all:
  children:
    zuul_unreachable:
      hosts: {}
  hosts:
    ubuntu-jammy:
      ansible_connection: ssh
      ansible_host: 2a13:1a81:8000:3124:f816:3eff:fef5:68a6
      ansible_port: 22
      ansible_python_interpreter: auto
      ansible_user: zuul
      nodepool:
        az: nova
        cloud: regiocloud-a-ci
        external_id: 6734aea3-ee93-4325-ae5b-992906216fd7
        host_id: 5afd8fc909abddfe2ce3a956a91bbe56629648b7209fd0acfa541862
        interface_ip: 2a13:1a81:8000:3124:f816:3eff:fef5:68a6
        label: ubuntu-jammy
        node_properties: {}
        private_ipv4: 10.128.7.3
        private_ipv6: null
        provider: regiocloud-a
        public_ipv4: 81.163.192.217
        public_ipv6: 2a13:1a81:8000:3124:f816:3eff:fef5:68a6
        region: null
        slot: null
  vars:
    zuul:
      _inheritance_path:
      - '<Job base explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: YAKEcloud/zuul-config/zuul.d/jobs.yaml@main#2>'
      - '<Job hadolint explicit: None implied: {MatchAny:{ImpliedBranchMatcher:main}}
        source: osism/zuul-jobs/.zuul.yaml@main#37>'
      - '<Job hadolint explicit: None implied: None source: YAKEcloud/yake-ansible/.zuul.yaml@main#82>'
      ansible_version: '9'
      attempts: 1
      branch: main
      build: f16c1a93a7104c6c95fd8f96974686f6
      build_refs:
      - branch: main
        change: '502'
        change_message: "chore(deps): update dependency gardener/gardener to v1.136.0\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [gardener/gardener](https://redirect.github.com/gardener/gardener) | minor
          | `1.135.1` \u2192 `1.136.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>gardener/gardener
          (gardener/gardener)</summary>\n\n### [`v1.136.0`](https://redirect.github.com/gardener/gardener/releases/tag/v1.136.0)\n\n[Compare
          Source](https://redirect.github.com/gardener/gardener/compare/v1.135.1...v1.136.0)\n\n###
          \\[github.com/gardener/gardener:v1.136.0]\n\n#### \u26A0\uFE0F Breaking
          Changes\n\n- `[OPERATOR]` The Garden's `.spec.virtualCluster.kubernetes.kubeAPIServer.eventTTL`
          field's valid values range is restricted from `[0, 168h]` to `[0, 24h]`.
          The new range is imposed for new Garden creations and for field value updates.
          Already existing Gardens which specify invalid values (more than `24h`)
          are not affected. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
          \\[[#&#8203;13830](https://redirect.github.com/gardener/gardener/pull/13830)]\n-
          `[OPERATOR]` The ManagedSeedSet's `.spec.shootTemplate.spec.kubernetes.kubeAPIServer.eventTTL`
          field's valid values range is restricted from `[0, 168h]` to `[0, 24h]`.
          The new range is imposed for new ManagedSeedSet creations and for field
          value updates. Already existing ManagedSeedSets which specify invalid values
          (more than `24h`) are not affected. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
          \\[[#&#8203;13830](https://redirect.github.com/gardener/gardener/pull/13830)]\n-
          `[USER]` Shoot addons (`.spec.addons`) have been deprecated and will be
          forbidden starting with Kubernetes `1.35`. Their usage was already discouraged
          for productive clusters, as they now only include unmaintained components
          (Kubernetes dashboard and Ingress NGINX Controller). by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
          `[USER]` The shoot field `.spec.kubernetes.kubeScheduler.kubeMaxPDVols`
          has been deprecated and will be forbidden starting with Kubernetes `1.35`.
          The maximum number of attachable volumes is maintained by the respective
          CSI plugin. by [@&#8203;timuthy](https://redirect.github.com/timuthy) \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
          `[USER]` The Shoot's `.spec.kubernetes.kubeAPIServer.eventTTL` field's valid
          values range is restricted from `[0, 168h]` to `[0, 24h]`. The new range
          is imposed for new Shoots creations and for field value updates. Already
          existing Shoots which specify invalid values (more than `24h`) are not affected.
          by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov) \\[[#&#8203;13830](https://redirect.github.com/gardener/gardener/pull/13830)]\n-
          `[USER]` Downgrading the machine image version (`.spec.provider.workers[].machine.image.version`)
          is not allowed for worker pools using the `AutoInPlaceUpdate` or `ManualInPlaceUpdate`
          strategy, as Gardener does not support machine image downgrades for any
          operating system currently.  For `AutoRollingUpdate`, the entire node is
          replaced, so this limitation does not apply. by [@&#8203;shafeeqes](https://redirect.github.com/shafeeqes)
          \\[[#&#8203;13828](https://redirect.github.com/gardener/gardener/pull/13828)]\n-
          `[USER]` The shoot field `.spec.kubernetes.kubeAPIServer.watchCacheSizes.default`
          has been deprecated and will be forbidden starting with Kubernetes `1.35`.
          Watch cache sizes are automatically sized by Kubernetes. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
          `[USER]` Setting `.spec.kubernetes.kubeAPIServer.enableAnonymousAuthentication`
          in the `Shoot` spec is forbidden for clusters with Kubernetes version >=
          1.35. Users that enable anonymous authentication should use Structured Authentication
          with [anonymous authenticator](https://redirect.github.com/gardener/gardener/blob/master/docs/usage/shoot/shoot_access.md#configuring-anonymous-authentication)
          instead. by [@&#8203;dimityrmirchev](https://redirect.github.com/dimityrmirchev)
          \\[[#&#8203;13707](https://redirect.github.com/gardener/gardener/pull/13707)]\n-
          `[DEVELOPER]` The healthcheck controller now supports the `garden` extension
          class. Health check client interfaces have been renamed from `SeedClient/ShootClient`
          to `SourceClient/TargetClient` for better abstraction across extension classes.
          The `PreCheckFunc` method signature has been changed to accept `any` for
          cluster or garden object. by [@&#8203;theoddora](https://redirect.github.com/theoddora)
          \\[[#&#8203;13789](https://redirect.github.com/gardener/gardener/pull/13789)]\n\n####
          \U0001F4F0 Noteworthy\n\n- `[OPERATOR]` New health and readiness checks
          have been added to vpn-seed-server to improve availability and reduce log
          clutter. by [@&#8203;domdom82](https://redirect.github.com/domdom82) \\[[#&#8203;13802](https://redirect.github.com/gardener/gardener/pull/13802)]\n-
          `[OPERATOR]` The `Shoot` spec has a new field `spec.kubernetes.kubeAPIServer.encryptionConfig.provider.type`,
          which currently can only be set to `aescbc`. by [@&#8203;AleksandarSavchev](https://redirect.github.com/AleksandarSavchev)
          \\[[#&#8203;13732](https://redirect.github.com/gardener/gardener/pull/13732)]\n-
          `[OPERATOR]` For Kubernetes virtual clusters `>= 1.33`, we now deploy both
          `Endpoints` and `EndpointSlice` resources for the APIService connection
          between virtual-garden-kube-apiserver and gardener-apiserver. by [@&#8203;acumino](https://redirect.github.com/acumino)
          \\[[#&#8203;14041](https://redirect.github.com/gardener/gardener/pull/14041)]\n-
          `[OPERATOR]` The `Garden` spec has 2 new fields `spec.virtualCluster.kubernetes.kubeAPIServer.encryptionConfig.provider.type`and
          `spec.virtualCluster.gardener.gardenerAPIServer.encryptionConfig.provider.type`,
          which currently can only be set to `aescbc`. by [@&#8203;AleksandarSavchev](https://redirect.github.com/AleksandarSavchev)
          \\[[#&#8203;13732](https://redirect.github.com/gardener/gardener/pull/13732)]\n-
          `[OPERATOR]` The `OpenTelemetryCollector` feature gate has been promoted
          to Beta and is enabled by default. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13851](https://redirect.github.com/gardener/gardener/pull/13851)]\n-
          `[USER]` The field `.spec.kubernetes.kubeAPIServer.enableAnonymousAuthentication`
          in the `Shoot` spec will be automatically set to `nil` if users set it `false`
          as these two are equivalent across the codebase. The field is deprecated
          and users that enable anonymous authentication should migrate to Structured
          Authentication with [anonymous authenticator](https://redirect.github.com/gardener/gardener/blob/master/docs/usage/shoot/shoot_access.md#configuring-anonymous-authentication)
          instead. by [@&#8203;dimityrmirchev](https://redirect.github.com/dimityrmirchev)
          \\[[#&#8203;13707](https://redirect.github.com/gardener/gardener/pull/13707)]\n-
          `[USER]` It is now explicitly supported to use short worker OS image versions
          in the `CloudProfile`, which are not defaulted when creating or updating
          the `Shoot` spec. by [@&#8203;Gerrit91](https://redirect.github.com/Gerrit91)
          \\[[#&#8203;13785](https://redirect.github.com/gardener/gardener/pull/13785)]\n-
          `[USER]` The shoot deletion flow has been enhanced to tolerate leftover
          resources in the following situations:\n  - Objects that belong to namespaces
          which have already been deleted (finalized).\n  - Objects that were created
          after the cleanup process began for the first time, plus the finalize grace
          period. by [@&#8203;timuthy](https://redirect.github.com/timuthy) \\[[#&#8203;13918](https://redirect.github.com/gardener/gardener/pull/13918)]\n\n####
          \u2728 New Features\n\n- `[OPERATOR]` Gardener now supports pulling Helm
          charts from OCI registries that use custom or self-signed TLS certificates.
          This is particularly useful for air-gapped environments or when using private
          container registries with custom certificate authorities.\n\n  A new `caBundleSecretRef`
          field has been added to the `ociRepository` configuration in the following
          resources:\n\n  - `core.gardener.cloud/v1.ControllerDeployment`: `.helm.ociRepository.caBundleSecretRef`\n
          \ - `core.gardener.cloud/v1beta1.ControllerDeployment`: `.helm.ociRepository.caBundleSecretRef`\n
          \ - `operator.gardener.cloud/v1alpha1.Extension`: `.spec.deployment.{admission.{runtimeCluster,virtualCluster},extension}.helm.ociRepository.caBundleSecretRef`\n\n
          \ The field references a secret in the `garden` namespace containing a PEM-encoded
          CA certificate bundle (data key: `bundle.crt`). For gardenlet usage, the
          secret must be labeled with `gardener.cloud/role=oci-ca-bundle`. by [@&#8203;shafeeqes](https://redirect.github.com/shafeeqes)
          \\[[#&#8203;13868](https://redirect.github.com/gardener/gardener/pull/13868)]\n-
          `[OPERATOR]` The `gardener-controller-manager` now increases all `ResourceQuota`s
          in project namespaces when a Gardener update leads to Gardener creating
          more resources in them. This was introduced to prevent failing Shoot reconciliations
          when `ResourceQuota`s of projects are near their limit. by [@&#8203;tobschli](https://redirect.github.com/tobschli)
          \\[[#&#8203;13850](https://redirect.github.com/gardener/gardener/pull/13850)]\n-
          `[OPERATOR]` Introduce fluent-bit-plugin v1 with OTLP support behind the
          OpenTelemetryCollector feature gate and adjust fluent-bit resources to select
          OTLP. by [@&#8203;nickytd](https://redirect.github.com/nickytd) \\[[#&#8203;13961](https://redirect.github.com/gardener/gardener/pull/13961)]\n-
          `[OPERATOR]` Introduced the Victoria Operator as a component to Seed & Garden
          Clusters. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13708](https://redirect.github.com/gardener/gardener/pull/13708)]\n-
          `[OPERATOR]` When configuring a custom CNI path for containerd, GNA will
          now - in addition to checking the version of the config.toml config file
          - query containerd for its version and use the `bin_dirs` path with a string
          array if the config file version is 3 and containerd >= 2.2 is detected.
          by [@&#8203;MrBatschner](https://redirect.github.com/MrBatschner) \\[[#&#8203;13826](https://redirect.github.com/gardener/gardener/pull/13826)]\n-
          `[OPERATOR]` An instance of `OpenTelemetry Collector` is now deployed to
          the `garden` namespace of both `Garden` and `Seed` clusters. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13481](https://redirect.github.com/gardener/gardener/pull/13481)]\n-
          `[OPERATOR]` Gardener can now support clusters with Kubernetes version 1.35.
          To allow creation/update of 1.35 clusters you will have to update the version
          of your provider extension(s) to a version that supports 1.35 as well. Please
          consult the respective releases and notes in the provider extension's repository.
          by [@&#8203;timuthy](https://redirect.github.com/timuthy) \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
          `[USER]` The `Shoot` field `.spec.seedSelector` can now be adjusted for
          already scheduled shoots, as long as the new selector still selects the
          assigned seed. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13920](https://redirect.github.com/gardener/gardener/pull/13920)]\n-
          `[DEVELOPER]` gardenctl in local setup by [@&#8203;hown3d](https://redirect.github.com/hown3d)
          \\[[#&#8203;13842](https://redirect.github.com/gardener/gardener/pull/13842)]\n-
          `[DEVELOPER]` Gardener can now support clusters with Kubernetes version
          `1.35`. Extension developers have to prepare individual extensions as well
          to work with `1.35`. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
          `[DEVELOPER]` Environment variable `MAX_PARALLEL_WORKERS` can now be used
          to control the number of parallel workers that are spawned during the call
          to the `make generate` target. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13903](https://redirect.github.com/gardener/gardener/pull/13903)]\n\n####
          \U0001F41B Bug Fixes\n\n- `[OPERATOR]` An issue causing unwanted reconciliations
          of Secrets and other objects due to cache resyncs in the project activity
          reconciler is now fixed. by [@&#8203;shafeeqes](https://redirect.github.com/shafeeqes)
          \\[[#&#8203;13945](https://redirect.github.com/gardener/gardener/pull/13945)]\n-
          `[OPERATOR]` This PR fixes webhook certificate reconciliation to properly
          apply changes in webhook configurations. by [@&#8203;acumino](https://redirect.github.com/acumino)
          \\[[#&#8203;13971](https://redirect.github.com/gardener/gardener/pull/13971)]\n-
          `[OPERATOR]` Fixes a bug when feature gate UseUnifiedHTTPProxyPort was used
          in conjunction with a seed load balancer using proxy protocol. by [@&#8203;maboehm](https://redirect.github.com/maboehm)
          \\[[#&#8203;13832](https://redirect.github.com/gardener/gardener/pull/13832)]\n-
          `[OPERATOR]` Fixes a bug in the `UsesUnifiedHTTPProxyPort` constraint, when
          feature gate `UseUnifiedHTTPProxyPort` was used and then disabled again
          by [@&#8203;maboehm](https://redirect.github.com/maboehm) \\[[#&#8203;13844](https://redirect.github.com/gardener/gardener/pull/13844)]\n-
          `[USER]` gardener-apiserver: An issue in gardener-apiserver v1.135.0 causing
          `kubectl apply` for a Shoot to be wrongly rejected with \"spec.dns.providers\\[0]:
          Required value: non-primary DNS providers must specify `type` and `credentialsRef`\"
          in some cases is now fixed. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
          \\[[#&#8203;13861](https://redirect.github.com/gardener/gardener/pull/13861)]\n-
          `[DEVELOPER]` Enable MCM (cluster-autoscaler) to scale `provider-local`
          `Node`s. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
          \\[[#&#8203;13804](https://redirect.github.com/gardener/gardener/pull/13804)]\n\n####
          \U0001F3C3 Others\n\n- `[OPERATOR]` Audit policy configmap for the gardener
          API server referenced in the garden resource is now validated. by [@&#8203;acumino](https://redirect.github.com/acumino)
          \\[[#&#8203;13478](https://redirect.github.com/gardener/gardener/pull/13478)]\n-
          `[OPERATOR]` Upon gardenlet start all existing opentelemetry collector pipelines
          in shoot control planes will be migrated to the expected content. by [@&#8203;nickytd](https://redirect.github.com/nickytd)
          \\[[#&#8203;14054](https://redirect.github.com/gardener/gardener/pull/14054)]\n-
          `[OPERATOR]` The mutating `ShootDNS` admission plugin is now also a validating
          one. Validations which are executed by this admission plugin during the
          mutation phase are now moved to the validating `ShootDNS` admission plugin.
          by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov) \\[[#&#8203;13910](https://redirect.github.com/gardener/gardener/pull/13910)]\n-
          `[OPERATOR]` Add Prometheus health check rule in the cache Prometheus to
          ensure the presence of `kubelet` volume stats metrics. by [@&#8203;vicwicker](https://redirect.github.com/vicwicker)
          \\[[#&#8203;13855](https://redirect.github.com/gardener/gardener/pull/13855)]\n-
          `[OPERATOR]` Federate `shoot:node_operating_system:sum` time series from
          the garden to the longterm Prometheus. by [@&#8203;vicwicker](https://redirect.github.com/vicwicker)
          \\[[#&#8203;13805](https://redirect.github.com/gardener/gardener/pull/13805)]\n-
          `[OPERATOR]` Fix flaky test for latest MCM release v0.61.x by [@&#8203;r4mek](https://redirect.github.com/r4mek)
          \\[[#&#8203;13916](https://redirect.github.com/gardener/gardener/pull/13916)]\n-
          `[OPERATOR]` The majority of the VerticalPodAutoscaler resources managed
          by Gardener are enhanced to define an explicit container policy for all
          containers that need to be auto-scaled and to have a `catch-all` container
          policy (`containerName: '*'` and `mode: Off`) always. by [@&#8203;voelzmo](https://redirect.github.com/voelzmo)
          \\[[#&#8203;13819](https://redirect.github.com/gardener/gardener/pull/13819)]\n-
          `[OPERATOR]` The following dependencies have been updated:\n  - `gardener/machine-controller-manager`
          from `v0.60.2` to `v0.61.1`. [Release Notes](https://redirect.github.com/gardener/machine-controller-manager/releases/tag/v0.61.1)
          by [@&#8203;aaronfern](https://redirect.github.com/aaronfern) \\[[#&#8203;13865](https://redirect.github.com/gardener/gardener/pull/13865)]\n-
          `[OPERATOR]` The existing `TooManyEtcdSnapshotCompactionJobsFailing` alert
          has been renamed to `EtcdSnapshotCompactionJobsFailingForSeed` and its expression
          has been fixed to correctly measure the fraction of namespaces with failures.\\\n
          \ Two new per-namespace alerts (`EtcdSnapshotCompactionJobsFailingForNamespace`
          and `EtcdFullSnapshotsFailingForNamespace`) have been added to help operators
          identify specific shoot clusters where compaction jobs or full snapshots
          are failing above the 10% threshold. by [@&#8203;anveshreddy18](https://redirect.github.com/anveshreddy18)
          \\[[#&#8203;14053](https://redirect.github.com/gardener/gardener/pull/14053)]\n-
          `[OPERATOR]` Use Kubernetes 1.34.3 in the local setup. by [@&#8203;vicwicker](https://redirect.github.com/vicwicker)
          \\[[#&#8203;13855](https://redirect.github.com/gardener/gardener/pull/13855)]\n-
          `[USER]` Allow `NamespacedCloudProfile.spec.limits` to be decreased. by
          [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein) \\[[#&#8203;13724](https://redirect.github.com/gardener/gardener/pull/13724)]\n-
          `[DEVELOPER]` The component checklist rule for **Define a `VerticalPodAutoscaler`**
          is enhanced with the convention that a VPA should define an explicit container
          policy for all containers that need to be auto-scaled and should have a
          `catch-all` container policy (`containerName: '*'` and `mode: Off`) always.
          For more details, refer to the[Component Checklist](https://redirect.github.com/gardener/gardener/blob/v1.136.0/docs/development/component-checklist.md).
          by [@&#8203;voelzmo](https://redirect.github.com/voelzmo) \\[[#&#8203;13819](https://redirect.github.com/gardener/gardener/pull/13819)]\n-
          `[DEVELOPER]` The TM tests are now adapted to run against Kubernetes 1.35.
          by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov) \\[[#&#8203;13995](https://redirect.github.com/gardener/gardener/pull/13995)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/etcd-druid`
          from `v0.34.0` to `v0.35.0`. [Release Notes](https://redirect.github.com/gardener/etcd-druid/releases/tag/v0.35.0)\n
          \ - `github.com/gardener/etcd-druid/api` from `v0.34.0` to `v0.35.0`. by
          [@&#8203;renormalize](https://redirect.github.com/renormalize) \\[[#&#8203;13950](https://redirect.github.com/gardener/gardener/pull/13950)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
          from `1.83.3` to `1.83.4`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.4)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13970](https://redirect.github.com/gardener/gardener/pull/13970)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/ingress-nginx/controller-chroot`
          from `v1.14.1` to `v1.14.2`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13880](https://redirect.github.com/gardener/gardener/pull/13880)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
          from `1.83.4` to `1.83.5`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.5)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13983](https://redirect.github.com/gardener/gardener/pull/13983)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/cpa/cluster-proportional-autoscaler`
          from `v1.9.0` to `v1.10.3`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13905](https://redirect.github.com/gardener/gardener/pull/13905)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gcr.io/istio-release/pilot`
          from `1.27.5` to `1.27.6`.\n  - `gcr.io/istio-release/proxyv2` from `1.27.5`
          to `1.27.6`.\n  - `istio.io/api` from `v1.27.5` to `v1.27.6`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13986](https://redirect.github.com/gardener/gardener/pull/13986)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
          from `1.83.2` to `1.83.3`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.3)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13917](https://redirect.github.com/gardener/gardener/pull/13917)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/terminal-controller-manager`
          from `v0.34.0` to `v0.35.0`. [Release Notes](https://redirect.github.com/gardener/terminal-controller-manager/releases/tag/v0.35.0)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13953](https://redirect.github.com/gardener/gardener/pull/13953)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/vpn2`
          from `0.46.1` to `0.46.2`. [Release Notes](https://redirect.github.com/gardener/vpn2/releases/tag/0.46.2)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13959](https://redirect.github.com/gardener/gardener/pull/13959)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/prometheus/alertmanager`
          from `v0.30.1` to `v0.31.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13931](https://redirect.github.com/gardener/gardener/pull/13931)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/metrics-server/metrics-server`
          from `v0.8.0` to `v0.8.1`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13912](https://redirect.github.com/gardener/gardener/pull/13912)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/ingress-nginx/controller-chroot`
          from `v1.14.2` to `v1.14.3`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13940](https://redirect.github.com/gardener/gardener/pull/13940)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/alpine-conntrack`
          from `3.23.2` to `3.23.3`. [Release Notes](https://redirect.github.com/gardener/alpine-conntrack/releases/tag/3.23.3)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13948](https://redirect.github.com/gardener/gardener/pull/13948)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/kiwigrid/k8s-sidecar`
          from `2.4.0` to `2.5.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13839](https://redirect.github.com/gardener/gardener/pull/13839)]\n\n####
          Helm Charts\n\n- controlplane: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.136.0`\n-
          gardenlet: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.136.0`\n-
          operator: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.136.0`\n-
          resource-manager: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.136.0`\n\n####
          Container (OCI) Images\n\n- admission-controller: `europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.136.0`\n-
          apiserver: `europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.136.0`\n-
          controller-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.136.0`\n-
          gardenadm: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.136.0`\n-
          gardenlet: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.136.0`\n-
          node-agent: `europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.136.0`\n-
          operator: `europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.136.0`\n-
          resource-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.136.0`\n-
          scheduler: `europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.136.0`\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR is behind base branch, or
          you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this
          PR and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44LjUiLCJ1cGRhdGVkSW5WZXIiOiI0My44LjUiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/YAKEcloud/yake-ansible/pull/502
        commit_id: be3463606794143a98744cc08332321c7a95f31d
        patchset: be3463606794143a98744cc08332321c7a95f31d
        project:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          name: YAKEcloud/yake-ansible
          short_name: yake-ansible
        src_dir: src/github.com/YAKEcloud/yake-ansible
        topic: null
      buildset: 9dd8b17f8b8c4feaaaaa43122471b673
      buildset_refs:
      - branch: main
        change: '502'
        change_message: "chore(deps): update dependency gardener/gardener to v1.136.0\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [gardener/gardener](https://redirect.github.com/gardener/gardener) | minor
          | `1.135.1` \u2192 `1.136.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>gardener/gardener
          (gardener/gardener)</summary>\n\n### [`v1.136.0`](https://redirect.github.com/gardener/gardener/releases/tag/v1.136.0)\n\n[Compare
          Source](https://redirect.github.com/gardener/gardener/compare/v1.135.1...v1.136.0)\n\n###
          \\[github.com/gardener/gardener:v1.136.0]\n\n#### \u26A0\uFE0F Breaking
          Changes\n\n- `[OPERATOR]` The Garden's `.spec.virtualCluster.kubernetes.kubeAPIServer.eventTTL`
          field's valid values range is restricted from `[0, 168h]` to `[0, 24h]`.
          The new range is imposed for new Garden creations and for field value updates.
          Already existing Gardens which specify invalid values (more than `24h`)
          are not affected. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
          \\[[#&#8203;13830](https://redirect.github.com/gardener/gardener/pull/13830)]\n-
          `[OPERATOR]` The ManagedSeedSet's `.spec.shootTemplate.spec.kubernetes.kubeAPIServer.eventTTL`
          field's valid values range is restricted from `[0, 168h]` to `[0, 24h]`.
          The new range is imposed for new ManagedSeedSet creations and for field
          value updates. Already existing ManagedSeedSets which specify invalid values
          (more than `24h`) are not affected. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
          \\[[#&#8203;13830](https://redirect.github.com/gardener/gardener/pull/13830)]\n-
          `[USER]` Shoot addons (`.spec.addons`) have been deprecated and will be
          forbidden starting with Kubernetes `1.35`. Their usage was already discouraged
          for productive clusters, as they now only include unmaintained components
          (Kubernetes dashboard and Ingress NGINX Controller). by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
          `[USER]` The shoot field `.spec.kubernetes.kubeScheduler.kubeMaxPDVols`
          has been deprecated and will be forbidden starting with Kubernetes `1.35`.
          The maximum number of attachable volumes is maintained by the respective
          CSI plugin. by [@&#8203;timuthy](https://redirect.github.com/timuthy) \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
          `[USER]` The Shoot's `.spec.kubernetes.kubeAPIServer.eventTTL` field's valid
          values range is restricted from `[0, 168h]` to `[0, 24h]`. The new range
          is imposed for new Shoots creations and for field value updates. Already
          existing Shoots which specify invalid values (more than `24h`) are not affected.
          by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov) \\[[#&#8203;13830](https://redirect.github.com/gardener/gardener/pull/13830)]\n-
          `[USER]` Downgrading the machine image version (`.spec.provider.workers[].machine.image.version`)
          is not allowed for worker pools using the `AutoInPlaceUpdate` or `ManualInPlaceUpdate`
          strategy, as Gardener does not support machine image downgrades for any
          operating system currently.  For `AutoRollingUpdate`, the entire node is
          replaced, so this limitation does not apply. by [@&#8203;shafeeqes](https://redirect.github.com/shafeeqes)
          \\[[#&#8203;13828](https://redirect.github.com/gardener/gardener/pull/13828)]\n-
          `[USER]` The shoot field `.spec.kubernetes.kubeAPIServer.watchCacheSizes.default`
          has been deprecated and will be forbidden starting with Kubernetes `1.35`.
          Watch cache sizes are automatically sized by Kubernetes. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
          `[USER]` Setting `.spec.kubernetes.kubeAPIServer.enableAnonymousAuthentication`
          in the `Shoot` spec is forbidden for clusters with Kubernetes version >=
          1.35. Users that enable anonymous authentication should use Structured Authentication
          with [anonymous authenticator](https://redirect.github.com/gardener/gardener/blob/master/docs/usage/shoot/shoot_access.md#configuring-anonymous-authentication)
          instead. by [@&#8203;dimityrmirchev](https://redirect.github.com/dimityrmirchev)
          \\[[#&#8203;13707](https://redirect.github.com/gardener/gardener/pull/13707)]\n-
          `[DEVELOPER]` The healthcheck controller now supports the `garden` extension
          class. Health check client interfaces have been renamed from `SeedClient/ShootClient`
          to `SourceClient/TargetClient` for better abstraction across extension classes.
          The `PreCheckFunc` method signature has been changed to accept `any` for
          cluster or garden object. by [@&#8203;theoddora](https://redirect.github.com/theoddora)
          \\[[#&#8203;13789](https://redirect.github.com/gardener/gardener/pull/13789)]\n\n####
          \U0001F4F0 Noteworthy\n\n- `[OPERATOR]` New health and readiness checks
          have been added to vpn-seed-server to improve availability and reduce log
          clutter. by [@&#8203;domdom82](https://redirect.github.com/domdom82) \\[[#&#8203;13802](https://redirect.github.com/gardener/gardener/pull/13802)]\n-
          `[OPERATOR]` The `Shoot` spec has a new field `spec.kubernetes.kubeAPIServer.encryptionConfig.provider.type`,
          which currently can only be set to `aescbc`. by [@&#8203;AleksandarSavchev](https://redirect.github.com/AleksandarSavchev)
          \\[[#&#8203;13732](https://redirect.github.com/gardener/gardener/pull/13732)]\n-
          `[OPERATOR]` For Kubernetes virtual clusters `>= 1.33`, we now deploy both
          `Endpoints` and `EndpointSlice` resources for the APIService connection
          between virtual-garden-kube-apiserver and gardener-apiserver. by [@&#8203;acumino](https://redirect.github.com/acumino)
          \\[[#&#8203;14041](https://redirect.github.com/gardener/gardener/pull/14041)]\n-
          `[OPERATOR]` The `Garden` spec has 2 new fields `spec.virtualCluster.kubernetes.kubeAPIServer.encryptionConfig.provider.type`and
          `spec.virtualCluster.gardener.gardenerAPIServer.encryptionConfig.provider.type`,
          which currently can only be set to `aescbc`. by [@&#8203;AleksandarSavchev](https://redirect.github.com/AleksandarSavchev)
          \\[[#&#8203;13732](https://redirect.github.com/gardener/gardener/pull/13732)]\n-
          `[OPERATOR]` The `OpenTelemetryCollector` feature gate has been promoted
          to Beta and is enabled by default. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13851](https://redirect.github.com/gardener/gardener/pull/13851)]\n-
          `[USER]` The field `.spec.kubernetes.kubeAPIServer.enableAnonymousAuthentication`
          in the `Shoot` spec will be automatically set to `nil` if users set it `false`
          as these two are equivalent across the codebase. The field is deprecated
          and users that enable anonymous authentication should migrate to Structured
          Authentication with [anonymous authenticator](https://redirect.github.com/gardener/gardener/blob/master/docs/usage/shoot/shoot_access.md#configuring-anonymous-authentication)
          instead. by [@&#8203;dimityrmirchev](https://redirect.github.com/dimityrmirchev)
          \\[[#&#8203;13707](https://redirect.github.com/gardener/gardener/pull/13707)]\n-
          `[USER]` It is now explicitly supported to use short worker OS image versions
          in the `CloudProfile`, which are not defaulted when creating or updating
          the `Shoot` spec. by [@&#8203;Gerrit91](https://redirect.github.com/Gerrit91)
          \\[[#&#8203;13785](https://redirect.github.com/gardener/gardener/pull/13785)]\n-
          `[USER]` The shoot deletion flow has been enhanced to tolerate leftover
          resources in the following situations:\n  - Objects that belong to namespaces
          which have already been deleted (finalized).\n  - Objects that were created
          after the cleanup process began for the first time, plus the finalize grace
          period. by [@&#8203;timuthy](https://redirect.github.com/timuthy) \\[[#&#8203;13918](https://redirect.github.com/gardener/gardener/pull/13918)]\n\n####
          \u2728 New Features\n\n- `[OPERATOR]` Gardener now supports pulling Helm
          charts from OCI registries that use custom or self-signed TLS certificates.
          This is particularly useful for air-gapped environments or when using private
          container registries with custom certificate authorities.\n\n  A new `caBundleSecretRef`
          field has been added to the `ociRepository` configuration in the following
          resources:\n\n  - `core.gardener.cloud/v1.ControllerDeployment`: `.helm.ociRepository.caBundleSecretRef`\n
          \ - `core.gardener.cloud/v1beta1.ControllerDeployment`: `.helm.ociRepository.caBundleSecretRef`\n
          \ - `operator.gardener.cloud/v1alpha1.Extension`: `.spec.deployment.{admission.{runtimeCluster,virtualCluster},extension}.helm.ociRepository.caBundleSecretRef`\n\n
          \ The field references a secret in the `garden` namespace containing a PEM-encoded
          CA certificate bundle (data key: `bundle.crt`). For gardenlet usage, the
          secret must be labeled with `gardener.cloud/role=oci-ca-bundle`. by [@&#8203;shafeeqes](https://redirect.github.com/shafeeqes)
          \\[[#&#8203;13868](https://redirect.github.com/gardener/gardener/pull/13868)]\n-
          `[OPERATOR]` The `gardener-controller-manager` now increases all `ResourceQuota`s
          in project namespaces when a Gardener update leads to Gardener creating
          more resources in them. This was introduced to prevent failing Shoot reconciliations
          when `ResourceQuota`s of projects are near their limit. by [@&#8203;tobschli](https://redirect.github.com/tobschli)
          \\[[#&#8203;13850](https://redirect.github.com/gardener/gardener/pull/13850)]\n-
          `[OPERATOR]` Introduce fluent-bit-plugin v1 with OTLP support behind the
          OpenTelemetryCollector feature gate and adjust fluent-bit resources to select
          OTLP. by [@&#8203;nickytd](https://redirect.github.com/nickytd) \\[[#&#8203;13961](https://redirect.github.com/gardener/gardener/pull/13961)]\n-
          `[OPERATOR]` Introduced the Victoria Operator as a component to Seed & Garden
          Clusters. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13708](https://redirect.github.com/gardener/gardener/pull/13708)]\n-
          `[OPERATOR]` When configuring a custom CNI path for containerd, GNA will
          now - in addition to checking the version of the config.toml config file
          - query containerd for its version and use the `bin_dirs` path with a string
          array if the config file version is 3 and containerd >= 2.2 is detected.
          by [@&#8203;MrBatschner](https://redirect.github.com/MrBatschner) \\[[#&#8203;13826](https://redirect.github.com/gardener/gardener/pull/13826)]\n-
          `[OPERATOR]` An instance of `OpenTelemetry Collector` is now deployed to
          the `garden` namespace of both `Garden` and `Seed` clusters. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13481](https://redirect.github.com/gardener/gardener/pull/13481)]\n-
          `[OPERATOR]` Gardener can now support clusters with Kubernetes version 1.35.
          To allow creation/update of 1.35 clusters you will have to update the version
          of your provider extension(s) to a version that supports 1.35 as well. Please
          consult the respective releases and notes in the provider extension's repository.
          by [@&#8203;timuthy](https://redirect.github.com/timuthy) \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
          `[USER]` The `Shoot` field `.spec.seedSelector` can now be adjusted for
          already scheduled shoots, as long as the new selector still selects the
          assigned seed. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13920](https://redirect.github.com/gardener/gardener/pull/13920)]\n-
          `[DEVELOPER]` gardenctl in local setup by [@&#8203;hown3d](https://redirect.github.com/hown3d)
          \\[[#&#8203;13842](https://redirect.github.com/gardener/gardener/pull/13842)]\n-
          `[DEVELOPER]` Gardener can now support clusters with Kubernetes version
          `1.35`. Extension developers have to prepare individual extensions as well
          to work with `1.35`. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
          `[DEVELOPER]` Environment variable `MAX_PARALLEL_WORKERS` can now be used
          to control the number of parallel workers that are spawned during the call
          to the `make generate` target. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13903](https://redirect.github.com/gardener/gardener/pull/13903)]\n\n####
          \U0001F41B Bug Fixes\n\n- `[OPERATOR]` An issue causing unwanted reconciliations
          of Secrets and other objects due to cache resyncs in the project activity
          reconciler is now fixed. by [@&#8203;shafeeqes](https://redirect.github.com/shafeeqes)
          \\[[#&#8203;13945](https://redirect.github.com/gardener/gardener/pull/13945)]\n-
          `[OPERATOR]` This PR fixes webhook certificate reconciliation to properly
          apply changes in webhook configurations. by [@&#8203;acumino](https://redirect.github.com/acumino)
          \\[[#&#8203;13971](https://redirect.github.com/gardener/gardener/pull/13971)]\n-
          `[OPERATOR]` Fixes a bug when feature gate UseUnifiedHTTPProxyPort was used
          in conjunction with a seed load balancer using proxy protocol. by [@&#8203;maboehm](https://redirect.github.com/maboehm)
          \\[[#&#8203;13832](https://redirect.github.com/gardener/gardener/pull/13832)]\n-
          `[OPERATOR]` Fixes a bug in the `UsesUnifiedHTTPProxyPort` constraint, when
          feature gate `UseUnifiedHTTPProxyPort` was used and then disabled again
          by [@&#8203;maboehm](https://redirect.github.com/maboehm) \\[[#&#8203;13844](https://redirect.github.com/gardener/gardener/pull/13844)]\n-
          `[USER]` gardener-apiserver: An issue in gardener-apiserver v1.135.0 causing
          `kubectl apply` for a Shoot to be wrongly rejected with \"spec.dns.providers\\[0]:
          Required value: non-primary DNS providers must specify `type` and `credentialsRef`\"
          in some cases is now fixed. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
          \\[[#&#8203;13861](https://redirect.github.com/gardener/gardener/pull/13861)]\n-
          `[DEVELOPER]` Enable MCM (cluster-autoscaler) to scale `provider-local`
          `Node`s. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
          \\[[#&#8203;13804](https://redirect.github.com/gardener/gardener/pull/13804)]\n\n####
          \U0001F3C3 Others\n\n- `[OPERATOR]` Audit policy configmap for the gardener
          API server referenced in the garden resource is now validated. by [@&#8203;acumino](https://redirect.github.com/acumino)
          \\[[#&#8203;13478](https://redirect.github.com/gardener/gardener/pull/13478)]\n-
          `[OPERATOR]` Upon gardenlet start all existing opentelemetry collector pipelines
          in shoot control planes will be migrated to the expected content. by [@&#8203;nickytd](https://redirect.github.com/nickytd)
          \\[[#&#8203;14054](https://redirect.github.com/gardener/gardener/pull/14054)]\n-
          `[OPERATOR]` The mutating `ShootDNS` admission plugin is now also a validating
          one. Validations which are executed by this admission plugin during the
          mutation phase are now moved to the validating `ShootDNS` admission plugin.
          by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov) \\[[#&#8203;13910](https://redirect.github.com/gardener/gardener/pull/13910)]\n-
          `[OPERATOR]` Add Prometheus health check rule in the cache Prometheus to
          ensure the presence of `kubelet` volume stats metrics. by [@&#8203;vicwicker](https://redirect.github.com/vicwicker)
          \\[[#&#8203;13855](https://redirect.github.com/gardener/gardener/pull/13855)]\n-
          `[OPERATOR]` Federate `shoot:node_operating_system:sum` time series from
          the garden to the longterm Prometheus. by [@&#8203;vicwicker](https://redirect.github.com/vicwicker)
          \\[[#&#8203;13805](https://redirect.github.com/gardener/gardener/pull/13805)]\n-
          `[OPERATOR]` Fix flaky test for latest MCM release v0.61.x by [@&#8203;r4mek](https://redirect.github.com/r4mek)
          \\[[#&#8203;13916](https://redirect.github.com/gardener/gardener/pull/13916)]\n-
          `[OPERATOR]` The majority of the VerticalPodAutoscaler resources managed
          by Gardener are enhanced to define an explicit container policy for all
          containers that need to be auto-scaled and to have a `catch-all` container
          policy (`containerName: '*'` and `mode: Off`) always. by [@&#8203;voelzmo](https://redirect.github.com/voelzmo)
          \\[[#&#8203;13819](https://redirect.github.com/gardener/gardener/pull/13819)]\n-
          `[OPERATOR]` The following dependencies have been updated:\n  - `gardener/machine-controller-manager`
          from `v0.60.2` to `v0.61.1`. [Release Notes](https://redirect.github.com/gardener/machine-controller-manager/releases/tag/v0.61.1)
          by [@&#8203;aaronfern](https://redirect.github.com/aaronfern) \\[[#&#8203;13865](https://redirect.github.com/gardener/gardener/pull/13865)]\n-
          `[OPERATOR]` The existing `TooManyEtcdSnapshotCompactionJobsFailing` alert
          has been renamed to `EtcdSnapshotCompactionJobsFailingForSeed` and its expression
          has been fixed to correctly measure the fraction of namespaces with failures.\\\n
          \ Two new per-namespace alerts (`EtcdSnapshotCompactionJobsFailingForNamespace`
          and `EtcdFullSnapshotsFailingForNamespace`) have been added to help operators
          identify specific shoot clusters where compaction jobs or full snapshots
          are failing above the 10% threshold. by [@&#8203;anveshreddy18](https://redirect.github.com/anveshreddy18)
          \\[[#&#8203;14053](https://redirect.github.com/gardener/gardener/pull/14053)]\n-
          `[OPERATOR]` Use Kubernetes 1.34.3 in the local setup. by [@&#8203;vicwicker](https://redirect.github.com/vicwicker)
          \\[[#&#8203;13855](https://redirect.github.com/gardener/gardener/pull/13855)]\n-
          `[USER]` Allow `NamespacedCloudProfile.spec.limits` to be decreased. by
          [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein) \\[[#&#8203;13724](https://redirect.github.com/gardener/gardener/pull/13724)]\n-
          `[DEVELOPER]` The component checklist rule for **Define a `VerticalPodAutoscaler`**
          is enhanced with the convention that a VPA should define an explicit container
          policy for all containers that need to be auto-scaled and should have a
          `catch-all` container policy (`containerName: '*'` and `mode: Off`) always.
          For more details, refer to the[Component Checklist](https://redirect.github.com/gardener/gardener/blob/v1.136.0/docs/development/component-checklist.md).
          by [@&#8203;voelzmo](https://redirect.github.com/voelzmo) \\[[#&#8203;13819](https://redirect.github.com/gardener/gardener/pull/13819)]\n-
          `[DEVELOPER]` The TM tests are now adapted to run against Kubernetes 1.35.
          by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov) \\[[#&#8203;13995](https://redirect.github.com/gardener/gardener/pull/13995)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/etcd-druid`
          from `v0.34.0` to `v0.35.0`. [Release Notes](https://redirect.github.com/gardener/etcd-druid/releases/tag/v0.35.0)\n
          \ - `github.com/gardener/etcd-druid/api` from `v0.34.0` to `v0.35.0`. by
          [@&#8203;renormalize](https://redirect.github.com/renormalize) \\[[#&#8203;13950](https://redirect.github.com/gardener/gardener/pull/13950)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
          from `1.83.3` to `1.83.4`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.4)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13970](https://redirect.github.com/gardener/gardener/pull/13970)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/ingress-nginx/controller-chroot`
          from `v1.14.1` to `v1.14.2`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13880](https://redirect.github.com/gardener/gardener/pull/13880)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
          from `1.83.4` to `1.83.5`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.5)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13983](https://redirect.github.com/gardener/gardener/pull/13983)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/cpa/cluster-proportional-autoscaler`
          from `v1.9.0` to `v1.10.3`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13905](https://redirect.github.com/gardener/gardener/pull/13905)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gcr.io/istio-release/pilot`
          from `1.27.5` to `1.27.6`.\n  - `gcr.io/istio-release/proxyv2` from `1.27.5`
          to `1.27.6`.\n  - `istio.io/api` from `v1.27.5` to `v1.27.6`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13986](https://redirect.github.com/gardener/gardener/pull/13986)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
          from `1.83.2` to `1.83.3`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.3)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13917](https://redirect.github.com/gardener/gardener/pull/13917)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/terminal-controller-manager`
          from `v0.34.0` to `v0.35.0`. [Release Notes](https://redirect.github.com/gardener/terminal-controller-manager/releases/tag/v0.35.0)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13953](https://redirect.github.com/gardener/gardener/pull/13953)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/vpn2`
          from `0.46.1` to `0.46.2`. [Release Notes](https://redirect.github.com/gardener/vpn2/releases/tag/0.46.2)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13959](https://redirect.github.com/gardener/gardener/pull/13959)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/prometheus/alertmanager`
          from `v0.30.1` to `v0.31.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13931](https://redirect.github.com/gardener/gardener/pull/13931)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/metrics-server/metrics-server`
          from `v0.8.0` to `v0.8.1`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13912](https://redirect.github.com/gardener/gardener/pull/13912)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/ingress-nginx/controller-chroot`
          from `v1.14.2` to `v1.14.3`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13940](https://redirect.github.com/gardener/gardener/pull/13940)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/alpine-conntrack`
          from `3.23.2` to `3.23.3`. [Release Notes](https://redirect.github.com/gardener/alpine-conntrack/releases/tag/3.23.3)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13948](https://redirect.github.com/gardener/gardener/pull/13948)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/kiwigrid/k8s-sidecar`
          from `2.4.0` to `2.5.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13839](https://redirect.github.com/gardener/gardener/pull/13839)]\n\n####
          Helm Charts\n\n- controlplane: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.136.0`\n-
          gardenlet: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.136.0`\n-
          operator: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.136.0`\n-
          resource-manager: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.136.0`\n\n####
          Container (OCI) Images\n\n- admission-controller: `europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.136.0`\n-
          apiserver: `europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.136.0`\n-
          controller-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.136.0`\n-
          gardenadm: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.136.0`\n-
          gardenlet: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.136.0`\n-
          node-agent: `europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.136.0`\n-
          operator: `europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.136.0`\n-
          resource-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.136.0`\n-
          scheduler: `europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.136.0`\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR is behind base branch, or
          you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this
          PR and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44LjUiLCJ1cGRhdGVkSW5WZXIiOiI0My44LjUiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/YAKEcloud/yake-ansible/pull/502
        commit_id: be3463606794143a98744cc08332321c7a95f31d
        patchset: be3463606794143a98744cc08332321c7a95f31d
        project:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          name: YAKEcloud/yake-ansible
          short_name: yake-ansible
        src_dir: src/github.com/YAKEcloud/yake-ansible
        topic: null
      change: '502'
      change_message: "chore(deps): update dependency gardener/gardener to v1.136.0\n\nThis
        PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
        [gardener/gardener](https://redirect.github.com/gardener/gardener) | minor
        | `1.135.1` \u2192 `1.136.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>gardener/gardener
        (gardener/gardener)</summary>\n\n### [`v1.136.0`](https://redirect.github.com/gardener/gardener/releases/tag/v1.136.0)\n\n[Compare
        Source](https://redirect.github.com/gardener/gardener/compare/v1.135.1...v1.136.0)\n\n###
        \\[github.com/gardener/gardener:v1.136.0]\n\n#### \u26A0\uFE0F Breaking Changes\n\n-
        `[OPERATOR]` The Garden's `.spec.virtualCluster.kubernetes.kubeAPIServer.eventTTL`
        field's valid values range is restricted from `[0, 168h]` to `[0, 24h]`. The
        new range is imposed for new Garden creations and for field value updates.
        Already existing Gardens which specify invalid values (more than `24h`) are
        not affected. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
        \\[[#&#8203;13830](https://redirect.github.com/gardener/gardener/pull/13830)]\n-
        `[OPERATOR]` The ManagedSeedSet's `.spec.shootTemplate.spec.kubernetes.kubeAPIServer.eventTTL`
        field's valid values range is restricted from `[0, 168h]` to `[0, 24h]`. The
        new range is imposed for new ManagedSeedSet creations and for field value
        updates. Already existing ManagedSeedSets which specify invalid values (more
        than `24h`) are not affected. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
        \\[[#&#8203;13830](https://redirect.github.com/gardener/gardener/pull/13830)]\n-
        `[USER]` Shoot addons (`.spec.addons`) have been deprecated and will be forbidden
        starting with Kubernetes `1.35`. Their usage was already discouraged for productive
        clusters, as they now only include unmaintained components (Kubernetes dashboard
        and Ingress NGINX Controller). by [@&#8203;timuthy](https://redirect.github.com/timuthy)
        \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
        `[USER]` The shoot field `.spec.kubernetes.kubeScheduler.kubeMaxPDVols` has
        been deprecated and will be forbidden starting with Kubernetes `1.35`. The
        maximum number of attachable volumes is maintained by the respective CSI plugin.
        by [@&#8203;timuthy](https://redirect.github.com/timuthy) \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
        `[USER]` The Shoot's `.spec.kubernetes.kubeAPIServer.eventTTL` field's valid
        values range is restricted from `[0, 168h]` to `[0, 24h]`. The new range is
        imposed for new Shoots creations and for field value updates. Already existing
        Shoots which specify invalid values (more than `24h`) are not affected. by
        [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov) \\[[#&#8203;13830](https://redirect.github.com/gardener/gardener/pull/13830)]\n-
        `[USER]` Downgrading the machine image version (`.spec.provider.workers[].machine.image.version`)
        is not allowed for worker pools using the `AutoInPlaceUpdate` or `ManualInPlaceUpdate`
        strategy, as Gardener does not support machine image downgrades for any operating
        system currently.  For `AutoRollingUpdate`, the entire node is replaced, so
        this limitation does not apply. by [@&#8203;shafeeqes](https://redirect.github.com/shafeeqes)
        \\[[#&#8203;13828](https://redirect.github.com/gardener/gardener/pull/13828)]\n-
        `[USER]` The shoot field `.spec.kubernetes.kubeAPIServer.watchCacheSizes.default`
        has been deprecated and will be forbidden starting with Kubernetes `1.35`.
        Watch cache sizes are automatically sized by Kubernetes. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
        \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
        `[USER]` Setting `.spec.kubernetes.kubeAPIServer.enableAnonymousAuthentication`
        in the `Shoot` spec is forbidden for clusters with Kubernetes version >= 1.35.
        Users that enable anonymous authentication should use Structured Authentication
        with [anonymous authenticator](https://redirect.github.com/gardener/gardener/blob/master/docs/usage/shoot/shoot_access.md#configuring-anonymous-authentication)
        instead. by [@&#8203;dimityrmirchev](https://redirect.github.com/dimityrmirchev)
        \\[[#&#8203;13707](https://redirect.github.com/gardener/gardener/pull/13707)]\n-
        `[DEVELOPER]` The healthcheck controller now supports the `garden` extension
        class. Health check client interfaces have been renamed from `SeedClient/ShootClient`
        to `SourceClient/TargetClient` for better abstraction across extension classes.
        The `PreCheckFunc` method signature has been changed to accept `any` for cluster
        or garden object. by [@&#8203;theoddora](https://redirect.github.com/theoddora)
        \\[[#&#8203;13789](https://redirect.github.com/gardener/gardener/pull/13789)]\n\n####
        \U0001F4F0 Noteworthy\n\n- `[OPERATOR]` New health and readiness checks have
        been added to vpn-seed-server to improve availability and reduce log clutter.
        by [@&#8203;domdom82](https://redirect.github.com/domdom82) \\[[#&#8203;13802](https://redirect.github.com/gardener/gardener/pull/13802)]\n-
        `[OPERATOR]` The `Shoot` spec has a new field `spec.kubernetes.kubeAPIServer.encryptionConfig.provider.type`,
        which currently can only be set to `aescbc`. by [@&#8203;AleksandarSavchev](https://redirect.github.com/AleksandarSavchev)
        \\[[#&#8203;13732](https://redirect.github.com/gardener/gardener/pull/13732)]\n-
        `[OPERATOR]` For Kubernetes virtual clusters `>= 1.33`, we now deploy both
        `Endpoints` and `EndpointSlice` resources for the APIService connection between
        virtual-garden-kube-apiserver and gardener-apiserver. by [@&#8203;acumino](https://redirect.github.com/acumino)
        \\[[#&#8203;14041](https://redirect.github.com/gardener/gardener/pull/14041)]\n-
        `[OPERATOR]` The `Garden` spec has 2 new fields `spec.virtualCluster.kubernetes.kubeAPIServer.encryptionConfig.provider.type`and
        `spec.virtualCluster.gardener.gardenerAPIServer.encryptionConfig.provider.type`,
        which currently can only be set to `aescbc`. by [@&#8203;AleksandarSavchev](https://redirect.github.com/AleksandarSavchev)
        \\[[#&#8203;13732](https://redirect.github.com/gardener/gardener/pull/13732)]\n-
        `[OPERATOR]` The `OpenTelemetryCollector` feature gate has been promoted to
        Beta and is enabled by default. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
        \\[[#&#8203;13851](https://redirect.github.com/gardener/gardener/pull/13851)]\n-
        `[USER]` The field `.spec.kubernetes.kubeAPIServer.enableAnonymousAuthentication`
        in the `Shoot` spec will be automatically set to `nil` if users set it `false`
        as these two are equivalent across the codebase. The field is deprecated and
        users that enable anonymous authentication should migrate to Structured Authentication
        with [anonymous authenticator](https://redirect.github.com/gardener/gardener/blob/master/docs/usage/shoot/shoot_access.md#configuring-anonymous-authentication)
        instead. by [@&#8203;dimityrmirchev](https://redirect.github.com/dimityrmirchev)
        \\[[#&#8203;13707](https://redirect.github.com/gardener/gardener/pull/13707)]\n-
        `[USER]` It is now explicitly supported to use short worker OS image versions
        in the `CloudProfile`, which are not defaulted when creating or updating the
        `Shoot` spec. by [@&#8203;Gerrit91](https://redirect.github.com/Gerrit91)
        \\[[#&#8203;13785](https://redirect.github.com/gardener/gardener/pull/13785)]\n-
        `[USER]` The shoot deletion flow has been enhanced to tolerate leftover resources
        in the following situations:\n  - Objects that belong to namespaces which
        have already been deleted (finalized).\n  - Objects that were created after
        the cleanup process began for the first time, plus the finalize grace period.
        by [@&#8203;timuthy](https://redirect.github.com/timuthy) \\[[#&#8203;13918](https://redirect.github.com/gardener/gardener/pull/13918)]\n\n####
        \u2728 New Features\n\n- `[OPERATOR]` Gardener now supports pulling Helm charts
        from OCI registries that use custom or self-signed TLS certificates. This
        is particularly useful for air-gapped environments or when using private container
        registries with custom certificate authorities.\n\n  A new `caBundleSecretRef`
        field has been added to the `ociRepository` configuration in the following
        resources:\n\n  - `core.gardener.cloud/v1.ControllerDeployment`: `.helm.ociRepository.caBundleSecretRef`\n
        \ - `core.gardener.cloud/v1beta1.ControllerDeployment`: `.helm.ociRepository.caBundleSecretRef`\n
        \ - `operator.gardener.cloud/v1alpha1.Extension`: `.spec.deployment.{admission.{runtimeCluster,virtualCluster},extension}.helm.ociRepository.caBundleSecretRef`\n\n
        \ The field references a secret in the `garden` namespace containing a PEM-encoded
        CA certificate bundle (data key: `bundle.crt`). For gardenlet usage, the secret
        must be labeled with `gardener.cloud/role=oci-ca-bundle`. by [@&#8203;shafeeqes](https://redirect.github.com/shafeeqes)
        \\[[#&#8203;13868](https://redirect.github.com/gardener/gardener/pull/13868)]\n-
        `[OPERATOR]` The `gardener-controller-manager` now increases all `ResourceQuota`s
        in project namespaces when a Gardener update leads to Gardener creating more
        resources in them. This was introduced to prevent failing Shoot reconciliations
        when `ResourceQuota`s of projects are near their limit. by [@&#8203;tobschli](https://redirect.github.com/tobschli)
        \\[[#&#8203;13850](https://redirect.github.com/gardener/gardener/pull/13850)]\n-
        `[OPERATOR]` Introduce fluent-bit-plugin v1 with OTLP support behind the OpenTelemetryCollector
        feature gate and adjust fluent-bit resources to select OTLP. by [@&#8203;nickytd](https://redirect.github.com/nickytd)
        \\[[#&#8203;13961](https://redirect.github.com/gardener/gardener/pull/13961)]\n-
        `[OPERATOR]` Introduced the Victoria Operator as a component to Seed & Garden
        Clusters. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov) \\[[#&#8203;13708](https://redirect.github.com/gardener/gardener/pull/13708)]\n-
        `[OPERATOR]` When configuring a custom CNI path for containerd, GNA will now
        - in addition to checking the version of the config.toml config file - query
        containerd for its version and use the `bin_dirs` path with a string array
        if the config file version is 3 and containerd >= 2.2 is detected. by [@&#8203;MrBatschner](https://redirect.github.com/MrBatschner)
        \\[[#&#8203;13826](https://redirect.github.com/gardener/gardener/pull/13826)]\n-
        `[OPERATOR]` An instance of `OpenTelemetry Collector` is now deployed to the
        `garden` namespace of both `Garden` and `Seed` clusters. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
        \\[[#&#8203;13481](https://redirect.github.com/gardener/gardener/pull/13481)]\n-
        `[OPERATOR]` Gardener can now support clusters with Kubernetes version 1.35.
        To allow creation/update of 1.35 clusters you will have to update the version
        of your provider extension(s) to a version that supports 1.35 as well. Please
        consult the respective releases and notes in the provider extension's repository.
        by [@&#8203;timuthy](https://redirect.github.com/timuthy) \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
        `[USER]` The `Shoot` field `.spec.seedSelector` can now be adjusted for already
        scheduled shoots, as long as the new selector still selects the assigned seed.
        by [@&#8203;timuthy](https://redirect.github.com/timuthy) \\[[#&#8203;13920](https://redirect.github.com/gardener/gardener/pull/13920)]\n-
        `[DEVELOPER]` gardenctl in local setup by [@&#8203;hown3d](https://redirect.github.com/hown3d)
        \\[[#&#8203;13842](https://redirect.github.com/gardener/gardener/pull/13842)]\n-
        `[DEVELOPER]` Gardener can now support clusters with Kubernetes version `1.35`.
        Extension developers have to prepare individual extensions as well to work
        with `1.35`. by [@&#8203;timuthy](https://redirect.github.com/timuthy) \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
        `[DEVELOPER]` Environment variable `MAX_PARALLEL_WORKERS` can now be used
        to control the number of parallel workers that are spawned during the call
        to the `make generate` target. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
        \\[[#&#8203;13903](https://redirect.github.com/gardener/gardener/pull/13903)]\n\n####
        \U0001F41B Bug Fixes\n\n- `[OPERATOR]` An issue causing unwanted reconciliations
        of Secrets and other objects due to cache resyncs in the project activity
        reconciler is now fixed. by [@&#8203;shafeeqes](https://redirect.github.com/shafeeqes)
        \\[[#&#8203;13945](https://redirect.github.com/gardener/gardener/pull/13945)]\n-
        `[OPERATOR]` This PR fixes webhook certificate reconciliation to properly
        apply changes in webhook configurations. by [@&#8203;acumino](https://redirect.github.com/acumino)
        \\[[#&#8203;13971](https://redirect.github.com/gardener/gardener/pull/13971)]\n-
        `[OPERATOR]` Fixes a bug when feature gate UseUnifiedHTTPProxyPort was used
        in conjunction with a seed load balancer using proxy protocol. by [@&#8203;maboehm](https://redirect.github.com/maboehm)
        \\[[#&#8203;13832](https://redirect.github.com/gardener/gardener/pull/13832)]\n-
        `[OPERATOR]` Fixes a bug in the `UsesUnifiedHTTPProxyPort` constraint, when
        feature gate `UseUnifiedHTTPProxyPort` was used and then disabled again by
        [@&#8203;maboehm](https://redirect.github.com/maboehm) \\[[#&#8203;13844](https://redirect.github.com/gardener/gardener/pull/13844)]\n-
        `[USER]` gardener-apiserver: An issue in gardener-apiserver v1.135.0 causing
        `kubectl apply` for a Shoot to be wrongly rejected with \"spec.dns.providers\\[0]:
        Required value: non-primary DNS providers must specify `type` and `credentialsRef`\"
        in some cases is now fixed. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
        \\[[#&#8203;13861](https://redirect.github.com/gardener/gardener/pull/13861)]\n-
        `[DEVELOPER]` Enable MCM (cluster-autoscaler) to scale `provider-local` `Node`s.
        by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein) \\[[#&#8203;13804](https://redirect.github.com/gardener/gardener/pull/13804)]\n\n####
        \U0001F3C3 Others\n\n- `[OPERATOR]` Audit policy configmap for the gardener
        API server referenced in the garden resource is now validated. by [@&#8203;acumino](https://redirect.github.com/acumino)
        \\[[#&#8203;13478](https://redirect.github.com/gardener/gardener/pull/13478)]\n-
        `[OPERATOR]` Upon gardenlet start all existing opentelemetry collector pipelines
        in shoot control planes will be migrated to the expected content. by [@&#8203;nickytd](https://redirect.github.com/nickytd)
        \\[[#&#8203;14054](https://redirect.github.com/gardener/gardener/pull/14054)]\n-
        `[OPERATOR]` The mutating `ShootDNS` admission plugin is now also a validating
        one. Validations which are executed by this admission plugin during the mutation
        phase are now moved to the validating `ShootDNS` admission plugin. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
        \\[[#&#8203;13910](https://redirect.github.com/gardener/gardener/pull/13910)]\n-
        `[OPERATOR]` Add Prometheus health check rule in the cache Prometheus to ensure
        the presence of `kubelet` volume stats metrics. by [@&#8203;vicwicker](https://redirect.github.com/vicwicker)
        \\[[#&#8203;13855](https://redirect.github.com/gardener/gardener/pull/13855)]\n-
        `[OPERATOR]` Federate `shoot:node_operating_system:sum` time series from the
        garden to the longterm Prometheus. by [@&#8203;vicwicker](https://redirect.github.com/vicwicker)
        \\[[#&#8203;13805](https://redirect.github.com/gardener/gardener/pull/13805)]\n-
        `[OPERATOR]` Fix flaky test for latest MCM release v0.61.x by [@&#8203;r4mek](https://redirect.github.com/r4mek)
        \\[[#&#8203;13916](https://redirect.github.com/gardener/gardener/pull/13916)]\n-
        `[OPERATOR]` The majority of the VerticalPodAutoscaler resources managed by
        Gardener are enhanced to define an explicit container policy for all containers
        that need to be auto-scaled and to have a `catch-all` container policy (`containerName:
        '*'` and `mode: Off`) always. by [@&#8203;voelzmo](https://redirect.github.com/voelzmo)
        \\[[#&#8203;13819](https://redirect.github.com/gardener/gardener/pull/13819)]\n-
        `[OPERATOR]` The following dependencies have been updated:\n  - `gardener/machine-controller-manager`
        from `v0.60.2` to `v0.61.1`. [Release Notes](https://redirect.github.com/gardener/machine-controller-manager/releases/tag/v0.61.1)
        by [@&#8203;aaronfern](https://redirect.github.com/aaronfern) \\[[#&#8203;13865](https://redirect.github.com/gardener/gardener/pull/13865)]\n-
        `[OPERATOR]` The existing `TooManyEtcdSnapshotCompactionJobsFailing` alert
        has been renamed to `EtcdSnapshotCompactionJobsFailingForSeed` and its expression
        has been fixed to correctly measure the fraction of namespaces with failures.\\\n
        \ Two new per-namespace alerts (`EtcdSnapshotCompactionJobsFailingForNamespace`
        and `EtcdFullSnapshotsFailingForNamespace`) have been added to help operators
        identify specific shoot clusters where compaction jobs or full snapshots are
        failing above the 10% threshold. by [@&#8203;anveshreddy18](https://redirect.github.com/anveshreddy18)
        \\[[#&#8203;14053](https://redirect.github.com/gardener/gardener/pull/14053)]\n-
        `[OPERATOR]` Use Kubernetes 1.34.3 in the local setup. by [@&#8203;vicwicker](https://redirect.github.com/vicwicker)
        \\[[#&#8203;13855](https://redirect.github.com/gardener/gardener/pull/13855)]\n-
        `[USER]` Allow `NamespacedCloudProfile.spec.limits` to be decreased. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
        \\[[#&#8203;13724](https://redirect.github.com/gardener/gardener/pull/13724)]\n-
        `[DEVELOPER]` The component checklist rule for **Define a `VerticalPodAutoscaler`**
        is enhanced with the convention that a VPA should define an explicit container
        policy for all containers that need to be auto-scaled and should have a `catch-all`
        container policy (`containerName: '*'` and `mode: Off`) always. For more details,
        refer to the[Component Checklist](https://redirect.github.com/gardener/gardener/blob/v1.136.0/docs/development/component-checklist.md).
        by [@&#8203;voelzmo](https://redirect.github.com/voelzmo) \\[[#&#8203;13819](https://redirect.github.com/gardener/gardener/pull/13819)]\n-
        `[DEVELOPER]` The TM tests are now adapted to run against Kubernetes 1.35.
        by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov) \\[[#&#8203;13995](https://redirect.github.com/gardener/gardener/pull/13995)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/etcd-druid`
        from `v0.34.0` to `v0.35.0`. [Release Notes](https://redirect.github.com/gardener/etcd-druid/releases/tag/v0.35.0)\n
        \ - `github.com/gardener/etcd-druid/api` from `v0.34.0` to `v0.35.0`. by [@&#8203;renormalize](https://redirect.github.com/renormalize)
        \\[[#&#8203;13950](https://redirect.github.com/gardener/gardener/pull/13950)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
        from `1.83.3` to `1.83.4`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.4)
        by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13970](https://redirect.github.com/gardener/gardener/pull/13970)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/ingress-nginx/controller-chroot`
        from `v1.14.1` to `v1.14.2`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13880](https://redirect.github.com/gardener/gardener/pull/13880)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
        from `1.83.4` to `1.83.5`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.5)
        by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13983](https://redirect.github.com/gardener/gardener/pull/13983)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/cpa/cluster-proportional-autoscaler`
        from `v1.9.0` to `v1.10.3`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13905](https://redirect.github.com/gardener/gardener/pull/13905)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `gcr.io/istio-release/pilot`
        from `1.27.5` to `1.27.6`.\n  - `gcr.io/istio-release/proxyv2` from `1.27.5`
        to `1.27.6`.\n  - `istio.io/api` from `v1.27.5` to `v1.27.6`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13986](https://redirect.github.com/gardener/gardener/pull/13986)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
        from `1.83.2` to `1.83.3`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.3)
        by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13917](https://redirect.github.com/gardener/gardener/pull/13917)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/terminal-controller-manager`
        from `v0.34.0` to `v0.35.0`. [Release Notes](https://redirect.github.com/gardener/terminal-controller-manager/releases/tag/v0.35.0)
        by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13953](https://redirect.github.com/gardener/gardener/pull/13953)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/vpn2`
        from `0.46.1` to `0.46.2`. [Release Notes](https://redirect.github.com/gardener/vpn2/releases/tag/0.46.2)
        by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13959](https://redirect.github.com/gardener/gardener/pull/13959)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/prometheus/alertmanager`
        from `v0.30.1` to `v0.31.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13931](https://redirect.github.com/gardener/gardener/pull/13931)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/metrics-server/metrics-server`
        from `v0.8.0` to `v0.8.1`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13912](https://redirect.github.com/gardener/gardener/pull/13912)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/ingress-nginx/controller-chroot`
        from `v1.14.2` to `v1.14.3`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13940](https://redirect.github.com/gardener/gardener/pull/13940)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/alpine-conntrack`
        from `3.23.2` to `3.23.3`. [Release Notes](https://redirect.github.com/gardener/alpine-conntrack/releases/tag/3.23.3)
        by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13948](https://redirect.github.com/gardener/gardener/pull/13948)]\n-
        `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/kiwigrid/k8s-sidecar`
        from `2.4.0` to `2.5.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
        \\[[#&#8203;13839](https://redirect.github.com/gardener/gardener/pull/13839)]\n\n####
        Helm Charts\n\n- controlplane: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.136.0`\n-
        gardenlet: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.136.0`\n-
        operator: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.136.0`\n-
        resource-manager: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.136.0`\n\n####
        Container (OCI) Images\n\n- admission-controller: `europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.136.0`\n-
        apiserver: `europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.136.0`\n-
        controller-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.136.0`\n-
        gardenadm: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.136.0`\n-
        gardenlet: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.136.0`\n-
        node-agent: `europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.136.0`\n-
        operator: `europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.136.0`\n-
        resource-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.136.0`\n-
        scheduler: `europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.136.0`\n\n</details>\n\n---\n\n###
        Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time (no
        schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
        **Automerge**: Disabled by config. Please merge this manually once you are
        satisfied.\n\n\u267B **Rebasing**: Whenever PR is behind base branch, or you
        tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this PR and
        you won't be reminded about this update again.\n\n---\n\n - [ ] <!-- rebase-check
        -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was
        generated by [Mend Renovate](https://mend.io/renovate/). View the [repository
        job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44LjUiLCJ1cGRhdGVkSW5WZXIiOiI0My44LjUiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
      change_url: https://github.com/YAKEcloud/yake-ansible/pull/502
      child_jobs: []
      commit_id: be3463606794143a98744cc08332321c7a95f31d
      event_id: 712c2a60-098b-11f1-9945-da63664cf8b7
      executor:
        hostname: 521e9411259a
        inventory_file: /var/lib/zuul/builds/f16c1a93a7104c6c95fd8f96974686f6/ansible/inventory.yaml
        log_root: /var/lib/zuul/builds/f16c1a93a7104c6c95fd8f96974686f6/work/logs
        result_data_file: /var/lib/zuul/builds/f16c1a93a7104c6c95fd8f96974686f6/work/results.json
        src_root: /var/lib/zuul/builds/f16c1a93a7104c6c95fd8f96974686f6/work/src
        work_root: /var/lib/zuul/builds/f16c1a93a7104c6c95fd8f96974686f6/work
      include_vars: []
      items:
      - branch: main
        change: '502'
        change_message: "chore(deps): update dependency gardener/gardener to v1.136.0\n\nThis
          PR contains the following updates:\n\n| Package | Update | Change |\n|---|---|---|\n|
          [gardener/gardener](https://redirect.github.com/gardener/gardener) | minor
          | `1.135.1` \u2192 `1.136.0` |\n\n---\n\n### Release Notes\n\n<details>\n<summary>gardener/gardener
          (gardener/gardener)</summary>\n\n### [`v1.136.0`](https://redirect.github.com/gardener/gardener/releases/tag/v1.136.0)\n\n[Compare
          Source](https://redirect.github.com/gardener/gardener/compare/v1.135.1...v1.136.0)\n\n###
          \\[github.com/gardener/gardener:v1.136.0]\n\n#### \u26A0\uFE0F Breaking
          Changes\n\n- `[OPERATOR]` The Garden's `.spec.virtualCluster.kubernetes.kubeAPIServer.eventTTL`
          field's valid values range is restricted from `[0, 168h]` to `[0, 24h]`.
          The new range is imposed for new Garden creations and for field value updates.
          Already existing Gardens which specify invalid values (more than `24h`)
          are not affected. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
          \\[[#&#8203;13830](https://redirect.github.com/gardener/gardener/pull/13830)]\n-
          `[OPERATOR]` The ManagedSeedSet's `.spec.shootTemplate.spec.kubernetes.kubeAPIServer.eventTTL`
          field's valid values range is restricted from `[0, 168h]` to `[0, 24h]`.
          The new range is imposed for new ManagedSeedSet creations and for field
          value updates. Already existing ManagedSeedSets which specify invalid values
          (more than `24h`) are not affected. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
          \\[[#&#8203;13830](https://redirect.github.com/gardener/gardener/pull/13830)]\n-
          `[USER]` Shoot addons (`.spec.addons`) have been deprecated and will be
          forbidden starting with Kubernetes `1.35`. Their usage was already discouraged
          for productive clusters, as they now only include unmaintained components
          (Kubernetes dashboard and Ingress NGINX Controller). by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
          `[USER]` The shoot field `.spec.kubernetes.kubeScheduler.kubeMaxPDVols`
          has been deprecated and will be forbidden starting with Kubernetes `1.35`.
          The maximum number of attachable volumes is maintained by the respective
          CSI plugin. by [@&#8203;timuthy](https://redirect.github.com/timuthy) \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
          `[USER]` The Shoot's `.spec.kubernetes.kubeAPIServer.eventTTL` field's valid
          values range is restricted from `[0, 168h]` to `[0, 24h]`. The new range
          is imposed for new Shoots creations and for field value updates. Already
          existing Shoots which specify invalid values (more than `24h`) are not affected.
          by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov) \\[[#&#8203;13830](https://redirect.github.com/gardener/gardener/pull/13830)]\n-
          `[USER]` Downgrading the machine image version (`.spec.provider.workers[].machine.image.version`)
          is not allowed for worker pools using the `AutoInPlaceUpdate` or `ManualInPlaceUpdate`
          strategy, as Gardener does not support machine image downgrades for any
          operating system currently.  For `AutoRollingUpdate`, the entire node is
          replaced, so this limitation does not apply. by [@&#8203;shafeeqes](https://redirect.github.com/shafeeqes)
          \\[[#&#8203;13828](https://redirect.github.com/gardener/gardener/pull/13828)]\n-
          `[USER]` The shoot field `.spec.kubernetes.kubeAPIServer.watchCacheSizes.default`
          has been deprecated and will be forbidden starting with Kubernetes `1.35`.
          Watch cache sizes are automatically sized by Kubernetes. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
          `[USER]` Setting `.spec.kubernetes.kubeAPIServer.enableAnonymousAuthentication`
          in the `Shoot` spec is forbidden for clusters with Kubernetes version >=
          1.35. Users that enable anonymous authentication should use Structured Authentication
          with [anonymous authenticator](https://redirect.github.com/gardener/gardener/blob/master/docs/usage/shoot/shoot_access.md#configuring-anonymous-authentication)
          instead. by [@&#8203;dimityrmirchev](https://redirect.github.com/dimityrmirchev)
          \\[[#&#8203;13707](https://redirect.github.com/gardener/gardener/pull/13707)]\n-
          `[DEVELOPER]` The healthcheck controller now supports the `garden` extension
          class. Health check client interfaces have been renamed from `SeedClient/ShootClient`
          to `SourceClient/TargetClient` for better abstraction across extension classes.
          The `PreCheckFunc` method signature has been changed to accept `any` for
          cluster or garden object. by [@&#8203;theoddora](https://redirect.github.com/theoddora)
          \\[[#&#8203;13789](https://redirect.github.com/gardener/gardener/pull/13789)]\n\n####
          \U0001F4F0 Noteworthy\n\n- `[OPERATOR]` New health and readiness checks
          have been added to vpn-seed-server to improve availability and reduce log
          clutter. by [@&#8203;domdom82](https://redirect.github.com/domdom82) \\[[#&#8203;13802](https://redirect.github.com/gardener/gardener/pull/13802)]\n-
          `[OPERATOR]` The `Shoot` spec has a new field `spec.kubernetes.kubeAPIServer.encryptionConfig.provider.type`,
          which currently can only be set to `aescbc`. by [@&#8203;AleksandarSavchev](https://redirect.github.com/AleksandarSavchev)
          \\[[#&#8203;13732](https://redirect.github.com/gardener/gardener/pull/13732)]\n-
          `[OPERATOR]` For Kubernetes virtual clusters `>= 1.33`, we now deploy both
          `Endpoints` and `EndpointSlice` resources for the APIService connection
          between virtual-garden-kube-apiserver and gardener-apiserver. by [@&#8203;acumino](https://redirect.github.com/acumino)
          \\[[#&#8203;14041](https://redirect.github.com/gardener/gardener/pull/14041)]\n-
          `[OPERATOR]` The `Garden` spec has 2 new fields `spec.virtualCluster.kubernetes.kubeAPIServer.encryptionConfig.provider.type`and
          `spec.virtualCluster.gardener.gardenerAPIServer.encryptionConfig.provider.type`,
          which currently can only be set to `aescbc`. by [@&#8203;AleksandarSavchev](https://redirect.github.com/AleksandarSavchev)
          \\[[#&#8203;13732](https://redirect.github.com/gardener/gardener/pull/13732)]\n-
          `[OPERATOR]` The `OpenTelemetryCollector` feature gate has been promoted
          to Beta and is enabled by default. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13851](https://redirect.github.com/gardener/gardener/pull/13851)]\n-
          `[USER]` The field `.spec.kubernetes.kubeAPIServer.enableAnonymousAuthentication`
          in the `Shoot` spec will be automatically set to `nil` if users set it `false`
          as these two are equivalent across the codebase. The field is deprecated
          and users that enable anonymous authentication should migrate to Structured
          Authentication with [anonymous authenticator](https://redirect.github.com/gardener/gardener/blob/master/docs/usage/shoot/shoot_access.md#configuring-anonymous-authentication)
          instead. by [@&#8203;dimityrmirchev](https://redirect.github.com/dimityrmirchev)
          \\[[#&#8203;13707](https://redirect.github.com/gardener/gardener/pull/13707)]\n-
          `[USER]` It is now explicitly supported to use short worker OS image versions
          in the `CloudProfile`, which are not defaulted when creating or updating
          the `Shoot` spec. by [@&#8203;Gerrit91](https://redirect.github.com/Gerrit91)
          \\[[#&#8203;13785](https://redirect.github.com/gardener/gardener/pull/13785)]\n-
          `[USER]` The shoot deletion flow has been enhanced to tolerate leftover
          resources in the following situations:\n  - Objects that belong to namespaces
          which have already been deleted (finalized).\n  - Objects that were created
          after the cleanup process began for the first time, plus the finalize grace
          period. by [@&#8203;timuthy](https://redirect.github.com/timuthy) \\[[#&#8203;13918](https://redirect.github.com/gardener/gardener/pull/13918)]\n\n####
          \u2728 New Features\n\n- `[OPERATOR]` Gardener now supports pulling Helm
          charts from OCI registries that use custom or self-signed TLS certificates.
          This is particularly useful for air-gapped environments or when using private
          container registries with custom certificate authorities.\n\n  A new `caBundleSecretRef`
          field has been added to the `ociRepository` configuration in the following
          resources:\n\n  - `core.gardener.cloud/v1.ControllerDeployment`: `.helm.ociRepository.caBundleSecretRef`\n
          \ - `core.gardener.cloud/v1beta1.ControllerDeployment`: `.helm.ociRepository.caBundleSecretRef`\n
          \ - `operator.gardener.cloud/v1alpha1.Extension`: `.spec.deployment.{admission.{runtimeCluster,virtualCluster},extension}.helm.ociRepository.caBundleSecretRef`\n\n
          \ The field references a secret in the `garden` namespace containing a PEM-encoded
          CA certificate bundle (data key: `bundle.crt`). For gardenlet usage, the
          secret must be labeled with `gardener.cloud/role=oci-ca-bundle`. by [@&#8203;shafeeqes](https://redirect.github.com/shafeeqes)
          \\[[#&#8203;13868](https://redirect.github.com/gardener/gardener/pull/13868)]\n-
          `[OPERATOR]` The `gardener-controller-manager` now increases all `ResourceQuota`s
          in project namespaces when a Gardener update leads to Gardener creating
          more resources in them. This was introduced to prevent failing Shoot reconciliations
          when `ResourceQuota`s of projects are near their limit. by [@&#8203;tobschli](https://redirect.github.com/tobschli)
          \\[[#&#8203;13850](https://redirect.github.com/gardener/gardener/pull/13850)]\n-
          `[OPERATOR]` Introduce fluent-bit-plugin v1 with OTLP support behind the
          OpenTelemetryCollector feature gate and adjust fluent-bit resources to select
          OTLP. by [@&#8203;nickytd](https://redirect.github.com/nickytd) \\[[#&#8203;13961](https://redirect.github.com/gardener/gardener/pull/13961)]\n-
          `[OPERATOR]` Introduced the Victoria Operator as a component to Seed & Garden
          Clusters. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13708](https://redirect.github.com/gardener/gardener/pull/13708)]\n-
          `[OPERATOR]` When configuring a custom CNI path for containerd, GNA will
          now - in addition to checking the version of the config.toml config file
          - query containerd for its version and use the `bin_dirs` path with a string
          array if the config file version is 3 and containerd >= 2.2 is detected.
          by [@&#8203;MrBatschner](https://redirect.github.com/MrBatschner) \\[[#&#8203;13826](https://redirect.github.com/gardener/gardener/pull/13826)]\n-
          `[OPERATOR]` An instance of `OpenTelemetry Collector` is now deployed to
          the `garden` namespace of both `Garden` and `Seed` clusters. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13481](https://redirect.github.com/gardener/gardener/pull/13481)]\n-
          `[OPERATOR]` Gardener can now support clusters with Kubernetes version 1.35.
          To allow creation/update of 1.35 clusters you will have to update the version
          of your provider extension(s) to a version that supports 1.35 as well. Please
          consult the respective releases and notes in the provider extension's repository.
          by [@&#8203;timuthy](https://redirect.github.com/timuthy) \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
          `[USER]` The `Shoot` field `.spec.seedSelector` can now be adjusted for
          already scheduled shoots, as long as the new selector still selects the
          assigned seed. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13920](https://redirect.github.com/gardener/gardener/pull/13920)]\n-
          `[DEVELOPER]` gardenctl in local setup by [@&#8203;hown3d](https://redirect.github.com/hown3d)
          \\[[#&#8203;13842](https://redirect.github.com/gardener/gardener/pull/13842)]\n-
          `[DEVELOPER]` Gardener can now support clusters with Kubernetes version
          `1.35`. Extension developers have to prepare individual extensions as well
          to work with `1.35`. by [@&#8203;timuthy](https://redirect.github.com/timuthy)
          \\[[#&#8203;13845](https://redirect.github.com/gardener/gardener/pull/13845)]\n-
          `[DEVELOPER]` Environment variable `MAX_PARALLEL_WORKERS` can now be used
          to control the number of parallel workers that are spawned during the call
          to the `make generate` target. by [@&#8203;rrhubenov](https://redirect.github.com/rrhubenov)
          \\[[#&#8203;13903](https://redirect.github.com/gardener/gardener/pull/13903)]\n\n####
          \U0001F41B Bug Fixes\n\n- `[OPERATOR]` An issue causing unwanted reconciliations
          of Secrets and other objects due to cache resyncs in the project activity
          reconciler is now fixed. by [@&#8203;shafeeqes](https://redirect.github.com/shafeeqes)
          \\[[#&#8203;13945](https://redirect.github.com/gardener/gardener/pull/13945)]\n-
          `[OPERATOR]` This PR fixes webhook certificate reconciliation to properly
          apply changes in webhook configurations. by [@&#8203;acumino](https://redirect.github.com/acumino)
          \\[[#&#8203;13971](https://redirect.github.com/gardener/gardener/pull/13971)]\n-
          `[OPERATOR]` Fixes a bug when feature gate UseUnifiedHTTPProxyPort was used
          in conjunction with a seed load balancer using proxy protocol. by [@&#8203;maboehm](https://redirect.github.com/maboehm)
          \\[[#&#8203;13832](https://redirect.github.com/gardener/gardener/pull/13832)]\n-
          `[OPERATOR]` Fixes a bug in the `UsesUnifiedHTTPProxyPort` constraint, when
          feature gate `UseUnifiedHTTPProxyPort` was used and then disabled again
          by [@&#8203;maboehm](https://redirect.github.com/maboehm) \\[[#&#8203;13844](https://redirect.github.com/gardener/gardener/pull/13844)]\n-
          `[USER]` gardener-apiserver: An issue in gardener-apiserver v1.135.0 causing
          `kubectl apply` for a Shoot to be wrongly rejected with \"spec.dns.providers\\[0]:
          Required value: non-primary DNS providers must specify `type` and `credentialsRef`\"
          in some cases is now fixed. by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov)
          \\[[#&#8203;13861](https://redirect.github.com/gardener/gardener/pull/13861)]\n-
          `[DEVELOPER]` Enable MCM (cluster-autoscaler) to scale `provider-local`
          `Node`s. by [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein)
          \\[[#&#8203;13804](https://redirect.github.com/gardener/gardener/pull/13804)]\n\n####
          \U0001F3C3 Others\n\n- `[OPERATOR]` Audit policy configmap for the gardener
          API server referenced in the garden resource is now validated. by [@&#8203;acumino](https://redirect.github.com/acumino)
          \\[[#&#8203;13478](https://redirect.github.com/gardener/gardener/pull/13478)]\n-
          `[OPERATOR]` Upon gardenlet start all existing opentelemetry collector pipelines
          in shoot control planes will be migrated to the expected content. by [@&#8203;nickytd](https://redirect.github.com/nickytd)
          \\[[#&#8203;14054](https://redirect.github.com/gardener/gardener/pull/14054)]\n-
          `[OPERATOR]` The mutating `ShootDNS` admission plugin is now also a validating
          one. Validations which are executed by this admission plugin during the
          mutation phase are now moved to the validating `ShootDNS` admission plugin.
          by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov) \\[[#&#8203;13910](https://redirect.github.com/gardener/gardener/pull/13910)]\n-
          `[OPERATOR]` Add Prometheus health check rule in the cache Prometheus to
          ensure the presence of `kubelet` volume stats metrics. by [@&#8203;vicwicker](https://redirect.github.com/vicwicker)
          \\[[#&#8203;13855](https://redirect.github.com/gardener/gardener/pull/13855)]\n-
          `[OPERATOR]` Federate `shoot:node_operating_system:sum` time series from
          the garden to the longterm Prometheus. by [@&#8203;vicwicker](https://redirect.github.com/vicwicker)
          \\[[#&#8203;13805](https://redirect.github.com/gardener/gardener/pull/13805)]\n-
          `[OPERATOR]` Fix flaky test for latest MCM release v0.61.x by [@&#8203;r4mek](https://redirect.github.com/r4mek)
          \\[[#&#8203;13916](https://redirect.github.com/gardener/gardener/pull/13916)]\n-
          `[OPERATOR]` The majority of the VerticalPodAutoscaler resources managed
          by Gardener are enhanced to define an explicit container policy for all
          containers that need to be auto-scaled and to have a `catch-all` container
          policy (`containerName: '*'` and `mode: Off`) always. by [@&#8203;voelzmo](https://redirect.github.com/voelzmo)
          \\[[#&#8203;13819](https://redirect.github.com/gardener/gardener/pull/13819)]\n-
          `[OPERATOR]` The following dependencies have been updated:\n  - `gardener/machine-controller-manager`
          from `v0.60.2` to `v0.61.1`. [Release Notes](https://redirect.github.com/gardener/machine-controller-manager/releases/tag/v0.61.1)
          by [@&#8203;aaronfern](https://redirect.github.com/aaronfern) \\[[#&#8203;13865](https://redirect.github.com/gardener/gardener/pull/13865)]\n-
          `[OPERATOR]` The existing `TooManyEtcdSnapshotCompactionJobsFailing` alert
          has been renamed to `EtcdSnapshotCompactionJobsFailingForSeed` and its expression
          has been fixed to correctly measure the fraction of namespaces with failures.\\\n
          \ Two new per-namespace alerts (`EtcdSnapshotCompactionJobsFailingForNamespace`
          and `EtcdFullSnapshotsFailingForNamespace`) have been added to help operators
          identify specific shoot clusters where compaction jobs or full snapshots
          are failing above the 10% threshold. by [@&#8203;anveshreddy18](https://redirect.github.com/anveshreddy18)
          \\[[#&#8203;14053](https://redirect.github.com/gardener/gardener/pull/14053)]\n-
          `[OPERATOR]` Use Kubernetes 1.34.3 in the local setup. by [@&#8203;vicwicker](https://redirect.github.com/vicwicker)
          \\[[#&#8203;13855](https://redirect.github.com/gardener/gardener/pull/13855)]\n-
          `[USER]` Allow `NamespacedCloudProfile.spec.limits` to be decreased. by
          [@&#8203;LucaBernstein](https://redirect.github.com/LucaBernstein) \\[[#&#8203;13724](https://redirect.github.com/gardener/gardener/pull/13724)]\n-
          `[DEVELOPER]` The component checklist rule for **Define a `VerticalPodAutoscaler`**
          is enhanced with the convention that a VPA should define an explicit container
          policy for all containers that need to be auto-scaled and should have a
          `catch-all` container policy (`containerName: '*'` and `mode: Off`) always.
          For more details, refer to the[Component Checklist](https://redirect.github.com/gardener/gardener/blob/v1.136.0/docs/development/component-checklist.md).
          by [@&#8203;voelzmo](https://redirect.github.com/voelzmo) \\[[#&#8203;13819](https://redirect.github.com/gardener/gardener/pull/13819)]\n-
          `[DEVELOPER]` The TM tests are now adapted to run against Kubernetes 1.35.
          by [@&#8203;ialidzhikov](https://redirect.github.com/ialidzhikov) \\[[#&#8203;13995](https://redirect.github.com/gardener/gardener/pull/13995)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/etcd-druid`
          from `v0.34.0` to `v0.35.0`. [Release Notes](https://redirect.github.com/gardener/etcd-druid/releases/tag/v0.35.0)\n
          \ - `github.com/gardener/etcd-druid/api` from `v0.34.0` to `v0.35.0`. by
          [@&#8203;renormalize](https://redirect.github.com/renormalize) \\[[#&#8203;13950](https://redirect.github.com/gardener/gardener/pull/13950)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
          from `1.83.3` to `1.83.4`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.4)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13970](https://redirect.github.com/gardener/gardener/pull/13970)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/ingress-nginx/controller-chroot`
          from `v1.14.1` to `v1.14.2`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13880](https://redirect.github.com/gardener/gardener/pull/13880)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
          from `1.83.4` to `1.83.5`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.5)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13983](https://redirect.github.com/gardener/gardener/pull/13983)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/cpa/cluster-proportional-autoscaler`
          from `v1.9.0` to `v1.10.3`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13905](https://redirect.github.com/gardener/gardener/pull/13905)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gcr.io/istio-release/pilot`
          from `1.27.5` to `1.27.6`.\n  - `gcr.io/istio-release/proxyv2` from `1.27.5`
          to `1.27.6`.\n  - `istio.io/api` from `v1.27.5` to `v1.27.6`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13986](https://redirect.github.com/gardener/gardener/pull/13986)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/dashboard`
          from `1.83.2` to `1.83.3`. [Release Notes](https://redirect.github.com/gardener/dashboard/releases/tag/1.83.3)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13917](https://redirect.github.com/gardener/gardener/pull/13917)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/terminal-controller-manager`
          from `v0.34.0` to `v0.35.0`. [Release Notes](https://redirect.github.com/gardener/terminal-controller-manager/releases/tag/v0.35.0)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13953](https://redirect.github.com/gardener/gardener/pull/13953)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/vpn2`
          from `0.46.1` to `0.46.2`. [Release Notes](https://redirect.github.com/gardener/vpn2/releases/tag/0.46.2)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13959](https://redirect.github.com/gardener/gardener/pull/13959)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/prometheus/alertmanager`
          from `v0.30.1` to `v0.31.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13931](https://redirect.github.com/gardener/gardener/pull/13931)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/metrics-server/metrics-server`
          from `v0.8.0` to `v0.8.1`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13912](https://redirect.github.com/gardener/gardener/pull/13912)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `registry.k8s.io/ingress-nginx/controller-chroot`
          from `v1.14.2` to `v1.14.3`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13940](https://redirect.github.com/gardener/gardener/pull/13940)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `gardener/alpine-conntrack`
          from `3.23.2` to `3.23.3`. [Release Notes](https://redirect.github.com/gardener/alpine-conntrack/releases/tag/3.23.3)
          by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13948](https://redirect.github.com/gardener/gardener/pull/13948)]\n-
          `[DEPENDENCY]` The following dependencies have been updated:\n  - `quay.io/kiwigrid/k8s-sidecar`
          from `2.4.0` to `2.5.0`. by [@&#8203;gardener-ci-robot](https://redirect.github.com/gardener-ci-robot)
          \\[[#&#8203;13839](https://redirect.github.com/gardener/gardener/pull/13839)]\n\n####
          Helm Charts\n\n- controlplane: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/controlplane:v1.136.0`\n-
          gardenlet: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/gardenlet:v1.136.0`\n-
          operator: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/operator:v1.136.0`\n-
          resource-manager: `europe-docker.pkg.dev/gardener-project/releases/charts/gardener/resource-manager:v1.136.0`\n\n####
          Container (OCI) Images\n\n- admission-controller: `europe-docker.pkg.dev/gardener-project/releases/gardener/admission-controller:v1.136.0`\n-
          apiserver: `europe-docker.pkg.dev/gardener-project/releases/gardener/apiserver:v1.136.0`\n-
          controller-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/controller-manager:v1.136.0`\n-
          gardenadm: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenadm:v1.136.0`\n-
          gardenlet: `europe-docker.pkg.dev/gardener-project/releases/gardener/gardenlet:v1.136.0`\n-
          node-agent: `europe-docker.pkg.dev/gardener-project/releases/gardener/node-agent:v1.136.0`\n-
          operator: `europe-docker.pkg.dev/gardener-project/releases/gardener/operator:v1.136.0`\n-
          resource-manager: `europe-docker.pkg.dev/gardener-project/releases/gardener/resource-manager:v1.136.0`\n-
          scheduler: `europe-docker.pkg.dev/gardener-project/releases/gardener/scheduler:v1.136.0`\n\n</details>\n\n---\n\n###
          Configuration\n\n\U0001F4C5 **Schedule**: Branch creation - At any time
          (no schedule defined), Automerge - At any time (no schedule defined).\n\n\U0001F6A6
          **Automerge**: Disabled by config. Please merge this manually once you are
          satisfied.\n\n\u267B **Rebasing**: Whenever PR is behind base branch, or
          you tick the rebase/retry checkbox.\n\n\U0001F515 **Ignore**: Close this
          PR and you won't be reminded about this update again.\n\n---\n\n - [ ] <!--
          rebase-check -->If you want to rebase/retry this PR, check this box\n\n---\n\nThis
          PR was generated by [Mend Renovate](https://mend.io/renovate/). View the
          [repository job log](https://developer.mend.io/github/YAKEcloud/yake-ansible).\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44LjUiLCJ1cGRhdGVkSW5WZXIiOiI0My44LjUiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->\n"
        change_url: https://github.com/YAKEcloud/yake-ansible/pull/502
        commit_id: be3463606794143a98744cc08332321c7a95f31d
        patchset: be3463606794143a98744cc08332321c7a95f31d
        project:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          name: YAKEcloud/yake-ansible
          short_name: yake-ansible
          src_dir: src/github.com/YAKEcloud/yake-ansible
        topic: null
      job: hadolint
      jobtags: []
      max_attempts: 3
      message: Y2hvcmUoZGVwcyk6IHVwZGF0ZSBkZXBlbmRlbmN5IGdhcmRlbmVyL2dhcmRlbmVyIHRvIHYxLjEzNi4wCgpUaGlzIFBSIGNvbnRhaW5zIHRoZSBmb2xsb3dpbmcgdXBkYXRlczoKCnwgUGFja2FnZSB8IFVwZGF0ZSB8IENoYW5nZSB8CnwtLS18LS0tfC0tLXwKfCBbZ2FyZGVuZXIvZ2FyZGVuZXJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lcikgfCBtaW5vciB8IGAxLjEzNS4xYCDihpIgYDEuMTM2LjBgIHwKCi0tLQoKIyMjIFJlbGVhc2UgTm90ZXMKCjxkZXRhaWxzPgo8c3VtbWFyeT5nYXJkZW5lci9nYXJkZW5lciAoZ2FyZGVuZXIvZ2FyZGVuZXIpPC9zdW1tYXJ5PgoKIyMjIFtgdjEuMTM2LjBgXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcmVsZWFzZXMvdGFnL3YxLjEzNi4wKQoKW0NvbXBhcmUgU291cmNlXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvY29tcGFyZS92MS4xMzUuMS4uLnYxLjEzNi4wKQoKIyMjIFxbZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lcjp2MS4xMzYuMF0KCiMjIyMg4pqg77iPIEJyZWFraW5nIENoYW5nZXMKCi0gYFtPUEVSQVRPUl1gIFRoZSBHYXJkZW4ncyBgLnNwZWMudmlydHVhbENsdXN0ZXIua3ViZXJuZXRlcy5rdWJlQVBJU2VydmVyLmV2ZW50VFRMYCBmaWVsZCdzIHZhbGlkIHZhbHVlcyByYW5nZSBpcyByZXN0cmljdGVkIGZyb20gYFswLCAxNjhoXWAgdG8gYFswLCAyNGhdYC4gVGhlIG5ldyByYW5nZSBpcyBpbXBvc2VkIGZvciBuZXcgR2FyZGVuIGNyZWF0aW9ucyBhbmQgZm9yIGZpZWxkIHZhbHVlIHVwZGF0ZXMuIEFscmVhZHkgZXhpc3RpbmcgR2FyZGVucyB3aGljaCBzcGVjaWZ5IGludmFsaWQgdmFsdWVzIChtb3JlIHRoYW4gYDI0aGApIGFyZSBub3QgYWZmZWN0ZWQuIGJ5IFtAJiM4MjAzO2lhbGlkemhpa292XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vaWFsaWR6aGlrb3YpIFxbWyMmIzgyMDM7MTM4MzBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzODMwKV0KLSBgW09QRVJBVE9SXWAgVGhlIE1hbmFnZWRTZWVkU2V0J3MgYC5zcGVjLnNob290VGVtcGxhdGUuc3BlYy5rdWJlcm5ldGVzLmt1YmVBUElTZXJ2ZXIuZXZlbnRUVExgIGZpZWxkJ3MgdmFsaWQgdmFsdWVzIHJhbmdlIGlzIHJlc3RyaWN0ZWQgZnJvbSBgWzAsIDE2OGhdYCB0byBgWzAsIDI0aF1gLiBUaGUgbmV3IHJhbmdlIGlzIGltcG9zZWQgZm9yIG5ldyBNYW5hZ2VkU2VlZFNldCBjcmVhdGlvbnMgYW5kIGZvciBmaWVsZCB2YWx1ZSB1cGRhdGVzLiBBbHJlYWR5IGV4aXN0aW5nIE1hbmFnZWRTZWVkU2V0cyB3aGljaCBzcGVjaWZ5IGludmFsaWQgdmFsdWVzIChtb3JlIHRoYW4gYDI0aGApIGFyZSBub3QgYWZmZWN0ZWQuIGJ5IFtAJiM4MjAzO2lhbGlkemhpa292XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vaWFsaWR6aGlrb3YpIFxbWyMmIzgyMDM7MTM4MzBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzODMwKV0KLSBgW1VTRVJdYCBTaG9vdCBhZGRvbnMgKGAuc3BlYy5hZGRvbnNgKSBoYXZlIGJlZW4gZGVwcmVjYXRlZCBhbmQgd2lsbCBiZSBmb3JiaWRkZW4gc3RhcnRpbmcgd2l0aCBLdWJlcm5ldGVzIGAxLjM1YC4gVGhlaXIgdXNhZ2Ugd2FzIGFscmVhZHkgZGlzY291cmFnZWQgZm9yIHByb2R1Y3RpdmUgY2x1c3RlcnMsIGFzIHRoZXkgbm93IG9ubHkgaW5jbHVkZSB1bm1haW50YWluZWQgY29tcG9uZW50cyAoS3ViZXJuZXRlcyBkYXNoYm9hcmQgYW5kIEluZ3Jlc3MgTkdJTlggQ29udHJvbGxlcikuIGJ5IFtAJiM4MjAzO3RpbXV0aHldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS90aW11dGh5KSBcW1sjJiM4MjAzOzEzODQ1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzg0NSldCi0gYFtVU0VSXWAgVGhlIHNob290IGZpZWxkIGAuc3BlYy5rdWJlcm5ldGVzLmt1YmVTY2hlZHVsZXIua3ViZU1heFBEVm9sc2AgaGFzIGJlZW4gZGVwcmVjYXRlZCBhbmQgd2lsbCBiZSBmb3JiaWRkZW4gc3RhcnRpbmcgd2l0aCBLdWJlcm5ldGVzIGAxLjM1YC4gVGhlIG1heGltdW0gbnVtYmVyIG9mIGF0dGFjaGFibGUgdm9sdW1lcyBpcyBtYWludGFpbmVkIGJ5IHRoZSByZXNwZWN0aXZlIENTSSBwbHVnaW4uIGJ5IFtAJiM4MjAzO3RpbXV0aHldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS90aW11dGh5KSBcW1sjJiM4MjAzOzEzODQ1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzg0NSldCi0gYFtVU0VSXWAgVGhlIFNob290J3MgYC5zcGVjLmt1YmVybmV0ZXMua3ViZUFQSVNlcnZlci5ldmVudFRUTGAgZmllbGQncyB2YWxpZCB2YWx1ZXMgcmFuZ2UgaXMgcmVzdHJpY3RlZCBmcm9tIGBbMCwgMTY4aF1gIHRvIGBbMCwgMjRoXWAuIFRoZSBuZXcgcmFuZ2UgaXMgaW1wb3NlZCBmb3IgbmV3IFNob290cyBjcmVhdGlvbnMgYW5kIGZvciBmaWVsZCB2YWx1ZSB1cGRhdGVzLiBBbHJlYWR5IGV4aXN0aW5nIFNob290cyB3aGljaCBzcGVjaWZ5IGludmFsaWQgdmFsdWVzIChtb3JlIHRoYW4gYDI0aGApIGFyZSBub3QgYWZmZWN0ZWQuIGJ5IFtAJiM4MjAzO2lhbGlkemhpa292XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vaWFsaWR6aGlrb3YpIFxbWyMmIzgyMDM7MTM4MzBdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzODMwKV0KLSBgW1VTRVJdYCBEb3duZ3JhZGluZyB0aGUgbWFjaGluZSBpbWFnZSB2ZXJzaW9uIChgLnNwZWMucHJvdmlkZXIud29ya2Vyc1tdLm1hY2hpbmUuaW1hZ2UudmVyc2lvbmApIGlzIG5vdCBhbGxvd2VkIGZvciB3b3JrZXIgcG9vbHMgdXNpbmcgdGhlIGBBdXRvSW5QbGFjZVVwZGF0ZWAgb3IgYE1hbnVhbEluUGxhY2VVcGRhdGVgIHN0cmF0ZWd5LCBhcyBHYXJkZW5lciBkb2VzIG5vdCBzdXBwb3J0IG1hY2hpbmUgaW1hZ2UgZG93bmdyYWRlcyBmb3IgYW55IG9wZXJhdGluZyBzeXN0ZW0gY3VycmVudGx5LiAgRm9yIGBBdXRvUm9sbGluZ1VwZGF0ZWAsIHRoZSBlbnRpcmUgbm9kZSBpcyByZXBsYWNlZCwgc28gdGhpcyBsaW1pdGF0aW9uIGRvZXMgbm90IGFwcGx5LiBieSBbQCYjODIwMztzaGFmZWVxZXNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9zaGFmZWVxZXMpIFxbWyMmIzgyMDM7MTM4MjhdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzODI4KV0KLSBgW1VTRVJdYCBUaGUgc2hvb3QgZmllbGQgYC5zcGVjLmt1YmVybmV0ZXMua3ViZUFQSVNlcnZlci53YXRjaENhY2hlU2l6ZXMuZGVmYXVsdGAgaGFzIGJlZW4gZGVwcmVjYXRlZCBhbmQgd2lsbCBiZSBmb3JiaWRkZW4gc3RhcnRpbmcgd2l0aCBLdWJlcm5ldGVzIGAxLjM1YC4gV2F0Y2ggY2FjaGUgc2l6ZXMgYXJlIGF1dG9tYXRpY2FsbHkgc2l6ZWQgYnkgS3ViZXJuZXRlcy4gYnkgW0AmIzgyMDM7dGltdXRoeV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3RpbXV0aHkpIFxbWyMmIzgyMDM7MTM4NDVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzODQ1KV0KLSBgW1VTRVJdYCBTZXR0aW5nIGAuc3BlYy5rdWJlcm5ldGVzLmt1YmVBUElTZXJ2ZXIuZW5hYmxlQW5vbnltb3VzQXV0aGVudGljYXRpb25gIGluIHRoZSBgU2hvb3RgIHNwZWMgaXMgZm9yYmlkZGVuIGZvciBjbHVzdGVycyB3aXRoIEt1YmVybmV0ZXMgdmVyc2lvbiA+PSAxLjM1LiBVc2VycyB0aGF0IGVuYWJsZSBhbm9ueW1vdXMgYXV0aGVudGljYXRpb24gc2hvdWxkIHVzZSBTdHJ1Y3R1cmVkIEF1dGhlbnRpY2F0aW9uIHdpdGggW2Fub255bW91cyBhdXRoZW50aWNhdG9yXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvYmxvYi9tYXN0ZXIvZG9jcy91c2FnZS9zaG9vdC9zaG9vdF9hY2Nlc3MubWQjY29uZmlndXJpbmctYW5vbnltb3VzLWF1dGhlbnRpY2F0aW9uKSBpbnN0ZWFkLiBieSBbQCYjODIwMztkaW1pdHlybWlyY2hldl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2RpbWl0eXJtaXJjaGV2KSBcW1sjJiM4MjAzOzEzNzA3XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzcwNyldCi0gYFtERVZFTE9QRVJdYCBUaGUgaGVhbHRoY2hlY2sgY29udHJvbGxlciBub3cgc3VwcG9ydHMgdGhlIGBnYXJkZW5gIGV4dGVuc2lvbiBjbGFzcy4gSGVhbHRoIGNoZWNrIGNsaWVudCBpbnRlcmZhY2VzIGhhdmUgYmVlbiByZW5hbWVkIGZyb20gYFNlZWRDbGllbnQvU2hvb3RDbGllbnRgIHRvIGBTb3VyY2VDbGllbnQvVGFyZ2V0Q2xpZW50YCBmb3IgYmV0dGVyIGFic3RyYWN0aW9uIGFjcm9zcyBleHRlbnNpb24gY2xhc3Nlcy4gVGhlIGBQcmVDaGVja0Z1bmNgIG1ldGhvZCBzaWduYXR1cmUgaGFzIGJlZW4gY2hhbmdlZCB0byBhY2NlcHQgYGFueWAgZm9yIGNsdXN0ZXIgb3IgZ2FyZGVuIG9iamVjdC4gYnkgW0AmIzgyMDM7dGhlb2Rkb3JhXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vdGhlb2Rkb3JhKSBcW1sjJiM4MjAzOzEzNzg5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzc4OSldCgojIyMjIPCfk7AgTm90ZXdvcnRoeQoKLSBgW09QRVJBVE9SXWAgTmV3IGhlYWx0aCBhbmQgcmVhZGluZXNzIGNoZWNrcyBoYXZlIGJlZW4gYWRkZWQgdG8gdnBuLXNlZWQtc2VydmVyIHRvIGltcHJvdmUgYXZhaWxhYmlsaXR5IGFuZCByZWR1Y2UgbG9nIGNsdXR0ZXIuIGJ5IFtAJiM4MjAzO2RvbWRvbTgyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZG9tZG9tODIpIFxbWyMmIzgyMDM7MTM4MDJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzODAyKV0KLSBgW09QRVJBVE9SXWAgVGhlIGBTaG9vdGAgc3BlYyBoYXMgYSBuZXcgZmllbGQgYHNwZWMua3ViZXJuZXRlcy5rdWJlQVBJU2VydmVyLmVuY3J5cHRpb25Db25maWcucHJvdmlkZXIudHlwZWAsIHdoaWNoIGN1cnJlbnRseSBjYW4gb25seSBiZSBzZXQgdG8gYGFlc2NiY2AuIGJ5IFtAJiM4MjAzO0FsZWtzYW5kYXJTYXZjaGV2XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vQWxla3NhbmRhclNhdmNoZXYpIFxbWyMmIzgyMDM7MTM3MzJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzNzMyKV0KLSBgW09QRVJBVE9SXWAgRm9yIEt1YmVybmV0ZXMgdmlydHVhbCBjbHVzdGVycyBgPj0gMS4zM2AsIHdlIG5vdyBkZXBsb3kgYm90aCBgRW5kcG9pbnRzYCBhbmQgYEVuZHBvaW50U2xpY2VgIHJlc291cmNlcyBmb3IgdGhlIEFQSVNlcnZpY2UgY29ubmVjdGlvbiBiZXR3ZWVuIHZpcnR1YWwtZ2FyZGVuLWt1YmUtYXBpc2VydmVyIGFuZCBnYXJkZW5lci1hcGlzZXJ2ZXIuIGJ5IFtAJiM4MjAzO2FjdW1pbm9dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hY3VtaW5vKSBcW1sjJiM4MjAzOzE0MDQxXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xNDA0MSldCi0gYFtPUEVSQVRPUl1gIFRoZSBgR2FyZGVuYCBzcGVjIGhhcyAyIG5ldyBmaWVsZHMgYHNwZWMudmlydHVhbENsdXN0ZXIua3ViZXJuZXRlcy5rdWJlQVBJU2VydmVyLmVuY3J5cHRpb25Db25maWcucHJvdmlkZXIudHlwZWBhbmQgYHNwZWMudmlydHVhbENsdXN0ZXIuZ2FyZGVuZXIuZ2FyZGVuZXJBUElTZXJ2ZXIuZW5jcnlwdGlvbkNvbmZpZy5wcm92aWRlci50eXBlYCwgd2hpY2ggY3VycmVudGx5IGNhbiBvbmx5IGJlIHNldCB0byBgYWVzY2JjYC4gYnkgW0AmIzgyMDM7QWxla3NhbmRhclNhdmNoZXZdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9BbGVrc2FuZGFyU2F2Y2hldikgXFtbIyYjODIwMzsxMzczMl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2dhcmRlbmVyL3B1bGwvMTM3MzIpXQotIGBbT1BFUkFUT1JdYCBUaGUgYE9wZW5UZWxlbWV0cnlDb2xsZWN0b3JgIGZlYXR1cmUgZ2F0ZSBoYXMgYmVlbiBwcm9tb3RlZCB0byBCZXRhIGFuZCBpcyBlbmFibGVkIGJ5IGRlZmF1bHQuIGJ5IFtAJiM4MjAzO3JyaHViZW5vdl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3JyaHViZW5vdikgXFtbIyYjODIwMzsxMzg1MV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2dhcmRlbmVyL3B1bGwvMTM4NTEpXQotIGBbVVNFUl1gIFRoZSBmaWVsZCBgLnNwZWMua3ViZXJuZXRlcy5rdWJlQVBJU2VydmVyLmVuYWJsZUFub255bW91c0F1dGhlbnRpY2F0aW9uYCBpbiB0aGUgYFNob290YCBzcGVjIHdpbGwgYmUgYXV0b21hdGljYWxseSBzZXQgdG8gYG5pbGAgaWYgdXNlcnMgc2V0IGl0IGBmYWxzZWAgYXMgdGhlc2UgdHdvIGFyZSBlcXVpdmFsZW50IGFjcm9zcyB0aGUgY29kZWJhc2UuIFRoZSBmaWVsZCBpcyBkZXByZWNhdGVkIGFuZCB1c2VycyB0aGF0IGVuYWJsZSBhbm9ueW1vdXMgYXV0aGVudGljYXRpb24gc2hvdWxkIG1pZ3JhdGUgdG8gU3RydWN0dXJlZCBBdXRoZW50aWNhdGlvbiB3aXRoIFthbm9ueW1vdXMgYXV0aGVudGljYXRvcl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2dhcmRlbmVyL2Jsb2IvbWFzdGVyL2RvY3MvdXNhZ2Uvc2hvb3Qvc2hvb3RfYWNjZXNzLm1kI2NvbmZpZ3VyaW5nLWFub255bW91cy1hdXRoZW50aWNhdGlvbikgaW5zdGVhZC4gYnkgW0AmIzgyMDM7ZGltaXR5cm1pcmNoZXZdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9kaW1pdHlybWlyY2hldikgXFtbIyYjODIwMzsxMzcwN10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2dhcmRlbmVyL3B1bGwvMTM3MDcpXQotIGBbVVNFUl1gIEl0IGlzIG5vdyBleHBsaWNpdGx5IHN1cHBvcnRlZCB0byB1c2Ugc2hvcnQgd29ya2VyIE9TIGltYWdlIHZlcnNpb25zIGluIHRoZSBgQ2xvdWRQcm9maWxlYCwgd2hpY2ggYXJlIG5vdCBkZWZhdWx0ZWQgd2hlbiBjcmVhdGluZyBvciB1cGRhdGluZyB0aGUgYFNob290YCBzcGVjLiBieSBbQCYjODIwMztHZXJyaXQ5MV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL0dlcnJpdDkxKSBcW1sjJiM4MjAzOzEzNzg1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzc4NSldCi0gYFtVU0VSXWAgVGhlIHNob290IGRlbGV0aW9uIGZsb3cgaGFzIGJlZW4gZW5oYW5jZWQgdG8gdG9sZXJhdGUgbGVmdG92ZXIgcmVzb3VyY2VzIGluIHRoZSBmb2xsb3dpbmcgc2l0dWF0aW9uczoKICAtIE9iamVjdHMgdGhhdCBiZWxvbmcgdG8gbmFtZXNwYWNlcyB3aGljaCBoYXZlIGFscmVhZHkgYmVlbiBkZWxldGVkIChmaW5hbGl6ZWQpLgogIC0gT2JqZWN0cyB0aGF0IHdlcmUgY3JlYXRlZCBhZnRlciB0aGUgY2xlYW51cCBwcm9jZXNzIGJlZ2FuIGZvciB0aGUgZmlyc3QgdGltZSwgcGx1cyB0aGUgZmluYWxpemUgZ3JhY2UgcGVyaW9kLiBieSBbQCYjODIwMzt0aW11dGh5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vdGltdXRoeSkgXFtbIyYjODIwMzsxMzkxOF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2dhcmRlbmVyL3B1bGwvMTM5MTgpXQoKIyMjIyDinKggTmV3IEZlYXR1cmVzCgotIGBbT1BFUkFUT1JdYCBHYXJkZW5lciBub3cgc3VwcG9ydHMgcHVsbGluZyBIZWxtIGNoYXJ0cyBmcm9tIE9DSSByZWdpc3RyaWVzIHRoYXQgdXNlIGN1c3RvbSBvciBzZWxmLXNpZ25lZCBUTFMgY2VydGlmaWNhdGVzLiBUaGlzIGlzIHBhcnRpY3VsYXJseSB1c2VmdWwgZm9yIGFpci1nYXBwZWQgZW52aXJvbm1lbnRzIG9yIHdoZW4gdXNpbmcgcHJpdmF0ZSBjb250YWluZXIgcmVnaXN0cmllcyB3aXRoIGN1c3RvbSBjZXJ0aWZpY2F0ZSBhdXRob3JpdGllcy4KCiAgQSBuZXcgYGNhQnVuZGxlU2VjcmV0UmVmYCBmaWVsZCBoYXMgYmVlbiBhZGRlZCB0byB0aGUgYG9jaVJlcG9zaXRvcnlgIGNvbmZpZ3VyYXRpb24gaW4gdGhlIGZvbGxvd2luZyByZXNvdXJjZXM6CgogIC0gYGNvcmUuZ2FyZGVuZXIuY2xvdWQvdjEuQ29udHJvbGxlckRlcGxveW1lbnRgOiBgLmhlbG0ub2NpUmVwb3NpdG9yeS5jYUJ1bmRsZVNlY3JldFJlZmAKICAtIGBjb3JlLmdhcmRlbmVyLmNsb3VkL3YxYmV0YTEuQ29udHJvbGxlckRlcGxveW1lbnRgOiBgLmhlbG0ub2NpUmVwb3NpdG9yeS5jYUJ1bmRsZVNlY3JldFJlZmAKICAtIGBvcGVyYXRvci5nYXJkZW5lci5jbG91ZC92MWFscGhhMS5FeHRlbnNpb25gOiBgLnNwZWMuZGVwbG95bWVudC57YWRtaXNzaW9uLntydW50aW1lQ2x1c3Rlcix2aXJ0dWFsQ2x1c3Rlcn0sZXh0ZW5zaW9ufS5oZWxtLm9jaVJlcG9zaXRvcnkuY2FCdW5kbGVTZWNyZXRSZWZgCgogIFRoZSBmaWVsZCByZWZlcmVuY2VzIGEgc2VjcmV0IGluIHRoZSBgZ2FyZGVuYCBuYW1lc3BhY2UgY29udGFpbmluZyBhIFBFTS1lbmNvZGVkIENBIGNlcnRpZmljYXRlIGJ1bmRsZSAoZGF0YSBrZXk6IGBidW5kbGUuY3J0YCkuIEZvciBnYXJkZW5sZXQgdXNhZ2UsIHRoZSBzZWNyZXQgbXVzdCBiZSBsYWJlbGVkIHdpdGggYGdhcmRlbmVyLmNsb3VkL3JvbGU9b2NpLWNhLWJ1bmRsZWAuIGJ5IFtAJiM4MjAzO3NoYWZlZXFlc10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3NoYWZlZXFlcykgXFtbIyYjODIwMzsxMzg2OF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2dhcmRlbmVyL3B1bGwvMTM4NjgpXQotIGBbT1BFUkFUT1JdYCBUaGUgYGdhcmRlbmVyLWNvbnRyb2xsZXItbWFuYWdlcmAgbm93IGluY3JlYXNlcyBhbGwgYFJlc291cmNlUXVvdGFgcyBpbiBwcm9qZWN0IG5hbWVzcGFjZXMgd2hlbiBhIEdhcmRlbmVyIHVwZGF0ZSBsZWFkcyB0byBHYXJkZW5lciBjcmVhdGluZyBtb3JlIHJlc291cmNlcyBpbiB0aGVtLiBUaGlzIHdhcyBpbnRyb2R1Y2VkIHRvIHByZXZlbnQgZmFpbGluZyBTaG9vdCByZWNvbmNpbGlhdGlvbnMgd2hlbiBgUmVzb3VyY2VRdW90YWBzIG9mIHByb2plY3RzIGFyZSBuZWFyIHRoZWlyIGxpbWl0LiBieSBbQCYjODIwMzt0b2JzY2hsaV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3RvYnNjaGxpKSBcW1sjJiM4MjAzOzEzODUwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzg1MCldCi0gYFtPUEVSQVRPUl1gIEludHJvZHVjZSBmbHVlbnQtYml0LXBsdWdpbiB2MSB3aXRoIE9UTFAgc3VwcG9ydCBiZWhpbmQgdGhlIE9wZW5UZWxlbWV0cnlDb2xsZWN0b3IgZmVhdHVyZSBnYXRlIGFuZCBhZGp1c3QgZmx1ZW50LWJpdCByZXNvdXJjZXMgdG8gc2VsZWN0IE9UTFAuIGJ5IFtAJiM4MjAzO25pY2t5dGRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9uaWNreXRkKSBcW1sjJiM4MjAzOzEzOTYxXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzk2MSldCi0gYFtPUEVSQVRPUl1gIEludHJvZHVjZWQgdGhlIFZpY3RvcmlhIE9wZXJhdG9yIGFzIGEgY29tcG9uZW50IHRvIFNlZWQgJiBHYXJkZW4gQ2x1c3RlcnMuIGJ5IFtAJiM4MjAzO3JyaHViZW5vdl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3JyaHViZW5vdikgXFtbIyYjODIwMzsxMzcwOF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2dhcmRlbmVyL3B1bGwvMTM3MDgpXQotIGBbT1BFUkFUT1JdYCBXaGVuIGNvbmZpZ3VyaW5nIGEgY3VzdG9tIENOSSBwYXRoIGZvciBjb250YWluZXJkLCBHTkEgd2lsbCBub3cgLSBpbiBhZGRpdGlvbiB0byBjaGVja2luZyB0aGUgdmVyc2lvbiBvZiB0aGUgY29uZmlnLnRvbWwgY29uZmlnIGZpbGUgLSBxdWVyeSBjb250YWluZXJkIGZvciBpdHMgdmVyc2lvbiBhbmQgdXNlIHRoZSBgYmluX2RpcnNgIHBhdGggd2l0aCBhIHN0cmluZyBhcnJheSBpZiB0aGUgY29uZmlnIGZpbGUgdmVyc2lvbiBpcyAzIGFuZCBjb250YWluZXJkID49IDIuMiBpcyBkZXRlY3RlZC4gYnkgW0AmIzgyMDM7TXJCYXRzY2huZXJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9NckJhdHNjaG5lcikgXFtbIyYjODIwMzsxMzgyNl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2dhcmRlbmVyL3B1bGwvMTM4MjYpXQotIGBbT1BFUkFUT1JdYCBBbiBpbnN0YW5jZSBvZiBgT3BlblRlbGVtZXRyeSBDb2xsZWN0b3JgIGlzIG5vdyBkZXBsb3llZCB0byB0aGUgYGdhcmRlbmAgbmFtZXNwYWNlIG9mIGJvdGggYEdhcmRlbmAgYW5kIGBTZWVkYCBjbHVzdGVycy4gYnkgW0AmIzgyMDM7cnJodWJlbm92XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcnJodWJlbm92KSBcW1sjJiM4MjAzOzEzNDgxXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzQ4MSldCi0gYFtPUEVSQVRPUl1gIEdhcmRlbmVyIGNhbiBub3cgc3VwcG9ydCBjbHVzdGVycyB3aXRoIEt1YmVybmV0ZXMgdmVyc2lvbiAxLjM1LiBUbyBhbGxvdyBjcmVhdGlvbi91cGRhdGUgb2YgMS4zNSBjbHVzdGVycyB5b3Ugd2lsbCBoYXZlIHRvIHVwZGF0ZSB0aGUgdmVyc2lvbiBvZiB5b3VyIHByb3ZpZGVyIGV4dGVuc2lvbihzKSB0byBhIHZlcnNpb24gdGhhdCBzdXBwb3J0cyAxLjM1IGFzIHdlbGwuIFBsZWFzZSBjb25zdWx0IHRoZSByZXNwZWN0aXZlIHJlbGVhc2VzIGFuZCBub3RlcyBpbiB0aGUgcHJvdmlkZXIgZXh0ZW5zaW9uJ3MgcmVwb3NpdG9yeS4gYnkgW0AmIzgyMDM7dGltdXRoeV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3RpbXV0aHkpIFxbWyMmIzgyMDM7MTM4NDVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzODQ1KV0KLSBgW1VTRVJdYCBUaGUgYFNob290YCBmaWVsZCBgLnNwZWMuc2VlZFNlbGVjdG9yYCBjYW4gbm93IGJlIGFkanVzdGVkIGZvciBhbHJlYWR5IHNjaGVkdWxlZCBzaG9vdHMsIGFzIGxvbmcgYXMgdGhlIG5ldyBzZWxlY3RvciBzdGlsbCBzZWxlY3RzIHRoZSBhc3NpZ25lZCBzZWVkLiBieSBbQCYjODIwMzt0aW11dGh5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vdGltdXRoeSkgXFtbIyYjODIwMzsxMzkyMF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2dhcmRlbmVyL3B1bGwvMTM5MjApXQotIGBbREVWRUxPUEVSXWAgZ2FyZGVuY3RsIGluIGxvY2FsIHNldHVwIGJ5IFtAJiM4MjAzO2hvd24zZF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2hvd24zZCkgXFtbIyYjODIwMzsxMzg0Ml0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2dhcmRlbmVyL3B1bGwvMTM4NDIpXQotIGBbREVWRUxPUEVSXWAgR2FyZGVuZXIgY2FuIG5vdyBzdXBwb3J0IGNsdXN0ZXJzIHdpdGggS3ViZXJuZXRlcyB2ZXJzaW9uIGAxLjM1YC4gRXh0ZW5zaW9uIGRldmVsb3BlcnMgaGF2ZSB0byBwcmVwYXJlIGluZGl2aWR1YWwgZXh0ZW5zaW9ucyBhcyB3ZWxsIHRvIHdvcmsgd2l0aCBgMS4zNWAuIGJ5IFtAJiM4MjAzO3RpbXV0aHldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS90aW11dGh5KSBcW1sjJiM4MjAzOzEzODQ1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzg0NSldCi0gYFtERVZFTE9QRVJdYCBFbnZpcm9ubWVudCB2YXJpYWJsZSBgTUFYX1BBUkFMTEVMX1dPUktFUlNgIGNhbiBub3cgYmUgdXNlZCB0byBjb250cm9sIHRoZSBudW1iZXIgb2YgcGFyYWxsZWwgd29ya2VycyB0aGF0IGFyZSBzcGF3bmVkIGR1cmluZyB0aGUgY2FsbCB0byB0aGUgYG1ha2UgZ2VuZXJhdGVgIHRhcmdldC4gYnkgW0AmIzgyMDM7cnJodWJlbm92XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vcnJodWJlbm92KSBcW1sjJiM4MjAzOzEzOTAzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzkwMyldCgojIyMjIPCfkJsgQnVnIEZpeGVzCgotIGBbT1BFUkFUT1JdYCBBbiBpc3N1ZSBjYXVzaW5nIHVud2FudGVkIHJlY29uY2lsaWF0aW9ucyBvZiBTZWNyZXRzIGFuZCBvdGhlciBvYmplY3RzIGR1ZSB0byBjYWNoZSByZXN5bmNzIGluIHRoZSBwcm9qZWN0IGFjdGl2aXR5IHJlY29uY2lsZXIgaXMgbm93IGZpeGVkLiBieSBbQCYjODIwMztzaGFmZWVxZXNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9zaGFmZWVxZXMpIFxbWyMmIzgyMDM7MTM5NDVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzOTQ1KV0KLSBgW09QRVJBVE9SXWAgVGhpcyBQUiBmaXhlcyB3ZWJob29rIGNlcnRpZmljYXRlIHJlY29uY2lsaWF0aW9uIHRvIHByb3Blcmx5IGFwcGx5IGNoYW5nZXMgaW4gd2ViaG9vayBjb25maWd1cmF0aW9ucy4gYnkgW0AmIzgyMDM7YWN1bWlub10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2FjdW1pbm8pIFxbWyMmIzgyMDM7MTM5NzFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzOTcxKV0KLSBgW09QRVJBVE9SXWAgRml4ZXMgYSBidWcgd2hlbiBmZWF0dXJlIGdhdGUgVXNlVW5pZmllZEhUVFBQcm94eVBvcnQgd2FzIHVzZWQgaW4gY29uanVuY3Rpb24gd2l0aCBhIHNlZWQgbG9hZCBiYWxhbmNlciB1c2luZyBwcm94eSBwcm90b2NvbC4gYnkgW0AmIzgyMDM7bWFib2VobV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL21hYm9laG0pIFxbWyMmIzgyMDM7MTM4MzJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzODMyKV0KLSBgW09QRVJBVE9SXWAgRml4ZXMgYSBidWcgaW4gdGhlIGBVc2VzVW5pZmllZEhUVFBQcm94eVBvcnRgIGNvbnN0cmFpbnQsIHdoZW4gZmVhdHVyZSBnYXRlIGBVc2VVbmlmaWVkSFRUUFByb3h5UG9ydGAgd2FzIHVzZWQgYW5kIHRoZW4gZGlzYWJsZWQgYWdhaW4gYnkgW0AmIzgyMDM7bWFib2VobV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL21hYm9laG0pIFxbWyMmIzgyMDM7MTM4NDRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzODQ0KV0KLSBgW1VTRVJdYCBnYXJkZW5lci1hcGlzZXJ2ZXI6IEFuIGlzc3VlIGluIGdhcmRlbmVyLWFwaXNlcnZlciB2MS4xMzUuMCBjYXVzaW5nIGBrdWJlY3RsIGFwcGx5YCBmb3IgYSBTaG9vdCB0byBiZSB3cm9uZ2x5IHJlamVjdGVkIHdpdGggInNwZWMuZG5zLnByb3ZpZGVyc1xbMF06IFJlcXVpcmVkIHZhbHVlOiBub24tcHJpbWFyeSBETlMgcHJvdmlkZXJzIG11c3Qgc3BlY2lmeSBgdHlwZWAgYW5kIGBjcmVkZW50aWFsc1JlZmAiIGluIHNvbWUgY2FzZXMgaXMgbm93IGZpeGVkLiBieSBbQCYjODIwMztpYWxpZHpoaWtvdl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2lhbGlkemhpa292KSBcW1sjJiM4MjAzOzEzODYxXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzg2MSldCi0gYFtERVZFTE9QRVJdYCBFbmFibGUgTUNNIChjbHVzdGVyLWF1dG9zY2FsZXIpIHRvIHNjYWxlIGBwcm92aWRlci1sb2NhbGAgYE5vZGVgcy4gYnkgW0AmIzgyMDM7THVjYUJlcm5zdGVpbl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL0x1Y2FCZXJuc3RlaW4pIFxbWyMmIzgyMDM7MTM4MDRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzODA0KV0KCiMjIyMg8J+PgyBPdGhlcnMKCi0gYFtPUEVSQVRPUl1gIEF1ZGl0IHBvbGljeSBjb25maWdtYXAgZm9yIHRoZSBnYXJkZW5lciBBUEkgc2VydmVyIHJlZmVyZW5jZWQgaW4gdGhlIGdhcmRlbiByZXNvdXJjZSBpcyBub3cgdmFsaWRhdGVkLiBieSBbQCYjODIwMzthY3VtaW5vXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vYWN1bWlubykgXFtbIyYjODIwMzsxMzQ3OF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2dhcmRlbmVyL3B1bGwvMTM0NzgpXQotIGBbT1BFUkFUT1JdYCBVcG9uIGdhcmRlbmxldCBzdGFydCBhbGwgZXhpc3Rpbmcgb3BlbnRlbGVtZXRyeSBjb2xsZWN0b3IgcGlwZWxpbmVzIGluIHNob290IGNvbnRyb2wgcGxhbmVzIHdpbGwgYmUgbWlncmF0ZWQgdG8gdGhlIGV4cGVjdGVkIGNvbnRlbnQuIGJ5IFtAJiM4MjAzO25pY2t5dGRdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9uaWNreXRkKSBcW1sjJiM4MjAzOzE0MDU0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xNDA1NCldCi0gYFtPUEVSQVRPUl1gIFRoZSBtdXRhdGluZyBgU2hvb3RETlNgIGFkbWlzc2lvbiBwbHVnaW4gaXMgbm93IGFsc28gYSB2YWxpZGF0aW5nIG9uZS4gVmFsaWRhdGlvbnMgd2hpY2ggYXJlIGV4ZWN1dGVkIGJ5IHRoaXMgYWRtaXNzaW9uIHBsdWdpbiBkdXJpbmcgdGhlIG11dGF0aW9uIHBoYXNlIGFyZSBub3cgbW92ZWQgdG8gdGhlIHZhbGlkYXRpbmcgYFNob290RE5TYCBhZG1pc3Npb24gcGx1Z2luLiBieSBbQCYjODIwMztpYWxpZHpoaWtvdl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2lhbGlkemhpa292KSBcW1sjJiM4MjAzOzEzOTEwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzkxMCldCi0gYFtPUEVSQVRPUl1gIEFkZCBQcm9tZXRoZXVzIGhlYWx0aCBjaGVjayBydWxlIGluIHRoZSBjYWNoZSBQcm9tZXRoZXVzIHRvIGVuc3VyZSB0aGUgcHJlc2VuY2Ugb2YgYGt1YmVsZXRgIHZvbHVtZSBzdGF0cyBtZXRyaWNzLiBieSBbQCYjODIwMzt2aWN3aWNrZXJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS92aWN3aWNrZXIpIFxbWyMmIzgyMDM7MTM4NTVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzODU1KV0KLSBgW09QRVJBVE9SXWAgRmVkZXJhdGUgYHNob290Om5vZGVfb3BlcmF0aW5nX3N5c3RlbTpzdW1gIHRpbWUgc2VyaWVzIGZyb20gdGhlIGdhcmRlbiB0byB0aGUgbG9uZ3Rlcm0gUHJvbWV0aGV1cy4gYnkgW0AmIzgyMDM7dmljd2lja2VyXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vdmljd2lja2VyKSBcW1sjJiM4MjAzOzEzODA1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzgwNSldCi0gYFtPUEVSQVRPUl1gIEZpeCBmbGFreSB0ZXN0IGZvciBsYXRlc3QgTUNNIHJlbGVhc2UgdjAuNjEueCBieSBbQCYjODIwMztyNG1la10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3I0bWVrKSBcW1sjJiM4MjAzOzEzOTE2XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzkxNildCi0gYFtPUEVSQVRPUl1gIFRoZSBtYWpvcml0eSBvZiB0aGUgVmVydGljYWxQb2RBdXRvc2NhbGVyIHJlc291cmNlcyBtYW5hZ2VkIGJ5IEdhcmRlbmVyIGFyZSBlbmhhbmNlZCB0byBkZWZpbmUgYW4gZXhwbGljaXQgY29udGFpbmVyIHBvbGljeSBmb3IgYWxsIGNvbnRhaW5lcnMgdGhhdCBuZWVkIHRvIGJlIGF1dG8tc2NhbGVkIGFuZCB0byBoYXZlIGEgYGNhdGNoLWFsbGAgY29udGFpbmVyIHBvbGljeSAoYGNvbnRhaW5lck5hbWU6ICcqJ2AgYW5kIGBtb2RlOiBPZmZgKSBhbHdheXMuIGJ5IFtAJiM4MjAzO3ZvZWx6bW9dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS92b2Vsem1vKSBcW1sjJiM4MjAzOzEzODE5XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzgxOSldCi0gYFtPUEVSQVRPUl1gIFRoZSBmb2xsb3dpbmcgZGVwZW5kZW5jaWVzIGhhdmUgYmVlbiB1cGRhdGVkOgogIC0gYGdhcmRlbmVyL21hY2hpbmUtY29udHJvbGxlci1tYW5hZ2VyYCBmcm9tIGB2MC42MC4yYCB0byBgdjAuNjEuMWAuIFtSZWxlYXNlIE5vdGVzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvbWFjaGluZS1jb250cm9sbGVyLW1hbmFnZXIvcmVsZWFzZXMvdGFnL3YwLjYxLjEpIGJ5IFtAJiM4MjAzO2Fhcm9uZmVybl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2Fhcm9uZmVybikgXFtbIyYjODIwMzsxMzg2NV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2dhcmRlbmVyL3B1bGwvMTM4NjUpXQotIGBbT1BFUkFUT1JdYCBUaGUgZXhpc3RpbmcgYFRvb01hbnlFdGNkU25hcHNob3RDb21wYWN0aW9uSm9ic0ZhaWxpbmdgIGFsZXJ0IGhhcyBiZWVuIHJlbmFtZWQgdG8gYEV0Y2RTbmFwc2hvdENvbXBhY3Rpb25Kb2JzRmFpbGluZ0ZvclNlZWRgIGFuZCBpdHMgZXhwcmVzc2lvbiBoYXMgYmVlbiBmaXhlZCB0byBjb3JyZWN0bHkgbWVhc3VyZSB0aGUgZnJhY3Rpb24gb2YgbmFtZXNwYWNlcyB3aXRoIGZhaWx1cmVzLlwKICBUd28gbmV3IHBlci1uYW1lc3BhY2UgYWxlcnRzIChgRXRjZFNuYXBzaG90Q29tcGFjdGlvbkpvYnNGYWlsaW5nRm9yTmFtZXNwYWNlYCBhbmQgYEV0Y2RGdWxsU25hcHNob3RzRmFpbGluZ0Zvck5hbWVzcGFjZWApIGhhdmUgYmVlbiBhZGRlZCB0byBoZWxwIG9wZXJhdG9ycyBpZGVudGlmeSBzcGVjaWZpYyBzaG9vdCBjbHVzdGVycyB3aGVyZSBjb21wYWN0aW9uIGpvYnMgb3IgZnVsbCBzbmFwc2hvdHMgYXJlIGZhaWxpbmcgYWJvdmUgdGhlIDEwJSB0aHJlc2hvbGQuIGJ5IFtAJiM4MjAzO2FudmVzaHJlZGR5MThdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9hbnZlc2hyZWRkeTE4KSBcW1sjJiM4MjAzOzE0MDUzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xNDA1MyldCi0gYFtPUEVSQVRPUl1gIFVzZSBLdWJlcm5ldGVzIDEuMzQuMyBpbiB0aGUgbG9jYWwgc2V0dXAuIGJ5IFtAJiM4MjAzO3ZpY3dpY2tlcl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3ZpY3dpY2tlcikgXFtbIyYjODIwMzsxMzg1NV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2dhcmRlbmVyL3B1bGwvMTM4NTUpXQotIGBbVVNFUl1gIEFsbG93IGBOYW1lc3BhY2VkQ2xvdWRQcm9maWxlLnNwZWMubGltaXRzYCB0byBiZSBkZWNyZWFzZWQuIGJ5IFtAJiM4MjAzO0x1Y2FCZXJuc3RlaW5dKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9MdWNhQmVybnN0ZWluKSBcW1sjJiM4MjAzOzEzNzI0XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzcyNCldCi0gYFtERVZFTE9QRVJdYCBUaGUgY29tcG9uZW50IGNoZWNrbGlzdCBydWxlIGZvciAqKkRlZmluZSBhIGBWZXJ0aWNhbFBvZEF1dG9zY2FsZXJgKiogaXMgZW5oYW5jZWQgd2l0aCB0aGUgY29udmVudGlvbiB0aGF0IGEgVlBBIHNob3VsZCBkZWZpbmUgYW4gZXhwbGljaXQgY29udGFpbmVyIHBvbGljeSBmb3IgYWxsIGNvbnRhaW5lcnMgdGhhdCBuZWVkIHRvIGJlIGF1dG8tc2NhbGVkIGFuZCBzaG91bGQgaGF2ZSBhIGBjYXRjaC1hbGxgIGNvbnRhaW5lciBwb2xpY3kgKGBjb250YWluZXJOYW1lOiAnKidgIGFuZCBgbW9kZTogT2ZmYCkgYWx3YXlzLiBGb3IgbW9yZSBkZXRhaWxzLCByZWZlciB0byB0aGVbQ29tcG9uZW50IENoZWNrbGlzdF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2dhcmRlbmVyL2Jsb2IvdjEuMTM2LjAvZG9jcy9kZXZlbG9wbWVudC9jb21wb25lbnQtY2hlY2tsaXN0Lm1kKS4gYnkgW0AmIzgyMDM7dm9lbHptb10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3ZvZWx6bW8pIFxbWyMmIzgyMDM7MTM4MTldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzODE5KV0KLSBgW0RFVkVMT1BFUl1gIFRoZSBUTSB0ZXN0cyBhcmUgbm93IGFkYXB0ZWQgdG8gcnVuIGFnYWluc3QgS3ViZXJuZXRlcyAxLjM1LiBieSBbQCYjODIwMztpYWxpZHpoaWtvdl0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2lhbGlkemhpa292KSBcW1sjJiM4MjAzOzEzOTk1XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzk5NSldCi0gYFtERVBFTkRFTkNZXWAgVGhlIGZvbGxvd2luZyBkZXBlbmRlbmNpZXMgaGF2ZSBiZWVuIHVwZGF0ZWQ6CiAgLSBgZ2FyZGVuZXIvZXRjZC1kcnVpZGAgZnJvbSBgdjAuMzQuMGAgdG8gYHYwLjM1LjBgLiBbUmVsZWFzZSBOb3Rlc10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2V0Y2QtZHJ1aWQvcmVsZWFzZXMvdGFnL3YwLjM1LjApCiAgLSBgZ2l0aHViLmNvbS9nYXJkZW5lci9ldGNkLWRydWlkL2FwaWAgZnJvbSBgdjAuMzQuMGAgdG8gYHYwLjM1LjBgLiBieSBbQCYjODIwMztyZW5vcm1hbGl6ZV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL3Jlbm9ybWFsaXplKSBcW1sjJiM4MjAzOzEzOTUwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzk1MCldCi0gYFtERVBFTkRFTkNZXWAgVGhlIGZvbGxvd2luZyBkZXBlbmRlbmNpZXMgaGF2ZSBiZWVuIHVwZGF0ZWQ6CiAgLSBgZ2FyZGVuZXIvZGFzaGJvYXJkYCBmcm9tIGAxLjgzLjNgIHRvIGAxLjgzLjRgLiBbUmVsZWFzZSBOb3Rlc10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2Rhc2hib2FyZC9yZWxlYXNlcy90YWcvMS44My40KSBieSBbQCYjODIwMztnYXJkZW5lci1jaS1yb2JvdF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyLWNpLXJvYm90KSBcW1sjJiM4MjAzOzEzOTcwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzk3MCldCi0gYFtERVBFTkRFTkNZXWAgVGhlIGZvbGxvd2luZyBkZXBlbmRlbmNpZXMgaGF2ZSBiZWVuIHVwZGF0ZWQ6CiAgLSBgcmVnaXN0cnkuazhzLmlvL2luZ3Jlc3MtbmdpbngvY29udHJvbGxlci1jaHJvb3RgIGZyb20gYHYxLjE0LjFgIHRvIGB2MS4xNC4yYC4gYnkgW0AmIzgyMDM7Z2FyZGVuZXItY2ktcm9ib3RdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci1jaS1yb2JvdCkgXFtbIyYjODIwMzsxMzg4MF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2dhcmRlbmVyL3B1bGwvMTM4ODApXQotIGBbREVQRU5ERU5DWV1gIFRoZSBmb2xsb3dpbmcgZGVwZW5kZW5jaWVzIGhhdmUgYmVlbiB1cGRhdGVkOgogIC0gYGdhcmRlbmVyL2Rhc2hib2FyZGAgZnJvbSBgMS44My40YCB0byBgMS44My41YC4gW1JlbGVhc2UgTm90ZXNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9kYXNoYm9hcmQvcmVsZWFzZXMvdGFnLzEuODMuNSkgYnkgW0AmIzgyMDM7Z2FyZGVuZXItY2ktcm9ib3RdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci1jaS1yb2JvdCkgXFtbIyYjODIwMzsxMzk4M10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2dhcmRlbmVyL3B1bGwvMTM5ODMpXQotIGBbREVQRU5ERU5DWV1gIFRoZSBmb2xsb3dpbmcgZGVwZW5kZW5jaWVzIGhhdmUgYmVlbiB1cGRhdGVkOgogIC0gYHJlZ2lzdHJ5Lms4cy5pby9jcGEvY2x1c3Rlci1wcm9wb3J0aW9uYWwtYXV0b3NjYWxlcmAgZnJvbSBgdjEuOS4wYCB0byBgdjEuMTAuM2AuIGJ5IFtAJiM4MjAzO2dhcmRlbmVyLWNpLXJvYm90XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXItY2ktcm9ib3QpIFxbWyMmIzgyMDM7MTM5MDVdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzOTA1KV0KLSBgW0RFUEVOREVOQ1ldYCBUaGUgZm9sbG93aW5nIGRlcGVuZGVuY2llcyBoYXZlIGJlZW4gdXBkYXRlZDoKICAtIGBnY3IuaW8vaXN0aW8tcmVsZWFzZS9waWxvdGAgZnJvbSBgMS4yNy41YCB0byBgMS4yNy42YC4KICAtIGBnY3IuaW8vaXN0aW8tcmVsZWFzZS9wcm94eXYyYCBmcm9tIGAxLjI3LjVgIHRvIGAxLjI3LjZgLgogIC0gYGlzdGlvLmlvL2FwaWAgZnJvbSBgdjEuMjcuNWAgdG8gYHYxLjI3LjZgLiBieSBbQCYjODIwMztnYXJkZW5lci1jaS1yb2JvdF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyLWNpLXJvYm90KSBcW1sjJiM4MjAzOzEzOTg2XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzk4NildCi0gYFtERVBFTkRFTkNZXWAgVGhlIGZvbGxvd2luZyBkZXBlbmRlbmNpZXMgaGF2ZSBiZWVuIHVwZGF0ZWQ6CiAgLSBgZ2FyZGVuZXIvZGFzaGJvYXJkYCBmcm9tIGAxLjgzLjJgIHRvIGAxLjgzLjNgLiBbUmVsZWFzZSBOb3Rlc10oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2Rhc2hib2FyZC9yZWxlYXNlcy90YWcvMS44My4zKSBieSBbQCYjODIwMztnYXJkZW5lci1jaS1yb2JvdF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyLWNpLXJvYm90KSBcW1sjJiM4MjAzOzEzOTE3XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzkxNyldCi0gYFtERVBFTkRFTkNZXWAgVGhlIGZvbGxvd2luZyBkZXBlbmRlbmNpZXMgaGF2ZSBiZWVuIHVwZGF0ZWQ6CiAgLSBgZ2FyZGVuZXIvdGVybWluYWwtY29udHJvbGxlci1tYW5hZ2VyYCBmcm9tIGB2MC4zNC4wYCB0byBgdjAuMzUuMGAuIFtSZWxlYXNlIE5vdGVzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvdGVybWluYWwtY29udHJvbGxlci1tYW5hZ2VyL3JlbGVhc2VzL3RhZy92MC4zNS4wKSBieSBbQCYjODIwMztnYXJkZW5lci1jaS1yb2JvdF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyLWNpLXJvYm90KSBcW1sjJiM4MjAzOzEzOTUzXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzk1MyldCi0gYFtERVBFTkRFTkNZXWAgVGhlIGZvbGxvd2luZyBkZXBlbmRlbmNpZXMgaGF2ZSBiZWVuIHVwZGF0ZWQ6CiAgLSBgZ2FyZGVuZXIvdnBuMmAgZnJvbSBgMC40Ni4xYCB0byBgMC40Ni4yYC4gW1JlbGVhc2UgTm90ZXNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci92cG4yL3JlbGVhc2VzL3RhZy8wLjQ2LjIpIGJ5IFtAJiM4MjAzO2dhcmRlbmVyLWNpLXJvYm90XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXItY2ktcm9ib3QpIFxbWyMmIzgyMDM7MTM5NTldKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzOTU5KV0KLSBgW0RFUEVOREVOQ1ldYCBUaGUgZm9sbG93aW5nIGRlcGVuZGVuY2llcyBoYXZlIGJlZW4gdXBkYXRlZDoKICAtIGBxdWF5LmlvL3Byb21ldGhldXMvYWxlcnRtYW5hZ2VyYCBmcm9tIGB2MC4zMC4xYCB0byBgdjAuMzEuMGAuIGJ5IFtAJiM4MjAzO2dhcmRlbmVyLWNpLXJvYm90XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXItY2ktcm9ib3QpIFxbWyMmIzgyMDM7MTM5MzFdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzOTMxKV0KLSBgW0RFUEVOREVOQ1ldYCBUaGUgZm9sbG93aW5nIGRlcGVuZGVuY2llcyBoYXZlIGJlZW4gdXBkYXRlZDoKICAtIGByZWdpc3RyeS5rOHMuaW8vbWV0cmljcy1zZXJ2ZXIvbWV0cmljcy1zZXJ2ZXJgIGZyb20gYHYwLjguMGAgdG8gYHYwLjguMWAuIGJ5IFtAJiM4MjAzO2dhcmRlbmVyLWNpLXJvYm90XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXItY2ktcm9ib3QpIFxbWyMmIzgyMDM7MTM5MTJdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzOTEyKV0KLSBgW0RFUEVOREVOQ1ldYCBUaGUgZm9sbG93aW5nIGRlcGVuZGVuY2llcyBoYXZlIGJlZW4gdXBkYXRlZDoKICAtIGByZWdpc3RyeS5rOHMuaW8vaW5ncmVzcy1uZ2lueC9jb250cm9sbGVyLWNocm9vdGAgZnJvbSBgdjEuMTQuMmAgdG8gYHYxLjE0LjNgLiBieSBbQCYjODIwMztnYXJkZW5lci1jaS1yb2JvdF0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyLWNpLXJvYm90KSBcW1sjJiM4MjAzOzEzOTQwXShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXIvZ2FyZGVuZXIvcHVsbC8xMzk0MCldCi0gYFtERVBFTkRFTkNZXWAgVGhlIGZvbGxvd2luZyBkZXBlbmRlbmNpZXMgaGF2ZSBiZWVuIHVwZGF0ZWQ6CiAgLSBgZ2FyZGVuZXIvYWxwaW5lLWNvbm50cmFja2AgZnJvbSBgMy4yMy4yYCB0byBgMy4yMy4zYC4gW1JlbGVhc2UgTm90ZXNdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9hbHBpbmUtY29ubnRyYWNrL3JlbGVhc2VzL3RhZy8zLjIzLjMpIGJ5IFtAJiM4MjAzO2dhcmRlbmVyLWNpLXJvYm90XShodHRwczovL3JlZGlyZWN0LmdpdGh1Yi5jb20vZ2FyZGVuZXItY2ktcm9ib3QpIFxbWyMmIzgyMDM7MTM5NDhdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci9nYXJkZW5lci9wdWxsLzEzOTQ4KV0KLSBgW0RFUEVOREVOQ1ldYCBUaGUgZm9sbG93aW5nIGRlcGVuZGVuY2llcyBoYXZlIGJlZW4gdXBkYXRlZDoKICAtIGBxdWF5LmlvL2tpd2lncmlkL2s4cy1zaWRlY2FyYCBmcm9tIGAyLjQuMGAgdG8gYDIuNS4wYC4gYnkgW0AmIzgyMDM7Z2FyZGVuZXItY2ktcm9ib3RdKGh0dHBzOi8vcmVkaXJlY3QuZ2l0aHViLmNvbS9nYXJkZW5lci1jaS1yb2JvdCkgXFtbIyYjODIwMzsxMzgzOV0oaHR0cHM6Ly9yZWRpcmVjdC5naXRodWIuY29tL2dhcmRlbmVyL2dhcmRlbmVyL3B1bGwvMTM4MzkpXQoKIyMjIyBIZWxtIENoYXJ0cwoKLSBjb250cm9scGxhbmU6IGBldXJvcGUtZG9ja2VyLnBrZy5kZXYvZ2FyZGVuZXItcHJvamVjdC9yZWxlYXNlcy9jaGFydHMvZ2FyZGVuZXIvY29udHJvbHBsYW5lOnYxLjEzNi4wYAotIGdhcmRlbmxldDogYGV1cm9wZS1kb2NrZXIucGtnLmRldi9nYXJkZW5lci1wcm9qZWN0L3JlbGVhc2VzL2NoYXJ0cy9nYXJkZW5lci9nYXJkZW5sZXQ6djEuMTM2LjBgCi0gb3BlcmF0b3I6IGBldXJvcGUtZG9ja2VyLnBrZy5kZXYvZ2FyZGVuZXItcHJvamVjdC9yZWxlYXNlcy9jaGFydHMvZ2FyZGVuZXIvb3BlcmF0b3I6djEuMTM2LjBgCi0gcmVzb3VyY2UtbWFuYWdlcjogYGV1cm9wZS1kb2NrZXIucGtnLmRldi9nYXJkZW5lci1wcm9qZWN0L3JlbGVhc2VzL2NoYXJ0cy9nYXJkZW5lci9yZXNvdXJjZS1tYW5hZ2VyOnYxLjEzNi4wYAoKIyMjIyBDb250YWluZXIgKE9DSSkgSW1hZ2VzCgotIGFkbWlzc2lvbi1jb250cm9sbGVyOiBgZXVyb3BlLWRvY2tlci5wa2cuZGV2L2dhcmRlbmVyLXByb2plY3QvcmVsZWFzZXMvZ2FyZGVuZXIvYWRtaXNzaW9uLWNvbnRyb2xsZXI6djEuMTM2LjBgCi0gYXBpc2VydmVyOiBgZXVyb3BlLWRvY2tlci5wa2cuZGV2L2dhcmRlbmVyLXByb2plY3QvcmVsZWFzZXMvZ2FyZGVuZXIvYXBpc2VydmVyOnYxLjEzNi4wYAotIGNvbnRyb2xsZXItbWFuYWdlcjogYGV1cm9wZS1kb2NrZXIucGtnLmRldi9nYXJkZW5lci1wcm9qZWN0L3JlbGVhc2VzL2dhcmRlbmVyL2NvbnRyb2xsZXItbWFuYWdlcjp2MS4xMzYuMGAKLSBnYXJkZW5hZG06IGBldXJvcGUtZG9ja2VyLnBrZy5kZXYvZ2FyZGVuZXItcHJvamVjdC9yZWxlYXNlcy9nYXJkZW5lci9nYXJkZW5hZG06djEuMTM2LjBgCi0gZ2FyZGVubGV0OiBgZXVyb3BlLWRvY2tlci5wa2cuZGV2L2dhcmRlbmVyLXByb2plY3QvcmVsZWFzZXMvZ2FyZGVuZXIvZ2FyZGVubGV0OnYxLjEzNi4wYAotIG5vZGUtYWdlbnQ6IGBldXJvcGUtZG9ja2VyLnBrZy5kZXYvZ2FyZGVuZXItcHJvamVjdC9yZWxlYXNlcy9nYXJkZW5lci9ub2RlLWFnZW50OnYxLjEzNi4wYAotIG9wZXJhdG9yOiBgZXVyb3BlLWRvY2tlci5wa2cuZGV2L2dhcmRlbmVyLXByb2plY3QvcmVsZWFzZXMvZ2FyZGVuZXIvb3BlcmF0b3I6djEuMTM2LjBgCi0gcmVzb3VyY2UtbWFuYWdlcjogYGV1cm9wZS1kb2NrZXIucGtnLmRldi9nYXJkZW5lci1wcm9qZWN0L3JlbGVhc2VzL2dhcmRlbmVyL3Jlc291cmNlLW1hbmFnZXI6djEuMTM2LjBgCi0gc2NoZWR1bGVyOiBgZXVyb3BlLWRvY2tlci5wa2cuZGV2L2dhcmRlbmVyLXByb2plY3QvcmVsZWFzZXMvZ2FyZGVuZXIvc2NoZWR1bGVyOnYxLjEzNi4wYAoKPC9kZXRhaWxzPgoKLS0tCgojIyMgQ29uZmlndXJhdGlvbgoK8J+ThSAqKlNjaGVkdWxlKio6IEJyYW5jaCBjcmVhdGlvbiAtIEF0IGFueSB0aW1lIChubyBzY2hlZHVsZSBkZWZpbmVkKSwgQXV0b21lcmdlIC0gQXQgYW55IHRpbWUgKG5vIHNjaGVkdWxlIGRlZmluZWQpLgoK8J+apiAqKkF1dG9tZXJnZSoqOiBEaXNhYmxlZCBieSBjb25maWcuIFBsZWFzZSBtZXJnZSB0aGlzIG1hbnVhbGx5IG9uY2UgeW91IGFyZSBzYXRpc2ZpZWQuCgrimbsgKipSZWJhc2luZyoqOiBXaGVuZXZlciBQUiBpcyBiZWhpbmQgYmFzZSBicmFuY2gsIG9yIHlvdSB0aWNrIHRoZSByZWJhc2UvcmV0cnkgY2hlY2tib3guCgrwn5SVICoqSWdub3JlKio6IENsb3NlIHRoaXMgUFIgYW5kIHlvdSB3b24ndCBiZSByZW1pbmRlZCBhYm91dCB0aGlzIHVwZGF0ZSBhZ2Fpbi4KCi0tLQoKIC0gWyBdIDwhLS0gcmViYXNlLWNoZWNrIC0tPklmIHlvdSB3YW50IHRvIHJlYmFzZS9yZXRyeSB0aGlzIFBSLCBjaGVjayB0aGlzIGJveAoKLS0tCgpUaGlzIFBSIHdhcyBnZW5lcmF0ZWQgYnkgW01lbmQgUmVub3ZhdGVdKGh0dHBzOi8vbWVuZC5pby9yZW5vdmF0ZS8pLiBWaWV3IHRoZSBbcmVwb3NpdG9yeSBqb2IgbG9nXShodHRwczovL2RldmVsb3Blci5tZW5kLmlvL2dpdGh1Yi9ZQUtFY2xvdWQveWFrZS1hbnNpYmxlKS4KPCEtLXJlbm92YXRlLWRlYnVnOmV5SmpjbVZoZEdWa1NXNVdaWElpT2lJME15NDRMalVpTENKMWNHUmhkR1ZrU1c1V1pYSWlPaUkwTXk0NExqVWlMQ0owWVhKblpYUkNjbUZ1WTJnaU9pSnRZV2x1SWl3aWJHRmlaV3h6SWpwYkluSmxibTkyWVhSbElsMTktLT4K
      patchset: be3463606794143a98744cc08332321c7a95f31d
      pipeline: check
      playbook_context:
        playbook_projects:
          trusted/project_0/github.com/YAKEcloud/zuul-config:
            canonical_name: github.com/YAKEcloud/zuul-config
            checkout: main
            commit: 187ca9c93783cf78b5778e0c84c687f3aefbe0a7
          trusted/project_1/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
          untrusted/project_0/github.com/osism/zuul-jobs:
            canonical_name: github.com/osism/zuul-jobs
            checkout: main
            commit: a01eed06dffe368c1d01819193bfadccb137414d
          untrusted/project_1/github.com/YAKEcloud/zuul-config:
            canonical_name: github.com/YAKEcloud/zuul-config
            checkout: main
            commit: 187ca9c93783cf78b5778e0c84c687f3aefbe0a7
          untrusted/project_2/github.com/osism/openinfra-zuul-jobs:
            canonical_name: github.com/osism/openinfra-zuul-jobs
            checkout: master
            commit: 397240f42127868e42e86e6aeb120c2cb092d117
        playbooks:
        - path: untrusted/project_0/github.com/osism/zuul-jobs/playbooks/hadolint/run.yaml
          roles:
          - checkout: main
            checkout_description: playbook branch
            link_name: ansible/playbook_0/role_0/zuul-jobs
            link_target: untrusted/project_0/github.com/osism/zuul-jobs
            role_path: ansible/playbook_0/role_0/zuul-jobs/roles
          - checkout: main
            checkout_description: zuul branch
            link_name: ansible/playbook_0/role_1/zuul-config
            link_target: untrusted/project_1/github.com/YAKEcloud/zuul-config
            role_path: ansible/playbook_0/role_1/zuul-config/roles
          - checkout: master
            checkout_description: project default branch
            link_name: ansible/playbook_0/role_2/openinfra-zuul-jobs
            link_target: untrusted/project_2/github.com/osism/openinfra-zuul-jobs
            role_path: ansible/playbook_0/role_2/openinfra-zuul-jobs/roles
      post_review: false
      post_timeout: null
      pre_timeout: null
      project:
        canonical_hostname: github.com
        canonical_name: github.com/YAKEcloud/yake-ansible
        name: YAKEcloud/yake-ansible
        short_name: yake-ansible
        src_dir: src/github.com/YAKEcloud/yake-ansible
      projects:
        github.com/YAKEcloud/yake-ansible:
          canonical_hostname: github.com
          canonical_name: github.com/YAKEcloud/yake-ansible
          checkout: main
          checkout_description: zuul branch
          commit: 6d484678efd6877d20ac555b30c62f4342bdea22
          name: YAKEcloud/yake-ansible
          required: false
          short_name: yake-ansible
          src_dir: src/github.com/YAKEcloud/yake-ansible
      ref: refs/pull/502/head
      resources: {}
      tenant: yakecloud
      timeout: 1800
      topic: null
      voting: true
