZW5vdmF0ZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS1yZW5vdmF0ZSlcW2JvdF0pCi0gbG9hZGJhbGFuY2VyOiBSYWlzZSBkZWZhdWx0IHJldHJ5IGR1cmF0aW9uIHRvIDEgc2Vjb25kIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MTA3OF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQxMDc4KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA5OTddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDk5NyksIFtAJiM4MjAzO2pvYW1ha2ldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9qb2FtYWtpKSkKLSBsb2FkYmFsYW5jZXI6IFVzZSB1bmlxdWUgZm9yIEwzbjRBZGRyIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDg0N10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwODQ3KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA2MzNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDYzMyksIFtAJiM4MjAzO2pvYW1ha2ldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9qb2FtYWtpKSkKLSBNYWtlZmlsZTogRml4IG11bHRpIGNvZGVvd25lciBkZXRlY3Rpb24gKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwODQ3XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA4NDcpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDkyM10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwOTIzKSwgW0AmIzgyMDM7am9lc3RyaW5nZXJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9qb2VzdHJpbmdlcikpCi0gUmVkdWNlZCBtZW1vcnkgdXNhZ2UgYnkgcm91Z2hseSAxMCUgZm9yIGxhcmdlIEVuZHBvaW50U2xpY2VzIGJ5IHNoYXJpbmcgaWRlbnRpY2FsIG9iamVjdHMuIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MTA3OF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQxMDc4KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA5ODddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDk4NyksIFtAJiM4MjAzO2pvYW1ha2ldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9qb2FtYWtpKSkKLSB2YWx1ZXMoLnlhbWwudG1wbCk6IEFkZCBHZW5ldmUgKENsYXNzIE9wdGlvbikgdG8gZHNyRGlzcGF0Y2ggcGFyYW1hdGVyIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDg0N10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwODQ3KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA2MjVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDYyNSksIFtAJiM4MjAzO2FsYWdvdXR0ZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FsYWdvdXR0ZSkpCi0gdmVuZG9yOiBCdW1wIHRvIFN0YXRlREIgdjAuNC41IChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDk3OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwOTc5KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA3ODNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDc4MyksIFtAJiM4MjAzO2pvYW1ha2ldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9qb2FtYWtpKSkKCioqT3RoZXIgQ2hhbmdlczoqKgoKLSBjaTogcmVkdWNlIGdrZSBmYWlsdXJlcyAoWyMmIzgyMDM7NDEwNzBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MTA3MCksIFtAJiM4MjAzO2JybGJpbF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2JybGJpbCkpCi0gaW5zdGFsbDogVXBkYXRlIGltYWdlIGRpZ2VzdHMgZm9yIHYxLjE4LjAgKFsjJiM4MjAzOzQwNzgyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA3ODIpLCBbQCYjODIwMztjaWxpdW0tcmVsZWFzZS1ib3RdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0tcmVsZWFzZS1ib3QpXFtib3RdKQoKIyMjIyBEb2NrZXIgTWFuaWZlc3RzCgojIyMjIyBjaWxpdW0KCmBxdWF5LmlvL2NpbGl1bS9jaWxpdW06djEuMTguMUAmIzgyMDM7c2hhMjU2OjY1YWIxN2MwNTJkODc1OGIyYWQxNTdjZTc2NjI4NWUwNDE3MzcyMmRmNTliZGVlMWVhNmQ1ZmRhNzE0OWYwZTlgCmBxdWF5LmlvL2NpbGl1bS9jaWxpdW06c3RhYmxlQHNoYTI1Njo2NWFiMTdjMDUyZDg3NThiMmFkMTU3Y2U3NjYyODVlMDQxNzM3MjJkZjU5YmRlZTFlYTZkNWZkYTcxNDlmMGU5YAoKIyMjIyMgY2x1c3Rlcm1lc2gtYXBpc2VydmVyCgpgcXVheS5pby9jaWxpdW0vY2x1c3Rlcm1lc2gtYXBpc2VydmVyOnYxLjE4LjFAJiM4MjAzO3NoYTI1Njo4N2FiODVmMzNkYzdlODk1ZWQ2MjU3NTY0YmYxYTI1NWQxMjM5OWQ5ZThhMDc1YThmYzQwMDkxMGZmOTRjYmViYApgcXVheS5pby9jaWxpdW0vY2x1c3Rlcm1lc2gtYXBpc2VydmVyOnN0YWJsZUBzaGEyNTY6ODdhYjg1ZjMzZGM3ZTg5NWVkNjI1NzU2NGJmMWEyNTVkMTIzOTlkOWU4YTA3NWE4ZmM0MDA5MTBmZjk0Y2JlYmAKCiMjIyMjIGRvY2tlci1wbHVnaW4KCmBxdWF5LmlvL2NpbGl1bS9kb2NrZXItcGx1Z2luOnYxLjE4LjFAJiM4MjAzO3NoYTI1NjpmYjFjNmVjYjZkYzE4MGM5NzQ4OGI4ZWE0NWQ4MTI3NTIzN2RiMTRkNTBlMjJhMWVmZjNkYmZhZjlmNmY5M2YzYApgcXVheS5pby9jaWxpdW0vZG9ja2VyLXBsdWdpbjpzdGFibGVAc2hhMjU2OmZiMWM2ZWNiNmRjMTgwYzk3NDg4YjhlYTQ1ZDgxMjc1MjM3ZGIxNGQ1MGUyMmExZWZmM2RiZmFmOWY2ZjkzZjNgCgojIyMjIyBodWJibGUtcmVsYXkKCmBxdWF5LmlvL2NpbGl1bS9odWJibGUtcmVsYXk6djEuMTguMUAmIzgyMDM7c2hhMjU2OjdlMmZkNDg3NzM4N2M3ZTExMjY4OWRiN2MyYjE1M2E0ZDVjNzdkMTI1YjhkNTBkNDcyZGJlODFmYzFiMTM5YjBgCmBxdWF5LmlvL2NpbGl1bS9odWJibGUtcmVsYXk6c3RhYmxlQHNoYTI1Njo3ZTJmZDQ4NzczODdjN2UxMTI2ODlkYjdjMmIxNTNhNGQ1Yzc3ZDEyNWI4ZDUwZDQ3MmRiZTgxZmMxYjEzOWIwYAoKIyMjIyMgb3BlcmF0b3ItYWxpYmFiYWNsb3VkCgpgcXVheS5pby9jaWxpdW0vb3BlcmF0b3ItYWxpYmFiYWNsb3VkOnYxLjE4LjFAJiM4MjAzO3NoYTI1NjplMmJkYzgyMzZhY2VjMGQxZWYxNTUyYzgzMWE3Y2QyMjc3NjI0MDMxMDY2ZmJkZmFjODg0YTMxYTQxMjZhMzJhYApgcXVheS5pby9jaWxpdW0vb3BlcmF0b3ItYWxpYmFiYWNsb3VkOnN0YWJsZUBzaGEyNTY6ZTJiZGM4MjM2YWNlYzBkMWVmMTU1MmM4MzFhN2NkMjI3NzYyNDAzMTA2NmZiZGZhYzg4NGEzMWE0MTI2YTMyYWAKCiMjIyMjIG9wZXJhdG9yLWF3cwoKYHF1YXkuaW8vY2lsaXVtL29wZXJhdG9yLWF3czp2MS4xOC4xQCYjODIwMztzaGEyNTY6ZGU1MjIyMjNlY2Q3M2JjMDZiNDgwNDJmYTU5Zjc4ZjdiM2I4ZjJmZmY0ZjhmMzBhNjE2ODc1MTY3OThjNTA0MmAKYHF1YXkuaW8vY2lsaXVtL29wZXJhdG9yLWF3czpzdGFibGVAc2hhMjU2OmRlNTIyMjIzZWNkNzNiYzA2YjQ4MDQyZmE1OWY3OGY3YjNiOGYyZmZmNGY4ZjMwYTYxNjg3NTE2Nzk4YzUwNDJgCgojIyMjIyBvcGVyYXRvci1henVyZQoKYHF1YXkuaW8vY2lsaXVtL29wZXJhdG9yLWF6dXJlOnYxLjE4LjFAJiM4MjAzO3NoYTI1Njo2ODIwNThlNjczNGUzOTdlNzkzOWU5MmJiNDYzZGEzYzFiNWQ4YjdhN2NlNDA4YzNiN2E2MmFhZGI5Y2U0ZjA2YApgcXVheS5pby9jaWxpdW0vb3BlcmF0b3ItYXp1cmU6c3RhYmxlQHNoYTI1Njo2ODIwNThlNjczNGUzOTdlNzkzOWU5MmJiNDYzZGEzYzFiNWQ4YjdhN2NlNDA4YzNiN2E2MmFhZGI5Y2U0ZjA2YAoKIyMjIyMgb3BlcmF0b3ItZ2VuZXJpYwoKYHF1YXkuaW8vY2lsaXVtL29wZXJhdG9yLWdlbmVyaWM6djEuMTguMUAmIzgyMDM7c2hhMjU2Ojk3ZjQ1NTNhZmE0NDM0NjViZGZiYzFjYzQ5MjdjOTNmMTZhYzVkNzhlNGRkMjcwNjczNmU3Mzk1MzgyMjAxYmNgCmBxdWF5LmlvL2NpbGl1bS9vcGVyYXRvci1nZW5lcmljOnN0YWJsZUBzaGEyNTY6OTdmNDU1M2FmYTQ0MzQ2NWJkZmJjMWNjNDkyN2M5M2YxNmFjNWQ3OGU0ZGQyNzA2NzM2ZTczOTUzODIyMDFiY2AKCiMjIyMjIG9wZXJhdG9yCgpgcXVheS5pby9jaWxpdW0vb3BlcmF0b3I6djEuMTguMUAmIzgyMDM7c2hhMjU2OmYzYjhkOTBmOTQ1MTY3YzFhYzQzMjRhMGYwMmE5ZDM4MWY4MzA3NmQ1Y2U4MjhmYWI0NTIwMTRmOTMzNWE0N2VgCmBxdWF5LmlvL2NpbGl1bS9vcGVyYXRvcjpzdGFibGVAc2hhMjU2OmYzYjhkOTBmOTQ1MTY3YzFhYzQzMjRhMGYwMmE5ZDM4MWY4MzA3NmQ1Y2U4MjhmYWI0NTIwMTRmOTMzNWE0N2VgCgojIyMgW2B2MS4xOC4wYF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcmVsZWFzZXMvdGFnL3YxLjE4LjApOiAxLjE4LjAKCltDb21wYXJlIFNvdXJjZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vY29tcGFyZS8xLjE3LjcuLi4xLjE4LjApCgpXZSBhcmUgZXhjaXRlZCB0byBhbm5vdW5jZSB0aGUgKipbQ2lsaXVtIDEuMTguMF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcmVsZWFzZXMvdGFnL3YxLjE4LjApKiogcmVsZWFzZSEKCkEgdG90YWwgb2YgKiozMjk4IG5ldyBjb21taXRzKiogaGF2ZSBiZWVuIGNvbnRyaWJ1dGVkIHRvIHRoaXMgcmVsZWFzZSBieSBhIGdyb3dpbmcgY29tbXVuaXR5IG9mIG92ZXIgKio5NTUgZGV2ZWxvcGVycyoqIGFuZCBvdmVyICoqMjIsMDAwIEdpdEh1YiBzdGFycyoqISDirZAKClRvIGtlZXAgdXAgdG8gZGF0ZSB3aXRoIGFsbCB0aGUgbGF0ZXN0IENpbGl1bSByZWxlYXNlcywgc2VlIFtBbm5vdW5jZW1lbnRzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9kaXNjdXNzaW9ucy9jYXRlZ29yaWVzL2Fubm91bmNlbWVudHMpCgpIZXJlJ3Mgd2hhdCdzIG5ldyBpbiBbdjEuMTguMF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcmVsZWFzZXMvdGFnL3YxLjE4LjApOgoKIyMjIyDwn5qgIE5ldHdvcmtpbmcKCi0gKirimpbvuI8gTG9hZCBCYWxhbmNpbmcgUmVkZXNpZ24qKjogVGhlIHNlcnZpY2UgbG9hZC1iYWxhbmNpbmcgY29udHJvbC1wbGFuZSBpbiB0aGUgQ2lsaXVtIGFnZW50IGhhcyBiZWVuIHJlZGVzaWduZWQgdG8gcmVkdWNlIG1lbW9yeSB1c2FnZSBhbmQgaW1wcm92ZSBmdXR1cmUgZXh0ZW5zaWJpbGl0eSBvZiBsb2FkLWJhbGFuY2luZyBmZWF0dXJlcyAoW2NpbGl1bS9jaWxpdW0jMzg0NjldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3B1bGwvMzg0NjkpLCBbQCYjODIwMztqb2FtYWtpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vam9hbWFraSkpCi0gKirwn5SMIFZpcnR1YWwgTmV0d29yayBEZXZpY2VzKio6IEFkZGVkIHN1cHBvcnQgZm9yIG5ldyB2aXJ0dWFsIG5ldHdvcmsgZGV2aWNlIGNvbmZpZ3VyYXRpb25zIHN1Y2ggYXMgVlhMQU4gaW4gSVBzZWMgKFZpbkUpIGFuZCBJUElQIHR1bm5lbHMgKFtjaWxpdW0vY2lsaXVtIzM3NzIzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzM3NzIzKSwgW0AmIzgyMDM7bGRlbG9zc2FdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9sZGVsb3NzYSk7IFtjaWxpdW0vY2lsaXVtIzM3MzQ2XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzM3MzQ2KSwgW0AmIzgyMDM7Z3l1dGFlYl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2d5dXRhZWIpKQotICoq4pOC77iPIE11bHRpcGxlIEVncmVzcyBHYXRld2F5cyoqOiBFZ3Jlc3MgR2F0ZXdheXMgcG9saWNpZXMgY2FuIG5vdyBkaXJlY3QgdHJhZmZpYyB0b3dhcmRzIG11bHRpcGxlIGdhdGV3YXkgbm9kZXMgKFtjaWxpdW0vY2lsaXVtIzM5MzA0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzM5MzA0KSwgW0AmIzgyMDM7Y2FybG9zLWFiYWRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jYXJsb3MtYWJhZCkpCi0gKirwn5qmIEluZ3Jlc3MgUmF0ZSBMaW1pdGluZyoqOiBUaGUgYmFuZHdpZHRoIG1hbmFnZXIgbm93IHN1cHBvcnRzIGluZ3Jlc3MgcmF0ZSBsaW1pdGluZyAoW2NpbGl1bS9jaWxpdW0jMzYzNTFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3B1bGwvMzYzNTEpLCBbQCYjODIwMztsMWIwa10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2wxYjBrKSkKLSAqKvCfk6IgTXVsdGktRGV2aWNlIEwyIEFubm91bmNlbWVudHMqKjogVGhlIEwyIHBvZCBhbm5vdW5jZW1lbnQgZmVhdHVyZSBub3cgc3VwcG9ydHMgbXVsdGlwbGUgZGV2aWNlcyAoW2NpbGl1bS9jaWxpdW0jMzgxOThdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3B1bGwvMzgxOTgpLCBbQCYjODIwMztkeWxhbmRyZWltZXJpbmtdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9keWxhbmRyZWltZXJpbmspKQotICoq8J+PoiBOZWlnaGJvciBTdWJzeXN0ZW0gUmV3b3JrKio6IFRoZSBuZWlnaGJvciBzdWJzeXN0ZW0gd2FzIG1hZGUgbW9yZSByZXNpbGllbnQgdGhyb3VnaCBhIG5ldyBzeXN0ZW0gdGhhdCByZWNvbmNpbGVzIGRlc2lyZWQgbmVpZ2hib3IgZW50cmllcyB3aXRoIHRoZSBrZXJuZWwgc3RhdGUgKFtjaWxpdW0vY2lsaXVtIzM5OTg3XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzM5OTg3KSwgW0AmIzgyMDM7ZHlsYW5kcmVpbWVyaW5rXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZHlsYW5kcmVpbWVyaW5rKSkKCiMjIyMg8J+MkCBJUHY2CgotICoq8J+ahyBUdW5uZWxpbmcgVW5kZXJsYXkqKjogVGhlIHR1bm5lbGluZyBkYXRhcGF0aCBtb2RlIG5vdyBzdXBwb3J0cyB1c2luZyBhbiBJUHY2IG5ldHdvcmsgdW5kZXJsYXksIGluY2x1ZGluZyB3aGVuIGNvbmZpZ3VyZWQgd2l0aCBJUHNlYyB0cmFuc3BhcmVudCBlbmNyeXB0aW9uIChbY2lsaXVtL2NpbGl1bSMzODI5Nl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zODI5NiksIFtjaWxpdW0vY2lsaXVtIzM5NDk3XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzM5NDk3KSwgW0AmIzgyMDM7cGNoYWlnbm9dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9wY2hhaWdubykpCi0gKirwn5KsIEt1YmUgUHJveHkgUmVwbGFjZW1lbnQqKjogQ2lsaXVtIG5vdyBpbXBsZW1lbnRzIHNlcnZpY2UgdHJhbnNsYXRpb24gd2hlbiBydW5uaW5nIG9uIGFuIElQdjYgdW5kZXJsYXkgKFtjaWxpdW0vY2lsaXVtIzM5MDc0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzM5MDc0KSwgW0AmIzgyMDM7cGNoYWlnbm9dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9wY2hhaWdubykpCi0gKirwn5OLIERlbGVnYXRlZCBJUEFNKio6IFdoZW4gZGVsZWdhdGluZyBJUCBhZGRyZXNzIG1hbmFnZW1lbnQgdG8gYSB0aGlyZCBwYXJ0eSBwbHVnaW4sIENpbGl1bSBub3cgY29uZmlndXJlcyBJUHY2IHJvdXRlcyBmb3IgY29ubmVjdGl2aXR5IGlmIHRoZSBwbHVnaW4gc3VwcG9ydHMgSVB2NiAoW2NpbGl1bS9jaWxpdW0jMzgyNDldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3B1bGwvMzgyNDkpLCBbQCYjODIwMztjYW9ydWktaW9dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jYW9ydWktaW8pLCBbQCYjODIwMztrYWRldnVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9rYWRldnUpKQotICoq8J+TpiBJUCBGcmFnbWVudCBTdXBwb3J0Kio6IENpbGl1bSBub3cgcHJvY2Vzc2VzIG9yZGVyZWQgSVB2NiBmcmFnbWVudHMgdG8gYXBwbHkgcG9saWN5IGFuZCByb3V0aW5nIGZ1bmN0aW9uYWxpdHkgKFtjaWxpdW0vY2lsaXVtIzM4MTEwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzM4MTEwKSwgW0AmIzgyMDM7Z2VudG9vLXJvb3RdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nZW50b28tcm9vdCkpCi0gKirwn5qqIEVncmVzcyBnYXRld2F5IHBvbGljaWVzKiogY2FuIG5vdyBtYXRjaCBJUHY2IGFkZHJlc3MgcmFuZ2VzIChbY2lsaXVtL2NpbGl1bSMzODQ1Ml0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zODQ1MiksIFtAJiM4MjAzO3JnbzNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yZ28zKSkKCiMjIyMg8J+boe+4jyBQb2xpY3kgJiBPYnNlcnZhYmlsaXR5CgotICoq8J+Pt++4jyBQb2xpY3kgTmFtZXMgaW4gSHViYmxlLUNMSSoqOiBTaG93IHRoZSBuYW1lcyBvZiAoQylDTlBzIHRoYXQgYWxsb3dlZCBvciBkZW5pZWQgdHJhZmZpYyB3aGVuIG1vbml0b3JpbmcgZmxvd3MgaW4gSHViYmxlIChbY2lsaXVtL2NpbGl1bSMzOTQ1M10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zOTQ1MyksIFtAJiM4MjAzO2FudG9uaXBwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYW50b25pcHApKQotICoq8J+TnSBQb2xpY3kgTG9nIEZpZWxkcyoqOiBBIG5ldyBmcmVlLXRleHQgbG9nIGZpZWxkIGlzIGFkZGVkIHRvIHBvbGljaWVzLCB3aGljaCBpcyBleHBvc2VkIGluIEh1YmJsZSBmbG93cyBmb3IgZWFzeSBjb3JyZWxhdGlvbiBhbmQgc2VhcmNoaW5nIChbY2lsaXVtL2NpbGl1bSMzOTkwMl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zOTkwMiksIFtAJiM4MjAzO3NxdWVlZF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3NxdWVlZCkpCi0gKirwn5uw77iPIEVuY2Fwc3VsYXRlZCBUcmFmZmljIERlY29kaW5nKio6IEh1YmJsZSBkZWNvZGVzIGVuY2Fwc3VsYXRlZCB0cmFmZmljIGZvciBkZWVwZXIgaW50cm9zcGVjdGlvbiBpbnRvIHRyYWZmaWMgZmxvd3MgKFtjaWxpdW0vY2lsaXVtIzM3NjM0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzM3NjM0KSwgW0AmIzgyMDM7a2F3b3J1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20va2F3b3J1KSkKLSAqKvCfj7AgQ2x1c3Rlck1lc2ggUG9saWN5IFJlc3RyaWN0aW9uKio6IEEgbmV3IG9wdGlvbiBhbGxvd3MgdGhlICoqY2x1c3RlcioqIGVudGl0eSB0byBhcHBseSBvbmx5IHRvIHRoZSBsb2NhbCBjbHVzdGVyIGluIENsdXN0ZXJNZXNoIGVudmlyb25tZW50IChbY2lsaXVtL2NpbGl1bSMzOTMzOF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zOTMzOCksIFtAJiM4MjAzO01yRnJlZXplZXhdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9NckZyZWV6ZWV4KSkKLSAqKuKcqCBFbmhhbmNlZCBQb2xpY3kgRGFzaGJvYXJkKio6IFRoZSBQb2xpY3kgc2VjdGlvbiBvZiB0aGUgQ2lsaXVtIEdyYWZhbmEgZGFzaGJvYXJkIGhhcyBiZWVuIGltcHJvdmVkIHRvIHNob3cgbW9yZSByZWxldmFudCBncmFwaHMsIGluY2x1ZGluZyBwb2xpY3kgZHJvcHMgaW4gYm90aCBkaXJlY3Rpb25zIChbY2lsaXVtL2NpbGl1bSMzNjQ5Ml0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zNjQ5MiksIFtjaWxpdW0vY2lsaXVtIzM3NDQ1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzM3NDQ1KSwgW0AmIzgyMDM7c3F1ZWVkXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vc3F1ZWVkKSkKCiMjIyMg8J+MhSBQZXJmb3JtYW5jZQoKLSAqKvCfk4ogU2NhbGUgVGVzdCBSZXN1bHRzKio6IENpbGl1bSBpbXBsZW1lbnRzIHBvbGljaWVzIGFuZCBzZXJ2aWNlcyB1cCB0byA0NSUgZmFzdGVyIGluIGhpZ2hlciBzY2FsZSBlbnZpcm9ubWVudHMgKFZhcmlvdXM7IFtAJiM4MjAzO21hcnNlZWxdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9tYXJzZWVsKSwgW2NpbGl1bS9jaWxpdW0jNDAyMjddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3B1bGwvNDAyMjcpKQotICoq8J+TpiBJbWFnZSBTaXplIFJlZHVjdGlvbioqOiBEb2NrZXIgaW1hZ2Ugc2l6ZXMgYXJlIHJlZHVjZWQgYnkgMzIlIG9uIGFybTY0IGFyY2hpdGVjdHVyZSBpbWFnZXMgKFtjaWxpdW0vY2lsaXVtIzQwMDA1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzQwMDA1KSwgW0AmIzgyMDM7bWFyc2VlbF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL21hcnNlZWwpKQotICoq4pqhIEltcHJvdmVkIFBvbGljeSBQZXJmb3JtYW5jZSoqOiBUaGUgRE5TIHByb3h5IGNhbiBwcm9jZXNzIGxhcmdlIG51bWJlcnMgb2YgSVBzIGZhc3RlciwgYW5kIHRoZSBFbmRwb2ludFNlbGVjdG9yIG1hdGNoIGltcGxlbWVudGF0aW9uIGhhcyBiZWVuIG9wdGltaXplZCAoW2NpbGl1bS9jaWxpdW0jMzkzNDBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3B1bGwvMzkzNDApLCBbQCYjODIwMztzcXVlZWRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9zcXVlZWQpOyBbY2lsaXVtL2NpbGl1bSM0MDQxNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC80MDQxNCksIFtAJiM4MjAzO21hcnNlZWxdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9tYXJzZWVsKSkKLSAqKvCfqp4gRW5kcG9pbnRTbGljZSBNaXJyb3JpbmcgZm9yIE11bHRpLUNsdXN0ZXIgU2VydmljZXMqKjogQ2x1c3Rlcm1lc2ggbWlycm9ycyBFbmRwb2ludFNsaWNlIGZyb20gdGhlIGxvY2FsIGNsdXN0ZXIgaW5zdGVhZCBvZiBjb3B5aW5nIHRoZSBTZXJ2aWNlIHNlbGVjdG9ycyB3aGVuIHVzaW5nIHRoZSBNQ1MtQVBJIGNvbnRyb2xsZXIgKFtjaWxpdW0vY2lsaXVtIzM4NTk2XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzM4NTk2KSwgW0AmIzgyMDM7TXJGcmVlemVleF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL01yRnJlZXplZXgpKQotICoq8J+MkCBLVlN0b3JlTWVzaCBPcHRpbWl6YXRpb24qKjogQ3Jvc3MtY2x1c3RlciBzdGF0ZSBkaXN0cmlidXRpb24gaXMgb3B0aW1pemVkIGJ5IG9ubHkgc3luY2hyb25pemluZyBpZGVudGl0aWVzIGtleWVkIGJ5IElELCBub3QgYnkgdmFsdWUgKFtjaWxpdW0vY2lsaXVtIzM2NDcxXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzM2NDcxKSwgW0AmIzgyMDM7SGFkcmllblBhdHRlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vSGFkcmllblBhdHRlKSkKLSAqKvCfp6AgRWdyZXNzIEdhdGV3YXkgUHJvY2Vzc2luZyoqOiBFZ3Jlc3MgZ2F0ZXdheSBwb2xpY3kgcHJvY2Vzc2luZyBpcyBzaWduaWZpY2FudGx5IGltcHJvdmVkIHdoZW4gbWF0Y2hpbmcgYSBsYXJnZSBudW1iZXIgb2YgcG9kcyAoW2NpbGl1bS9jaWxpdW0jMzc3MTRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3B1bGwvMzc3MTQpLCBbQCYjODIwMztnaW9yaW85NF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dpb3Jpbzk0KSkKLSAqKvCfl5HvuI8gT3B0aW1pemVkIEdhcmJhZ2UgQ29sbGVjdGlvbiBmb3IgQ29ubmVjdGlvbiBUcmFja2luZyoqOiBDaWxpdW0gbGV2ZXJhZ2VzIGJhdGNoZWQgaXRlcmF0b3JzIGZvciBDVE1hcCBHQyAoW2NpbGl1bS9jaWxpdW0jMzYyODhdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3B1bGwvMzYyODgpLCBbQCYjODIwMzt0b21teXAxY2tsZXNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS90b21teXAxY2tsZXMpKQoKIyMjIyDimpnvuI8gT3BlcmF0aW9ucwoKLSAqKvCfk4ggQVBJIFNlcnZlciBDb25uZWN0aW9ucyBhdCBTY2FsZSoqOiBJbXByb3ZlIGt1YmUtYXBpc2VydmVyIGNvbm5lY3Rpb25zIGJlaGF2aW9yIGF0IHNjYWxlIHRocm91Z2ggZmFpbG92ZXIgYW5kIHNldHRpbmcgYmV0dGVyIGppdHRlciBhbmQgYmFja29mZiBjb25maWd1cmF0aW9ucyAoW2NpbGl1bS9jaWxpdW0jMzc2MDFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3B1bGwvMzc2MDEpLCBbQCYjODIwMzthZGl0aWdoYWddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hZGl0aWdoYWcpOyBbY2lsaXVtL2NpbGl1bSMzODAzMV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zODAzMSksIFtAJiM4MjAzO29yYW5nZTMwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vb3JhbmdlMzApOyBbY2lsaXVtL2NpbGl1bSMzNjY0OF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zNjY0OCksIFtAJiM4MjAzO3dlZGFseV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3dlZGFseSkpCi0gKirwn5SEIENvbmZpZ01hcCBTeW5jaHJvbml6YXRpb24qKjogTmV3IG9wdGlvbiB0byBhdXRvbWF0aWNhbGx5IHN5bmNocm9uaXplIENvbmZpZ01hcCBjaGFuZ2VzIGludG8gdGhlIGFnZW50IGFuZCByZXBvcnQgbWV0cmljcyBmb3Igd2hlbiB0aGUgZWZmZWN0aXZlIGNvbmZpZ3VyYXRpb24gaXMgZGlmZmVyZW50IGZyb20gdGhlIGRlc2lyZWQgY29uZmlndXJhdGlvbiAoW2NpbGl1bS9jaWxpdW0jMzY1MTBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3B1bGwvMzY1MTApLCBbQCYjODIwMztvdmlkaXV0aXJsYV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL292aWRpdXRpcmxhKSkKLSAqKvCfjpMgQ1JEIFByb21vdGlvbiB0byBTdGFibGUqKjogUHJvbW90ZSAqKkNpbGl1bUNJRFJHcm91cCoqLCAqKkNpbGl1bUxvYWRCYWxhbmNlcklQUG9vbCoqIGFuZCBhbGwgKipCR1AqKiBDUkRzIHRvIHN0YWJsZSBBUEkgKFtjaWxpdW0vY2lsaXVtIzM4OTQwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzM4OTQwKSwgW0AmIzgyMDM7Y2hyaXN0YXJhemldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaHJpc3RhcmF6aSk7IFtjaWxpdW0vY2lsaXVtIzM5MDkwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzM5MDkwKSwgW0AmIzgyMDM7cGlwcG9sbzg0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcGlwcG9sbzg0KTsgW2NpbGl1bS9jaWxpdW0jMzc3NjVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3B1bGwvMzc3NjUpLCBbQCYjODIwMztyYXN0aXNsYXZzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcmFzdGlzbGF2cykpCi0gKirim5QgTm9kZSBUYWludHMgSGFuZGxpbmcqKjogVGhlIGNpbGl1bS1vcGVyYXRvciBEZXBsb3ltZW50IHVzZXMgYSBuZXcgZGVmYXVsdCBzZXQgb2YgdGFpbnRzIHdoaWNoIGF2b2lkcyBkZXBsb3lpbmcgdG8gYSBkcmFpbmVkIG5vZGUgKFtjaWxpdW0vY2lsaXVtIzQwMTM3XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzQwMTM3KSwgW0AmIzgyMDM7TXVyYXRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9NdXJhdCkgUGFybGFraXNpaykKLSAqKjp3b29kOiBNaWdyYXRlIHRvIFNsb2cqKjogQ2lsaXVtIG5vdyB1c2VzIHNsb2cgYXMgbG9nIGxpYnJhcnkgZm9yIGFsbCBjb21wb25lbnRzIChbY2lsaXVtL2NpbGl1bSMzOTY2NF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zOTY2NCksIFtAJiM4MjAzO2Fhbm1dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hYW5tKSkKLSAqKvCflKcgQ2lsaXVtIGRlcGVuZGVuY2llcyoqIHdlcmUgdXBkYXRlZCB0byBLdWJlcm5ldGVzIHYxLjMzLCBFbnZveSB2MS4zNCwgTExWTSAxOS4xLCBhbmQgQ05JIHYxLjEgKFtjaWxpdW0vY2lsaXVtIzM5MTI0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzM5MTI0KSwgW2NpbGl1bS9jaWxpdW0jNDAxNzVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3B1bGwvNDAxNzUpLCBbY2lsaXVtL2NpbGl1bSMzOTYzMl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zOTYzMiksIFtAJiM4MjAzO3NheWJvcmFzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vc2F5Ym9yYXMpOyBbY2lsaXVtL2NpbGl1bSMzODg2OF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zODg2OCksIFtAJiM4MjAzO3NxdWVlZF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3NxdWVlZCkpCi0gKirwn5CnIE1pbmltdW0gTGludXggUmVxdWlyZW1lbnRzKio6IFRoZSBtaW5pbXVtIGtlcm5lbCB2ZXJzaW9uIGZvciB0aGlzIHJlbGVhc2Ugc2VyaWVzIGlzIExpbnV4IHY1LjEwIG9yIHNpbWlsYXIsIHN1Y2ggYXMgUkhFTCA4LjYgKFtjaWxpdW0vY2lsaXVtIzM4MzA4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzM4MzA4KSwgW0AmIzgyMDM7anVsaWFud2llZG1hbm5dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9qdWxpYW53aWVkbWFubikpCgojIyMjIPCflbjvuI8gU2VydmljZSBNZXNoICYgR2F0ZXdheSBBUEkKCi0gKirim6nvuI8gR2F0ZXdheSBBUEkgdjEuMy4wKio6IEdhdGV3YXkgQVBJIHN1cHBvcnQgaXMgYnVtcGVkIHRvIHYxLjMuMCAoW2NpbGl1bS9jaWxpdW0jMzk1OTBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3B1bGwvMzk1OTApLCBbQCYjODIwMztzYXlib3Jhc10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3NheWJvcmFzKSkKLSAqKvCflJcgSW1wcm92ZWQgR2F0ZXdheUNsYXNzIENvbmZpZ3VyYXRpb24qKjogVGhlIG5ldyBDaWxpdW1HYXRld2F5Q2xhc3NDb25maWcgb2JqZWN0IGFkZHMgc2VydmljZSB0eXBlIHZhbGlkYXRpb24gYWxsb3dzIHRoZSBjb25maWd1cmF0aW9uIG9mIGV4dHJhIHNldHRpbmdzIG9uIGEgcGVyLUdhdGV3YXlDbGFzcyBsZXZlbDogTG9hZEJhbGFuY2VyU291cmNlUmFuZ2VzUG9saWN5LCBQYXJhbWV0ZXJzUmVmIGZpZWxkcy4gVGhpcyBhbGxvd3MgQ2lsaXVtIHRvIHJlY29uY2lsZSBtdWx0aXBsZSBHYXRld2F5Q2xhc3NlcyB3aXRoIGRpZmZlcmVudCBjb25maWd1cmF0aW9ucyAoW2NpbGl1bS9jaWxpdW0jMzc3OTJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3B1bGwvMzc3OTIpLCBbY2lsaXVtL2NpbGl1bSMzNzQwMl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zNzQwMiksIFtjaWxpdW0vY2lsaXVtIzQwMTM4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzQwMTM4KSwgW0AmIzgyMDM7c2F5Ym9yYXNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9zYXlib3JhcykpCi0gKirwn5qPIE11bHRpcGxlIEhUVFBSb3V0ZXMqKjogR0FNTUEgcmVjb25jaWxlciBub3cgc3VwcG9ydHMgYXR0YWNoaW5nIG11bHRpcGxlIEhUVFBSb3V0ZXMgdG8gdGhlIHNhbWUgU2VydmljZSAoW2NpbGl1bS9jaWxpdW0jMzk5MjJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3B1bGwvMzk5MjIpLCBbQCYjODIwMzt5b3VuZ25pY2tdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS95b3VuZ25pY2spKQotICoq8J+qhCBSb3V0ZSBDaGFuZ2VzIFJlY29uY2lsaWF0aW9uKio6IFJlY29uY2lsZSBHYXRld2F5IEFQSSBiYXNlZCBvbiBhbGwgY2hhbmdlcyB0byByb3V0ZXMuIFRoaXMgYWxsb3dzIGxhYmVsIHVwZGF0ZXMgdG8gdHJpZ2dlciByZWNvbmNpbGlhdGlvbiBjb3JyZWN0bHksIGFtb25nc3Qgb3RoZXIgdGhpbmdzIChbY2lsaXVtL2NpbGl1bSMzNzc5OF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zNzc5OCksIFtAJiM4MjAzO3NheWJvcmFzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vc2F5Ym9yYXMpKQoKIyMjIyDwn4+377iPIElQIEFkZHJlc3MgTWFuYWdlbWVudAoKLSAqKuKYge+4jyBBV1MgUHJlZml4IERlbGVnYXRpb24qKjogUHJlZml4IGRlbGVnYXRpb24gb24gQVdTIGJhcmUgbWV0YWwgaW5zdGFuY2VzIGlzIG5vdyBzdXBwb3J0ZWQgbmF0aXZlbHkgaW4gQ2lsaXVtJ3MgQVdTIEVOSSBJUEFNIG1vZGUgKFtjaWxpdW0vY2lsaXVtIzM5Njc4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzM5Njc4KSwgW0AmIzgyMDM7NDFrc10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tLzQxa3MpKQotICoq8J+PrCBNdWx0aS1Qb29sIElQQU0gd2l0aCBLVlN0b3JlKio6IEFkZCBzdXBwb3J0IGZvciBNdWx0aS1Qb29sIElQQU0gaW4gZXh0ZXJuYWwgS1ZzdG9yZSBtb2RlIChbY2lsaXVtL2NpbGl1bSMzOTYzOF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zOTYzOCksIFtAJiM4MjAzO3BpcHBvbG84NF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3BpcHBvbG84NCkpCi0gKirwn5SQIE11bHRpLVBvb2wgSVBBTSB3aXRoIElQU2VjKio6IEFkZCBzdXBwb3J0IGZvciBNdWx0aS1Qb29sIElQQU0gbW9kZSB3aXRoIElQU2VjIHRyYW5zcGFyZW50IGVuY3J5cHRpb24gaW4gdHVubmVsIHJvdXRpbmcgbW9kZSAoW2NpbGl1bS9jaWxpdW0jMzk0NDJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3B1bGwvMzk0NDIpLCBbQCYjODIwMztwaXBwb2xvODRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9waXBwb2xvODQpKQotICoq4oaq77iPIE11bHRpLVBvb2wgVHVubmVsIFJvdXRpbmcqKjogQWRkIHN1cHBvcnQgZm9yIHR1bm5lbCByb3V0aW5nIGluIG11bHRpLXBvb2wgSVBBTSBtb2RlIChbY2lsaXVtL2NpbGl1bSMzODQ4M10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zODQ4MyksIFtAJiM4MjAzO3BpcHBvbG84NF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3BpcHBvbG84NCkpCgojIyMjIPCfm6PvuI8gQkdQCgotICoq8J+ThyBSb3V0ZSBBZ2dyZWdhdGlvbioqOiBBZGQgc3VwcG9ydCBmb3IgQkdQIHJvdXRlIGFnZ3JlZ2F0aW9uIGluIHRoZSBjb250cm9sIHBsYW5lIChbY2lsaXVtL2NpbGl1bSMzNzI3NV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zNzI3NSksIFtAJiM4MjAzO3JvbWFuc3BiODBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yb21hbnNwYjgwKSkKLSAqKvCfjq8gT3ZlcmxhcHBpbmcgU2VsZWN0b3IgTWF0Y2hlcyoqOiBTdXBwb3J0IG92ZXJsYXBwaW5nIHNlbGVjdG9yIG1hdGNoZXMgaW4gKipDaWxpdW1CR1BBZHZlcnRpc2VtZW50KiogcmVzb3VyY2VzIChbY2lsaXVtL2NpbGl1bSMzNjQxNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zNjQxNCksIFtAJiM4MjAzO2Rzd2FmZm9yZGN3XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZHN3YWZmb3JkY3cpKQotICoq8J+GlCBOZXcgUm91dGVyIElEIGdlbmVyYXRpb24gbW9kZXMqKjogR2VuZXJhdGUgcm91dGVyLWlkIGJhc2VkIG9uIE1BQyBhZGRyZXNzZXMsIG9yIGZyb20gYW4gSVAgYWRkcmVzcyBwb29sIChbY2lsaXVtL2NpbGl1bSMzNjQ1MV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zNjQ1MSksIFtAJiM4MjAzO3l1c2hveWFtYWd1Y2hpXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20veXVzaG95YW1hZ3VjaGkpOyBbY2lsaXVtL2NpbGl1bSMzODMwMF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zODMwMCksIFtAJiM4MjAzO2xpeWlodWFuZ10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2xpeWlodWFuZykpCgojIyMjIPCfp5HigI3wn5K7IERldmVsb3BtZW50IEV4cGVyaWVuY2UKCi0gKirwn6eqIFRlc3QgYXR0cmlidXRpb24qKjogSWRlbnRpZnkgb3duZXJzIG9mIHRlc3QgaW4gR2l0SHViIHdvcmtmbG93IHJlc3VsdHMgdG8gbWFrZSBpdCBlYXNpZXIgdG8gY29ubmVjdCB3aXRoIG90aGVyIGRldmVsb3BlcnMgb24gdHJpY2t5IHByb2JsZW1zIChbY2lsaXVtL2NpbGl1bSMzNzAyN10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zNzAyNyksIFtAJiM4MjAzO0pvZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL0pvZSkgU3RyaW5nZXIpCi0gKirwn5uP77iPIFBvbGljeSBSRVNUIEFQSSoqOiBUaGUgQ2lsaXVtIHBvbGljeSBBUEkgZXhwb3NlZCBvdmVyIGEgbG9jYWwgdW5peCBzb2NrZXQgaXMgZGVwcmVjYXRlZC4gVGhlIG90aGVyIG1lY2hhbmlzbXMgdG8gY29uZmlndXJlIHBvbGljeSB2aWEgS3ViZXJuZXRlcyByZXNvdXJjZXMgb3IgdGhlIGxvY2FsIGZpbGVzeXN0ZW0gYXJlIHByZWZlcnJlZCAoW2NpbGl1bS9jaWxpdW0jNDAyMTJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3B1bGwvNDAyMTIpLCBbQCYjODIwMztzcXVlZWRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9zcXVlZWQpKQotICoq8J+Pl++4jyBGZWF0dXJlIERlcHJlY2F0aW9uKio6IERlcHJlY2F0ZSB1bmRlcnVzZWQgZmVhdHVyZXMgbGlrZSBDdXN0b20gQ2FsbHMsIFJlY29yZGVyIEFQSSBhbmQgRXh0ZXJuYWwgV29ya2xvYWRzIChbY2lsaXVtL2NpbGl1bSMzODQ4MF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcHVsbC8zODQ4MCksIFtjaWxpdW0vY2lsaXVtIzM5NjQyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9wdWxsLzM5NjQyKSwgW2NpbGl1bS9jaWxpdW0jMzc0MThdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3B1bGwvMzc0MTgpLCBbQCYjODIwMzticmJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9icmIpKQoKIyMjIyDwn4+iIENvbW11bml0eQoKLSAqKuKdpO+4jyBQcm9kdWN0aW9uIENhc2UgU3R1ZGllcyoqOiBNYW55IGVuZC11c2VycyBoYXZlIHN0ZXBwZWQgZm9yd2FyZCB0byB0ZWxsIHRoZWlyIHN0b3JpZXMgcnVubmluZyBDaWxpdW0gaW4gcHJvZHVjdGlvbi4gSWYgeW91ciBjb21wYW55IHdhbnRzIHRvIHN1Ym1pdCB0aGVpciBjYXNlIHN0dWRpZXMgbGV0IHVzIGtub3cuIFdlIHdvdWxkIGxvdmUgdG8gaGVhciB5b3VyIGZlZWRiYWNrIQogIC0gW0J5dGVEYW5jZV0oaHR0cHM6Ly93d3cueW91dHViZS5jb20vd2F0Y2g/dj1jS1BXNjdEN1gxMCksIFtDYW5vcHVzIE5ldHdvcmtzXShodHRwczovL3d3dy55b3V0dWJlLmNvbS93YXRjaD92PVlYbDl4dUl4eWxZKSwgW0Nvcm5lciBCYW5jYV0oaHR0cHM6Ly93d3cueW91dHViZS5jb20vd2F0Y2g/dj1IVlBLU2VmYXpsNCksIFtEQiBTY2hlbmtlcl0oaHR0cHM6Ly93d3cuY25jZi5pby9jYXNlLXN0dWRpZXMvZGItc2NoZW5rZXIvKSwgW2VCYXldKGh0dHBzOi8vd3d3LnlvdXR1YmUuY29tL3dhdGNoP3Y9eEVhNEtGZjVGelkpLCBbRUNDT10oaHR0cHM6Ly93d3cuY25jZi5pby9jYXNlLXN0dWRpZXMvZWNjby8pLCBbRy1SZXNlYXJjaF0oaHR0cHM6Ly93d3cueW91dHViZS5jb20vd2F0Y2g/dj1ralNGTjM0ZFJPUSksIFtTb2NpYWwgTmV0d29yayBDb21wYW55XShodHRwczovL2NpbGl1bS5pby9ibG9nLzIwMjUvMDQvMTUvdGV0cmFnb24tc29jaWFsLW5ldHdvcmtpbmctdXNlci1zdG9yeS8pLCBhbmQgW1ByZWZlcnJlZCBOZXR3b3Jrc10oaHR0cHM6Ly93d3cueW91dHViZS5jb20vd2F0Y2g/dj1uN19JNHp1NmZfTSkKLSAqKvCfh6zwn4enIExvbmRvbiBFdmVudHMqKjogVGhlIGNvbW11bml0eSBnYXRoZXJlZCBhdCBbQ2lsaXVtQ29uXShodHRwczovL2V2ZW50cy5saW51eGZvdW5kYXRpb24ub3JnL2t1YmVjb24tY2xvdWRuYXRpdmVjb24tZXVyb3BlL2NvLWxvY2F0ZWQtZXZlbnRzL2NpbGl1bWNvbi8pIGFuZCB0aGUgW0NpbGl1bSBEZXZlbG9wZXIgU3VtbWl0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2Rldi1zdW1taXRzL3RyZWUvbWFpbi8yMDI1LUVVKSBpbiBMb25kb24KLSAqKvCfh7rwn4e4IEF0bGFudGEgRXZlbnRzKio6IE1lZXQgdXMgYXQgdGhlIHVwY29taW5nIFtDaWxpdW1Db25dKGh0dHBzOi8vZXZlbnRzLmxpbnV4Zm91bmRhdGlvbi5vcmcva3ViZWNvbi1jbG91ZG5hdGl2ZWNvbi1ub3J0aC1hbWVyaWNhL2NvLWxvY2F0ZWQtZXZlbnRzL2NpbGl1bWNvbi8pIGFuZCBDaWxpdW0gRGV2ZWxvcGVycyBTdW1taXQgaW4gQXRsYW50YSwgR2VvcmdpYQotICoq8J+RpSBTSUcgQ29tbXVuaXR5IE1lZXRpbmdzKio6IFtTSUcgQ29tbXVuaXR5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NvbW11bml0eS90cmVlL21haW4vc2lnLWNvbW11bml0eSkgbm93IG1lZXRzIGV2ZXJ5IGZpcnN0IGFuZCB0aGlyZCBUaHVyc2RheSB0byBmb3N0ZXIsIGdyb3csIGFuZCBzdXN0YWluIHRoZSBDaWxpdW0gb3BlbiBzb3VyY2UgY29tbXVuaXR5CgojIyMjIPCfk5QgRnVsbCBDSEFOR0VMT0cKCi0gRnVsbCBDSEFOR0VMT0cubWQgY2FuIGJlIGZvdW5kIFtoZXJlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9ibG9iL3YxLjE4LjAvQ0hBTkdFTE9HLm1kKS4KCkFuZCBmaW5hbGx5LCB3ZSB3b3VsZCBsaWtlIHRvIHRoYW5rIHlvdSB0byBhbGwgY29udHJpYnV0b3JzIG9mIENpbGl1bSB0aGF0IGhlbHBlZCBkaXJlY3RseSBhbmQgaW5kaXJlY3RseSB3aXRoIHRoZSBwcm9qZWN0LiBUaGUgc3VjY2VzcyBvZiBDaWxpdW0gY291bGQgbm90IGhhcHBlbiB3aXRob3V0IGFsbCBvZiB5b3UuIOKdpO+4jyA6cGVvcGxlXF9ob2xkaW5nXF9oYW5kczogIOKdpO+4jwoKIyMjIFtgdjEuMTcuN2BdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL3JlbGVhc2VzL3RhZy92MS4xNy43KTogMS4xNy43CgpbQ29tcGFyZSBTb3VyY2VdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2NvbXBhcmUvMS4xNy42Li4uMS4xNy43KQoKIyMgU3VtbWFyeSBvZiBDaGFuZ2VzCgoqKk1pbm9yIENoYW5nZXM6KioKCi0gQWRkIGBrZXJuZWxfdmVyc2lvbmAsIGBlbmRwb2ludF9yb3V0ZXNfZW5hYmxlZGAsIGBzdHJpY3RfbW9kZV9lbmFibGVkYCBhbmQgYGt1YmVybmV0ZXNfdmVyc2lvbmAgZmVhdHVyZSBtZXRyaWNzLiAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDEwNzRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MTA3NCksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQxMDAzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDEwMDMpLCBbQCYjODIwMzthYW5tXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYWFubSkpCgoqKkJ1Z2ZpeGVzOioqCgotIEFkZGVkIGNsZWFudXAgb2YgZGVwcmVjYXRlZCBjaWxpdW1cX3BvbGljeVxfdjEgbWFwcyAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDA1NzhdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDU3OCksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzM5NDAwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvMzk0MDApLCBbQCYjODIwMztwYXN0ZWxleV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3Bhc3RlbGV5KSkKLSBiZ3A6IFVzZSBwcml2YXRlIGZvcmsgb2YgdGhlIEdvQkdQIHRvIGZpeCBCR1AgTUQ1IGF1dGggKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwNTc4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA1NzgpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDU2Nl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwNTY2KSwgW0AmIzgyMDM7WXV0YXJvSGF5YWthd2FdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9ZdXRhcm9IYXlha2F3YSkpCi0gYnBmL25hdDogZml4IGhlYWRlciBvZmZzZXQgd2hpbGUgcmV2ZXJzZSBuYXQtaW5nIGljbXA2IHBrdCB0b28gYmlnLiAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDAzODddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDM4NyksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwMDAyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDAwMDIpLCBbQCYjODIwMzt0b21teXAxY2tsZXNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS90b21teXAxY2tsZXMpKQotIEVuYWJsZSBwcm90b2NvbCBkaWZmZXJlbnRpYXRpb24gYnkgZGVmYXVsdCBvbiB0aGUgb3BlcmF0b3IsIG1hdGNoaW5nIHRoZSBhZ2VudCAoWyMmIzgyMDM7NDA2NDNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDY0MyksIFtAJiM4MjAzO2R5bGFuZHJlaW1lcmlua10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2R5bGFuZHJlaW1lcmluaykpCi0gRml4IGEgYnVnIHdoZXJlIENpbGl1bSBsZWFrcyBzdGFsZSByb3V0ZXMgd2hlbiBJUHNlYyBpcyBlbmFibGVkLiAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDA2NjRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDY2NCksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwNjUzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA2NTMpLCBbQCYjODIwMztwaXBwb2xvODRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9waXBwb2xvODQpKQotIGZpeChoZWxtKTogZml4IHZhbHVlcy5zY2hlbWEuanNvbiB0eXBlcyBmb3IgYnBmLmV2ZW50cy5kZWZhdWx0LntyYXRlTGltaXQsYnVyc3RMaW1pdH0gKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwNTc4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA1NzgpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDU0M10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwNTQzKSwgW0AmIzgyMDM7dmNoaXJpa292XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vdmNoaXJpa292KSkKLSBmaXg6IGt1YmUtcHJveHkgaGVhbHRoeiBwYW5pYyBvbiBwb3J0IDEwMjU2IChbIyYjODIwMzs0MDU5MF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwNTkwKSwgW0AmIzgyMDM7dGFtaWxtYW5pMTk4OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3RhbWlsbWFuaTE5ODkpKQotIEhlbG06IENvcnJlY3Qgc2VjY29tcFByb2ZpbGUgZm9yIGNpbGl1bS1hZ2VudCBwb2RzIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDU3OF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwNTc4KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA0NzZdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDQ3NiksIFtAJiM4MjAzO2pjcHVua10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2pjcHVuaykpCi0gaW5zdGFsbC9rdWJlcm5ldGVzOiBmaXggY2x1c3Rlcm1lc2gtYXBpc2VydmVyIGV4dHJhRW52IChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MTA3NF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQxMDc0KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDEwMjFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MTAyMSksIFtAJiM4MjAzO2Fhbm1dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hYW5tKSkKLSBwa2cvaXBhbTogZml4IG11bHRpLXBvb2wgYWxsb2NhdG9yIG5vdCByZWxlYXNpbmcgdW4tdXNlZCAvMzIgYW5kIC8xMjggQ0lEUnMgKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwNTc4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA1NzgpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDM5M10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwMzkzKSwgW0AmIzgyMDM7YWxpbWVocmFiaWtvc2hraV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FsaW1laHJhYmlrb3Noa2kpKQotIHNlcnZpY2U6IE9ubHkgc2V0IGFsZ29yaXRobSBhbm5vdGF0aW9uIHdoZW4gcmVxdWVzdGVkIChbIyYjODIwMzs0MDg0NV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwODQ1KSwgW0AmIzgyMDM7dHNvdG5lOTVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS90c290bmU5NSkpCgoqKkNJIENoYW5nZXM6KioKCi0gLmdpdGh1Yi9hY3Rpb25zOiBvbmx5IHVwbG9hZCBmaWxlcyB3aXRoIGZlYXR1cmVzLXRlc3RlZCBwcmVmaXggKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwOTg4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA5ODgpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDk3NV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwOTc1KSwgW0AmIzgyMDM7YWFubV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2Fhbm0pKQotIC5naXRodWI6IERvbid0IG92ZXJ3cml0ZSBqdW5pdCByZXN1bHRzIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MTAxNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQxMDE0KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7MzkxNTldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy8zOTE1OSksIFtAJiM4MjAzO2pvZXN0cmluZ2VyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vam9lc3RyaW5nZXIpKQotIC5naXRodWI6IFJ1biBmaW5hbCBzdGVwcyB3aGVuIHRlc3RzIGFyZW4ndCBza2lwcGVkIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MTAxNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQxMDE0KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDAxODBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDE4MCksIFtAJiM4MjAzO2pvZXN0cmluZ2VyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vam9lc3RyaW5nZXIpKQotIFxbdjEuMTddIC5naXRodWI6IFJlbW92ZSB1c2Ugb2YgY29zaWduIGF0dGVzdCAtLXJlY3Vyc2l2ZSAoWyMmIzgyMDM7NDA2OTldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDY5OSksIFtAJiM4MjAzO1l1dGFyb0hheWFrYXdhXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vWXV0YXJvSGF5YWthd2EpKQotIFxbdjEuMTddIGNpOiBSZXZlcnQgYnVpbGRcX2NvbW1pdHMgcnVubmVyIHRvIHVidW50dS0yMi4wNCAoWyMmIzgyMDM7NDA4MzddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDgzNyksIFtAJiM4MjAzO3Jhc3Rpc2xhdnNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9yYXN0aXNsYXZzKSkKLSBidWlsZGVyOiBBZGQgdHBhcnNlLGp1bml0IHRvb2xpbmcgKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQxMDE0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDEwMTQpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzszOTA5Ml0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzM5MDkyKSwgW0AmIzgyMDM7am9lc3RyaW5nZXJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9qb2VzdHJpbmdlcikpCi0gQ2VudHJhbGl6ZSBkeW5hbWljIHRlc3Qgb3duZXJzaGlwIGNvbmZpZ3VyYXRpb24gKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQxMDE0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDEwMTQpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzszODA0NV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzM4MDQ1KSwgW0AmIzgyMDM7am9lc3RyaW5nZXJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9qb2VzdHJpbmdlcikpCi0gY2k6IGNvbmZvcm1hbmNlLWVrcyB0b2tlbiBleHRlbmRlZCB0byA4aCAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDA1NzhdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDU3OCksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwNDc0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA0NzQpLCBbQCYjODIwMzttYXRocGxdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9tYXRocGwpKQotIGNpOiBtb3JlIHBvd2VyZnVsIHJ1bm5lcnMgZm9yIGdvIGxpbnRpbmcgKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwNzY1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA3NjUpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDU4Ml0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwNTgyKSwgW0AmIzgyMDM7bWF0aHBsXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vbWF0aHBsKSkKLSBDTEk6IEF0dHJpYnV0ZSB0ZXN0cyB0byBjb2Rlb3duZXJzIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MTAxNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQxMDE0KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7MzcwMjddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy8zNzAyNyksIFtAJiM4MjAzO2pvZXN0cmluZ2VyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vam9lc3RyaW5nZXIpKQotIEVtaXQganVuaXQgb3V0cHV0IGZyb20gQlBGIHVuaXQgdGVzdHMgKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQxMDE0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDEwMTQpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzszOTA5OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzM5MDk5KSwgW0AmIzgyMDM7am9lc3RyaW5nZXJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9qb2VzdHJpbmdlcikpCi0gRml4IEdLRSBjbHVzdGVyIGNyZWF0aW9uIGZhaWx1cmVzIHdoZW4gYnJhbmNoIG5hbWVzIGV4Y2VlZCA2My1ieXRlIGxhYmVsIGxpbWl0IGJ5IGltcGxlbWVudGluZyBhdXRvbWF0aWMgdHJ1bmNhdGlvbiB3aXRoIGhhc2gtYmFzZWQgdW5pcXVlbmVzcyBwcmVzZXJ2YXRpb24uIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDg0OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwODQ5KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA3MjVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDcyNSksIFtAJiM4MjAzO3BpbGxhaS1hc2h3aW5dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9waWxsYWktYXNod2luKSkKLSBJbXByb3ZlZCB0ZXN0IGZhaWx1cmUgYXR0cmlidXRpb24gb24gc3RhYmxlIGJyYW5jaGVzIGJ5IHVzaW5nIFRFU1RPV05FUlMgZmlsZXMgdG8gcm91dGUgZmFpbHVyZXMgdG8gYXBwcm9wcmlhdGUgY29kZSBxdWFsaXR5IHRlYW1zIHJhdGhlciB0aGFuIGdlbmVyaWMgQ0kgaW5mcmFzdHJ1Y3R1cmUgdGVhbXMuIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MTAxNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQxMDE0KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA3NzZdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDc3NiksIFtAJiM4MjAzO3BpbGxhaS1hc2h3aW5dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9waWxsYWktYXNod2luKSkKLSBwa2cvZWd3OiBBZGQgbWlzc2luZyB3YWl0Rm9yUmVjb25jaWxpYXRpb25SdW4gKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwNTc4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA1NzgpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDM1NV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwMzU1KSwgW0AmIzgyMDM7YWRpdGlnaGFnXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYWRpdGlnaGFnKSkKLSBzcGlyZTogRml4IHVucmVsaWFibGUgdGVzdCAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDA2NjRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDY2NCksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwNTYxXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA1NjEpLCBbQCYjODIwMztqb2VzdHJpbmdlcl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2pvZXN0cmluZ2VyKSkKLSB0b29scy90ZXN0b3duZXJzOiBkZS1kdXBsaWNhdGUgZXJyb3IgbG9ncyAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDEwNzRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MTA3NCksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwNzc4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA3NzgpLCBbQCYjODIwMzt0a2xhdXNlcl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3RrbGF1c2VyKSkKLSBVcGxvYWQganVuaXQgcmVzdWx0cyBmb3IgR28gdW5pdCB0ZXN0IHJ1bnMgKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQxMDE0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDEwMTQpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzszOTAxNV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzM5MDE1KSwgW0AmIzgyMDM7am9lc3RyaW5nZXJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9qb2VzdHJpbmdlcikpCgoqKk1pc2MgQ2hhbmdlczoqKgoKLSAuZ2l0aHViL3dvcmtmbG93czogYnVtcCBidWlsZC1pbWFnZXMtYmFzZSB0aW1lb3V0IHRvIDYwIG1pbnV0ZXMgKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwOTg4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA5ODgpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDkxOV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwOTE5KSwgW0AmIzgyMDM7YWFubV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2Fhbm0pKQotIC5naXRodWI6IGZpeCByZW1vdmFsIG9mIGFsbCBmaWxlcyBpbiAvbW50IChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDg0OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwODQ5KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA4MThdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDgxOCksIFtAJiM4MjAzO2Fhbm1dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hYW5tKSkKLSAuZ2l0aHViOiBmaXggdXBsb2FkIGFydGlmYWN0cyBmb3IgZmVhdHVyZXMuanNvbiAoWyMmIzgyMDM7NDEwOTFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MTA5MSksIFtAJiM4MjAzO2Fhbm1dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hYW5tKSkKLSAuZ2l0aHViOiByZW1vdmUgYWxsIGNvbnRlbnRzIG9mIC9tbnQgaW4gYnVpbGQgaW1hZ2VzIENJIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDg0OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwODQ5KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA4MTRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDgxNCksIFtAJiM4MjAzO2Fhbm1dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hYW5tKSkKLSAuZ2l0aHViOiByZW1vdmUgc3RhYmxlIHRhZyBmcm9tIHYxLjE3IGJyYW5jaGVzIChbIyYjODIwMzs0MDc3Ml0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwNzcyKSwgW0AmIzgyMDM7YWFubV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2Fhbm0pKQotIGNlcnRsb2FkZXI6IEFkZCBjbGllbnQgdmFyaWFudHMgb2Ygd2F0Y2hlZCBUTFMgY29uZmlncyAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDA2MjRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDYyNCksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwMzk5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDAzOTkpLCBbQCYjODIwMztkZXZvZGV2XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZGV2b2RldikpCi0gY2hvcmUoZGVwcyk6IHVwZGF0ZSBhY3Rpb25zL2Rvd25sb2FkLWFydGlmYWN0IGFjdGlvbiB0byB2NSAodjEuMTcpIChbIyYjODIwMzs0MTA1OF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQxMDU4KSwgW0AmIzgyMDM7Y2lsaXVtLXJlbm92YXRlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtLXJlbm92YXRlKVxbYm90XSkKLSBjaG9yZShkZXBzKTogdXBkYXRlIGFsbCBnaXRodWIgYWN0aW9uIGRlcGVuZGVuY2llcyAodjEuMTcpIChbIyYjODIwMzs0MDc0Nl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwNzQ2KSwgW0AmIzgyMDM7Y2lsaXVtLXJlbm92YXRlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtLXJlbm92YXRlKVxbYm90XSkKLSBjaG9yZShkZXBzKTogdXBkYXRlIGFsbCBnaXRodWIgYWN0aW9uIGRlcGVuZGVuY2llcyAodjEuMTcpIChbIyYjODIwMzs0MDkwNV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwOTA1KSwgW0AmIzgyMDM7Y2lsaXVtLXJlbm92YXRlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtLXJlbm92YXRlKVxbYm90XSkKLSBjaG9yZShkZXBzKTogdXBkYXRlIGFsbCBnaXRodWIgYWN0aW9uIGRlcGVuZGVuY2llcyAodjEuMTcpIChbIyYjODIwMzs0MTA1OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQxMDU5KSwgW0AmIzgyMDM7Y2lsaXVtLXJlbm92YXRlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtLXJlbm92YXRlKVxbYm90XSkKLSBjaG9yZShkZXBzKTogdXBkYXRlIGFsbC1kZXBlbmRlbmNpZXMgKHYxLjE3KSAoWyMmIzgyMDM7NDA3NDRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDc0NCksIFtAJiM4MjAzO2NpbGl1bS1yZW5vdmF0ZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS1yZW5vdmF0ZSlcW2JvdF0pCi0gY2hvcmUoZGVwcyk6IHVwZGF0ZSBhbGwtZGVwZW5kZW5jaWVzICh2MS4xNykgKFsjJiM4MjAzOzQwOTg0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA5ODQpLCBbQCYjODIwMztjaWxpdW0tcmVub3ZhdGVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0tcmVub3ZhdGUpXFtib3RdKQotIGNob3JlKGRlcHMpOiB1cGRhdGUgZGVwZW5kZW5jeSBjaWxpdW0vY2lsaXVtLWNsaSB0byB2MC4xOC42ICh2MS4xNykgKFsjJiM4MjAzOzQwOTAyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA5MDIpLCBbQCYjODIwMztjaWxpdW0tcmVub3ZhdGVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0tcmVub3ZhdGUpXFtib3RdKQotIGNob3JlKGRlcHMpOiB1cGRhdGUgZGVwZW5kZW5jeSBjaWxpdW0vbGl0dGxlLXZtLWhlbHBlciB0byB2MC4wLjI2ICh2MS4xNykgKFsjJiM4MjAzOzQwNjQ2XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA2NDYpLCBbQCYjODIwMztjaWxpdW0tcmVub3ZhdGVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0tcmVub3ZhdGUpXFtib3RdKQotIGNob3JlKGRlcHMpOiB1cGRhdGUgZG9ja2VyLmlvL2xpYnJhcnkvZ29sYW5nOjEuMjQuNSBkb2NrZXIgZGlnZXN0IHRvIFtgZWY1YjRiZWBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2NvbW1pdC9lZjViNGJlKSAodjEuMTcpIChbIyYjODIwMzs0MDc0NV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwNzQ1KSwgW0AmIzgyMDM7Y2lsaXVtLXJlbm92YXRlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtLXJlbm92YXRlKVxbYm90XSkKLSBjaG9yZShkZXBzKTogdXBkYXRlIGdvIHRvIHYxLjI0LjYgKHYxLjE3KSAoWyMmIzgyMDM7NDA5OTRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDk5NCksIFtAJiM4MjAzO2NpbGl1bS1yZW5vdmF0ZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS1yZW5vdmF0ZSlcW2JvdF0pCi0gY2hvcmUoZGVwcyk6IHVwZGF0ZSBxdWF5LmlvL2NpbGl1bS9jaWxpdW0tZW52b3kgZG9ja2VyIHRhZyB0byB2MS4zMy42LTE3NTM5MTk4NjYtZGY4MDc3ZGJkMzkzMmVkY2NiNTlmMWM1YzcwZTAxZjJjMWY2Mzc0MSAodjEuMTcpIChbIyYjODIwMzs0MDkwM10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwOTAzKSwgW0AmIzgyMDM7Y2lsaXVtLXJlbm92YXRlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtLXJlbm92YXRlKVxbYm90XSkKLSBjaG9yZShkZXBzKTogdXBkYXRlIHN0YWJsZSBsdmgtaW1hZ2VzICh2MS4xNykgKHBhdGNoKSAoWyMmIzgyMDM7NDA2NzNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDY3MyksIFtAJiM4MjAzO2NpbGl1bS1yZW5vdmF0ZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS1yZW5vdmF0ZSlcW2JvdF0pCi0gY2hvcmUoZGVwcyk6IHVwZGF0ZSBzdGFibGUgbHZoLWltYWdlcyAodjEuMTcpIChwYXRjaCkgKFsjJiM4MjAzOzQwOTA0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA5MDQpLCBbQCYjODIwMztjaWxpdW0tcmVub3ZhdGVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0tcmVub3ZhdGUpXFtib3RdKQotIGNob3JlKGRlcHMpOiB1cGRhdGUgc3RhYmxlIGx2aC1pbWFnZXMgKHYxLjE3KSAocGF0Y2gpIChbIyYjODIwMzs0MTA1N10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQxMDU3KSwgW0AmIzgyMDM7Y2lsaXVtLXJlbm92YXRlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtLXJlbm92YXRlKVxbYm90XSkKLSBjaTogYWRkL2NoYW5nZSBydW5uZXIgbGFiZWxzIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDk4OF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwOTg4KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA5NzJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDk3MiksIFtAJiM4MjAzO0FydHlvcF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL0FydHlvcCkpCi0gY2xpOiBMb2FkIGNvZGUgb3duZXJzIGR5bmFtaWNhbGx5IHZpYSAtLWNvZGUtb3duZXJzIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MTAxNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQxMDE0KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7MzgwNDRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy8zODA0NCksIFtAJiM4MjAzO2pvZXN0cmluZ2VyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vam9lc3RyaW5nZXIpKQotIGRhZW1vbi90ZXN0OiBleHBsaWNpdGx5IHdhaXQgZm9yIGlkZW50aXRpZXMgc3luY2hyb25pemF0aW9uIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDg0OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwODQ5KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA4MTFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDgxMSksIFtAJiM4MjAzO2dpb3Jpbzk0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2lvcmlvOTQpKQotIGRvYzptb25pdG9yOiBjbGFyaWZ5IGRpcmVjdGlvbiB0cmFjZWQgd2l0aCBkZWZhdWx0IGFnZ3JlZ2F0aW9uIGxldmVsIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDU3OF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwNTc4KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDAzOThdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDM5OCksIFtAJiM4MjAzO3NtYWduYW5pOTZdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9zbWFnbmFuaTk2KSkKLSBkb2NzOiBBZGQgbWlzc2luZyBJUEFNIG1vZGVzIHRvIGNvbmZpZ3VyYXRpb24gcGFnZSAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDA2NjRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDY2NCksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwNTQwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA1NDApLCBbQCYjODIwMztSYXl5YW5TZWxpeWFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9SYXl5YW5TZWxpeWEpKQotIGRvY3M6IEFkZCB3YXJuaW5nIGFib3V0IGNoYW5naW5nIGFuIElQIHBvb2wgKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwNjY0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA2NjQpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDU2N10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwNTY3KSwgW0AmIzgyMDM7c29ycmlzb25dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9zb3JyaXNvbikpCi0gZG9jczogcmVtb3ZlIGw3IEVuYWJsZURlZmF1bHREZW55IGNhbGxvdXQgKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwNTc4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA1NzgpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDQ0MV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwNDQxKSwgW0AmIzgyMDM7c3F1ZWVkXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vc3F1ZWVkKSkKLSBGaXggcmFjZSBjb25kaXRpb24gaXNzdWVzIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDk4OF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwOTg4KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDA5NDldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDk0OSksIFtAJiM4MjAzO2Fhbm1dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hYW5tKSkKLSBNYWtlZmlsZTogRml4IG11bHRpIGNvZGVvd25lciBkZXRlY3Rpb24gKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQxMDE0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDEwMTQpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDkyM10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwOTIzKSwgW0AmIzgyMDM7am9lc3RyaW5nZXJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9qb2VzdHJpbmdlcikpCi0gTWFrZWZpbGU6IEltcHJvdmUgdHBhcnNlLGp1bml0IG91dHB1dCBoYW5kbGluZyAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDEwMTRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MTAxNCksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzM5MDk4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvMzkwOTgpLCBbQCYjODIwMztqb2VzdHJpbmdlcl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2pvZXN0cmluZ2VyKSkKLSBTdXBwb3J0IGV4dGVuZGluZyBjaWxpdW0tYWdlbnQgdm9sdW1lcyBhcyBhIGRvd25zdHJlYW0gcGFja2FnZXIgKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwNTc4XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA1NzgpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDQwMV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwNDAxKSwgW0AmIzgyMDM7ZGV2b2Rldl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2Rldm9kZXYpKQotIHRvb2xzOiBNb3ZlIGNvZGVvd25lcnMgbGlicmFyeSBmcm9tIGNpbGl1bS1jbGkgZGlyIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MTAxNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQxMDE0KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDAyNTNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDI1MyksIFtAJiM4MjAzO2pvZXN0cmluZ2VyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vam9lc3RyaW5nZXIpKQoKKipPdGhlciBDaGFuZ2VzOioqCgotIEZpeCBidWcgd2hlcmUgTG9jYWxSZWRpcmVjdFBvbGljeSBmb3J3YXJkaW5nIHdvdWxkIGJyZWFrIGlmIHlvdSBlbmFibGUgYGJwZi1sYi1hbGdvcml0aG0tYW5ub3RhdGlvbmAgKFsjJiM4MjAzOzQwMjQ2XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDAyNDYpLCBbQCYjODIwMzt0YXJhYnJpbmRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS90YXJhYnJpbmQpKQotIGltYWdlczogdXBkYXRlIGNpbGl1bS17cnVudGltZSxidWlsZGVyfSAoWyMmIzgyMDM7NDA4MzldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDgzOSksIFtAJiM4MjAzO2Fhbm1dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hYW5tKSkKLSBpbnN0YWxsOiBVcGRhdGUgaW1hZ2UgZGlnZXN0cyBmb3IgdjEuMTcuNiAoWyMmIzgyMDM7NDA1NDZdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDU0NiksIFtAJiM4MjAzO2NpbGl1bS1yZWxlYXNlLWJvdF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS1yZWxlYXNlLWJvdClcW2JvdF0pCi0gdmVuZG9yOiBCdW1wIHRvIFN0YXRlREIgdjAuNC41IChbIyYjODIwMzs0MDg1MF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwODUwKSwgW0AmIzgyMDM7am9hbWFraV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2pvYW1ha2kpKQoKIyMjIyBEb2NrZXIgTWFuaWZlc3RzCgojIyMjIyBjaWxpdW0KCmBxdWF5LmlvL2NpbGl1bS9jaWxpdW06djEuMTcuN0AmIzgyMDM7c2hhMjU2OmIyMjQ0MGY0OWM2MTE5NTE3MWFjYTU4NWM3YTU3YzZhODg2NzI3MWU0M2E1YWJjMzhmMmEyZjU2MTQzNmZmODZgCgojIyMjIyBjbHVzdGVybWVzaC1hcGlzZXJ2ZXIKCmBxdWF5LmlvL2NpbGl1bS9jbHVzdGVybWVzaC1hcGlzZXJ2ZXI6djEuMTcuN0AmIzgyMDM7c2hhMjU2OjI4NTJmZWNhMGQwZDkzNmVkMDMzM2NkNjQ4NTlmM2M1ZWNlMmRiNTgyYmE1ZmVkODQ4ZjU3YWZmNzg2YmU0YTZgCgojIyMjIyBkb2NrZXItcGx1Z2luCgpgcXVheS5pby9jaWxpdW0vZG9ja2VyLXBsdWdpbjp2MS4xNy43QCYjODIwMztzaGEyNTY6MWI3YzhkNjRmMDFiMzA5NTIxZjEzYWIyYTE1MjM5YTY4OGI5ZjU0NWJiOTcwNThkMzgzYWQzYmI1NWU0MmU2N2AKCiMjIyMjIGh1YmJsZS1yZWxheQoKYHF1YXkuaW8vY2lsaXVtL2h1YmJsZS1yZWxheTp2MS4xNy43QCYjODIwMztzaGEyNTY6OTM5NDMxMmNlNjVjM2MyNTNhOGMyNmE2YzI5MmY1ODczNmU3NWM3OGQxNDQ2ZWNmY2QyNDRmMTQxOGJlYmU3N2AKCiMjIyMjIG9wZXJhdG9yLWFsaWJhYmFjbG91ZAoKYHF1YXkuaW8vY2lsaXVtL29wZXJhdG9yLWFsaWJhYmFjbG91ZDp2MS4xNy43QCYjODIwMztzaGEyNTY6MjcxZTY0ZDZjOTEwMTlhMWE0ODE1YjRjNzgyOTQ5NjJiZjUxYzlmNzY0YzY4MGZkZmFjYjJhZGI2ZTlkMGM0ZGAKCiMjIyMjIG9wZXJhdG9yLWF3cwoKYHF1YXkuaW8vY2lsaXVtL29wZXJhdG9yLWF3czp2MS4xNy43QCYjODIwMztzaGEyNTY6Y2UzN2QyY2NmOTIxNzYxYTQxNzFhNTA3NzQ4YTA2YTIwNDU5Mjg5MGU2ZjhjZjdkMWMzNTQ2NDhlMDk4YzgzMGAKCiMjIyMjIG9wZXJhdG9yLWF6dXJlCgpgcXVheS5pby9jaWxpdW0vb3BlcmF0b3ItYXp1cmU6djEuMTcuN0AmIzgyMDM7c2hhMjU2OjljMWRiMTFkZTJlMGNkY2FiYTUyMmM4ZjM5NmI5YTY0MzczOGYzZDNmOTU4ZmE5YjRkNjJmNTdiYWM1ZGFhZmJgCgojIyMjIyBvcGVyYXRvci1nZW5lcmljCgpgcXVheS5pby9jaWxpdW0vb3BlcmF0b3ItZ2VuZXJpYzp2MS4xNy43QCYjODIwMztzaGEyNTY6YTYxMGJlMjU2MmQwZjVhODk0NWEyN2RmN2Q1NjgxNzExMjYzY2U5MmUwOTk0N2U4NjdmYzM3ZmM5YWIwODc4OGAKCiMjIyMjIG9wZXJhdG9yCgpgcXVheS5pby9jaWxpdW0vb3BlcmF0b3I6djEuMTcuN0AmIzgyMDM7c2hhMjU2OjEyMmU0OWZjZTgyZGY5MDY5M2Y4OTgxZTVkOTAxM2I2YTkyNDgyODRkYjE3MjI2MjU5ZTM5MzY0YmE5YTIxMWRgCgojIyMgW2B2MS4xNy42YF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vcmVsZWFzZXMvdGFnL3YxLjE3LjYpOiAxLjE3LjYKCltDb21wYXJlIFNvdXJjZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vY29tcGFyZS8xLjE3LjUuLi4xLjE3LjYpCgojIyBTdW1tYXJ5IG9mIENoYW5nZXMKCioqTWlub3IgQ2hhbmdlczoqKgoKLSBoZWxtOiBLUFIgc3ViZmxhZyBjaGFuZ2VzIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDIyMl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwMjIyKSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7Mzk3MjFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy8zOTcyMSksIFtAJiM4MjAzO2JyYl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2JyYikpCgoqKkJ1Z2ZpeGVzOioqCgotIERlbnkgcG9saWNpZXMgYXJlIG5vdyBzeW5jZWQgdG8gRW52b3kgc28gdGhhdCB0aGV5IGNhbiBiZSBlbmZvcmNlZCBmb3IgSW5ncmVzcyBwb2xpY2llcy4gKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwMTg3XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDAxODcpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzszOTczNl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzM5NzM2KSwgW0AmIzgyMDM7anJhamFoYWxtZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2pyYWphaGFsbWUpKQotIERvIG5vdCBmYWlsIHRoZSBhZ2VudCBzdGFydHVwIGluIGNhc2UgSVB2NiBzdXBwb3J0IGlzIGVuYWJsZWQgYW5kIHRoZSBub2RlIGRvZXMgbm90IGhhdmUgYW4gSVB2NiBhZGRyZXNzIGFzc2lnbmVkIHlldCAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDAyMDVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDIwNSksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwMTQzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDAxNDMpLCBbQCYjODIwMztwaXBwb2xvODRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9waXBwb2xvODQpKQotIEZpeCBidWcgcHJldmVudGluZyBhIGdsb2JhbCBzZXJ2aWNlIGZyb20gaW5jbHVkaW5nIHJlbW90ZSBiYWNrZW5kcywgaWYgdGhlIGxvY2FsIHNlcnZpY2UgaGFzIG5vIHNlbGVjdG9yLCBhbmQgdGhlIHJlbW90ZSBvbmUgZ2V0cyByZW1vdmVkIGFuZCB0aGVuIGFkZGVkIGFnYWluLiAoWyMmIzgyMDM7NDAzNjFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDM2MSksIFtAJiM4MjAzO2dpb3Jpbzk0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2lvcmlvOTQpKQotIEZpeCBkYXRhIHJhY2UgaW52b2x2aW5nIER1bXBSZWxpYWJseVdpdGhDYWxsYmFjayBtYXAgb3BlcmF0aW9uLiAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDAwOTRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDA5NCksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzM4NTkwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvMzg1OTApLCBbQCYjODIwMzthZGl0aWdoYWddKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hZGl0aWdoYWcpKQotIEZpeCBJUEFNIElQIHJlbGVhc2UgcmFjaW5nIGNvbmRpdGlvbiB3aGVuIElQIHJlYXNzaWduZWQgYmFjayB0byBFTkkgKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwMjg5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDAyODkpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDAxOV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwMDE5KSwgW0AmIzgyMDM7dmljdG9yY3FdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS92aWN0b3JjcSkpCi0gaHViYmxlIGF1dG9tYXRpY2FsbHkgcGljayB0aGUgYGh1YmJsZS1wcmVmZXItaXB2NmAgdG8gYHRydWVgIGlmIGlwdjQgbm90IGVuYWJsZWQgKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwMjg5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDAyODkpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDIxMF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwMjEwKSwgW0AmIzgyMDM7Y2hlbmdqb2V5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2hlbmdqb2V5KSkKLSBMQklQQU06IEZpeCBkZWxldGlvbiBvZiBDaWxpdW1Mb2FkQmFsYW5jZXJJUFBvb2wgd2l0aCBtdWx0aXBsZSBJUCBibG9ja3MgdGhhdCBsZWQgdG8gYW4gb3BlcmF0b3IgY3Jhc2ggKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwMDk0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDAwOTQpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzs0MDAxM10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwMDEzKSwgW0AmIzgyMDM7cGlwcG9sbzg0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcGlwcG9sbzg0KSkKLSBwa2cvZWdyZXNzZ2F0ZXdheTogZW5zdXJlIGdhdGV3YXkgSVAgaXMgSVB2NCAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDAzMzJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDMzMiksIFVwc3RyZWFtIFBSIFsjJiM4MjAzOzQwMjA5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDAyMDkpLCBbQCYjODIwMztyZ28zXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcmdvMykpCi0gcG9saWN5OiBmaXggZXJyb3IgaGFuZGxpbmcgZm9yIHNlbGVjdG9yIHBvbGljeSByZXNvbHV0aW9uIChbIyYjODIwMzs0MDQwNF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwNDA0KSwgW0AmIzgyMDM7ZnJpc3RvbmlvXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZnJpc3RvbmlvKSkKCioqQ0kgQ2hhbmdlczoqKgoKLSBjaTogZG8gbm90IHJ1biBub3J0aC1zb3V0aCBjb25uIGRpc3J1cHQgdGVzdHMgZm9yIDUuNCBrZXJuZWxzIChbIyYjODIwMzszOTQ0M10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzM5NDQzKSwgW0AmIzgyMDM7bGRlbG9zc2FdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9sZGVsb3NzYSkpCi0gY2k6IGZpeCBub3J0aC1zb3V0aCBjb25uIGRpc3J1cHQgZm9yIDUuNCBrZXJuZWwgKFsjJiM4MjAzOzQwNDM0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDA0MzQpLCBbQCYjODIwMztzbWFnbmFuaTk2XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vc21hZ25hbmk5NikpCgoqKk1pc2MgQ2hhbmdlczoqKgoKLSAuZ2l0aHViL3dvcmtmbG93czogcmVtb3ZlIHJldmlld2VycyBpZiBjaWxpdW1ib3QgYXBwcm92ZWQgUFIgKEJhY2twb3J0IFBSIFsjJiM4MjAzOzQwMDk0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vY2lsaXVtL2NpbGl1bS9pc3N1ZXMvNDAwOTQpLCBVcHN0cmVhbSBQUiBbIyYjODIwMzszOTk4OV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzM5OTg5KSwgW0AmIzgyMDM7YWFubV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2Fhbm0pKQotIGF1dG8tYXBwcm92ZTogYWRkIHJlcG9zaXRvcnkgYXMgcGFydCBjb21tYW5kIChCYWNrcG9ydCBQUiBbIyYjODIwMzs0MDA5NF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2NpbGl1bS9jaWxpdW0vaXNzdWVzLzQwMDk0KSwgVXBzdHJlYW0gUFIgWyMmIzgyMDM7NDAwNTBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9jaWxpdW0vY2lsaXVtL2lzc3Vlcy80MDA1MCksIFtAJiM4MjAzO2Fhbm1dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hYW5tKSkKLSBhdXRvLWFwcHJvdmU6IGFkZCByZXBvc2l0b3J5IGFzIHBhcnQgY29tbWFuZCAoQmFja3BvcnQgUFIgWyMmIzgyMDM7NDAzMzJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbQoKPC9kZXRhaWxzPgoKLS0tCgojIyMgQ29uZmlndXJhdGlvbgoK8J+ThSAqKlNjaGVkdWxlKio6IEJyYW5jaCBjcmVhdGlvbiAtIEF0IGFueSB0aW1lIChubyBzY2hlZHVsZSBkZWZpbmVkKSwgQXV0b21lcmdlIC0gQXQgYW55IHRpbWUgKG5vIHNjaGVkdWxlIGRlZmluZWQpLgoK8J+apiAqKkF1dG9tZXJnZSoqOiBEaXNhYmxlZCBieSBjb25maWcuIFBsZWFzZSBtZXJnZSB0aGlzIG1hbnVhbGx5IG9uY2UgeW91IGFyZSBzYXRpc2ZpZWQuCgrimbsgKipSZWJhc2luZyoqOiBXaGVuZXZlciBQUiBiZWNvbWVzIGNvbmZsaWN0ZWQsIG9yIHlvdSB0aWNrIHRoZSByZWJhc2UvcmV0cnkgY2hlY2tib3guCgrwn5SVICoqSWdub3JlKio6IENsb3NlIHRoaXMgUFIgYW5kIHlvdSB3b24ndCBiZSByZW1pbmRlZCBhYm91dCB0aGlzIHVwZGF0ZSBhZ2Fpbi4KCi0tLQoKIC0gWyBdIDwhLS0gcmViYXNlLWNoZWNrIC0tPklmIHlvdSB3YW50IHRvIHJlYmFzZS9yZXRyeSB0aGlzIFBSLCBjaGVjayB0aGlzIGJveAoKLS0tCgpUaGlzIFBSIHdhcyBnZW5lcmF0ZWQgYnkgW01lbmQgUmVub3ZhdGVdKGh0dHBzOi8vbWVuZC5pby9yZW5vdmF0ZS8pLiBWaWV3IHRoZSBbcmVwb3NpdG9yeSBqb2IgbG9nXShodHRwczovL2RldmVsb3Blci5tZW5kLmlvL2dpdGh1Yi9ZQUtFY2xvdWQveWFrZS1hbnNpYmxlKS4KPCEtLXJlbm92YXRlLWRlYnVnOmV5SmpjbVZoZEdWa1NXNVdaWElpT2lJME1DNDJNQzR4SWl3aWRYQmtZWFJsWkVsdVZtVnlJam9pTkRFdU9URXVNU0lzSW5SaGNtZGxkRUp5WVc1amFDSTZJbTFoYVc0aUxDSnNZV0psYkhNaU9sc2ljbVZ1YjNaaGRHVWlYWDA9LS0+Cg==
      patchset: 54efaf9c6b2ae54293dcf8d32ef66cade77e2c3e
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/YAKEcloud/zuul-config:
            canonical_name: github.com/YAKEcloud/zuul-config
            checkout: main
            commit: 187ca9c93783cf78b5778e0c84c687f3aefbe0a7
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: 9b966b7c4a2bfb253652691d791f76f825145a9c
          untrusted/project_1/github.com/YAKEcloud/zuul-config:
            canonical_name: github.com/YAKEcloud/zuul-config
            checkout: main
            commit: 187ca9c93783cf78b5778e0c84c687f3aefbe0a7
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/python-black/run.yml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_0/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_0/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_1/github.com/YAKEcloud/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/YAKEcloud/yake-ansible
        name: YAKEcloud/yake-ansible
        short_name: yake-ansible
        src_dir: src/github.com/YAKEcloud/yake-ansible
      projects:
        github.com/YAKEcloud/yake-ansible:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          checkout: main
          checkout_description: zuul branch
          commit: 55a39a3e5659f516a52e9073eaa93dc0550b0c17
          name: YAKEcloud/yake-ansible
          required: false
          short_name: yake-ansible
          src_dir: src/github.com/YAKEcloud/yake-ansible
      ref: refs/pull/247/head
      resources: {}
      tenant: yakecloud
      timeout: 1800
      topic: null
      voting: true
